# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 09:10:47 # Log Creation Date: 22.09.2020 19:23:32.685 Process: id = "1" image_name = "look (uploaded by matt browning (via weblink) sep 22 2020 11-03-47 utc).exe" filename = "c:\\users\\fd1hvy\\desktop\\look (uploaded by matt browning (via weblink) sep 22 2020 11-03-47 utc).exe" page_root = "0xc6c2000" os_pid = "0xd90" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x7e0" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\look (uploaded by Matt Browning (via weblink) Sep 22 2020 11-03-47 UTC).exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000116db" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x1d4 [0049.108] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x77190000 [0049.109] GetProcAddress (hModule=0x77190000, lpProcName="AddDllDirectory") returned 0x7464bbb0 [0049.109] GetProcAddress (hModule=0x77190000, lpProcName="AddVectoredContinueHandler") returned 0x775d28c0 [0049.109] GetProcAddress (hModule=0x77190000, lpProcName="GetQueuedCompletionStatusEx") returned 0x771a5300 [0049.109] GetProcAddress (hModule=0x77190000, lpProcName="LoadLibraryExW") returned 0x771a5ac0 [0049.109] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x759a0000 [0049.851] GetProcAddress (hModule=0x759a0000, lpProcName="SystemFunction036") returned 0x73fe29e0 [0049.851] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77520000 [0049.851] GetProcAddress (hModule=0x77520000, lpProcName="NtWaitForSingleObject") returned 0x77591d30 [0049.851] GetProcAddress (hModule=0x77520000, lpProcName="wine_get_version") returned 0x0 [0049.851] SetErrorMode (uMode=0x2) returned 0x0 [0049.852] SetErrorMode (uMode=0x8003) returned 0x2 [0049.852] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x4490d0) returned 0x7e6e88 [0049.852] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4490e0) returned 0x0 [0049.852] SetConsoleCtrlHandler (HandlerRoutine=0x4490f0, Add=1) returned 1 [0049.852] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0049.852] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x19fe88, lpSystemAffinityMask=0x19fe84 | out: lpProcessAffinityMask=0x19fe88, lpSystemAffinityMask=0x19fe84) returned 1 [0049.853] GetSystemInfo (in: lpSystemInfo=0x19fe8c | out: lpSystemInfo=0x19fe8c*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x4501)) [0049.853] SetProcessPriorityBoost (hProcess=0xffffffff, bDisablePriorityBoost=1) returned 1 [0049.853] VirtualAlloc (lpAddress=0x600000, dwSize=0x30202000, flAllocationType=0x2000, flProtect=0x4) returned 0x0 [0049.853] VirtualAlloc (lpAddress=0x0, dwSize=0x30202000, flAllocationType=0x2000, flProtect=0x4) returned 0xa60000 [0049.881] VirtualAlloc (lpAddress=0xfb9a000, dwSize=0x10c6000, flAllocationType=0x1000, flProtect=0x4) returned 0xfb9a000 [0049.949] VirtualAlloc (lpAddress=0xa60000, dwSize=0x22000, flAllocationType=0x1000, flProtect=0x4) returned 0xa60000 [0049.949] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x9d0000 [0049.949] VirtualAlloc (lpAddress=0x10c60000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x10c60000 [0049.951] VirtualAlloc (lpAddress=0xfb8a000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xfb8a000 [0049.951] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x30000 [0049.951] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x780000 [0049.952] SystemFunction036 (in: RandomBuffer=0x5a88e0, RandomBufferLength=0x40 | out: RandomBuffer=0x5a88e0) returned 1 [0049.952] GetEnvironmentStringsW () returned 0x7e87e0* [0049.953] FreeEnvironmentStringsW (penv=0x7e87e0) returned 1 [0049.953] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x19fecc, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x19fecc*=0x128) returned 1 [0049.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x100000, lpStartAddress=0x4491f0, lpParameter=0x10c86000, dwCreationFlags=0x10000, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c [0049.954] CloseHandle (hObject=0x12c) returned 1 [0049.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x100000, lpStartAddress=0x4491f0, lpParameter=0x10c86240, dwCreationFlags=0x10000, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c [0049.955] CloseHandle (hObject=0x12c) returned 1 [0049.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x100000, lpStartAddress=0x4491f0, lpParameter=0x10c86480, dwCreationFlags=0x10000, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c [0049.955] CloseHandle (hObject=0x12c) returned 1 [0049.955] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x12c [0049.955] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0049.970] VirtualAlloc (lpAddress=0x0, dwSize=0xafc7c, flAllocationType=0x3000, flProtect=0x4) returned 0x31130000 [0049.971] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x311e0000 [0049.971] LoadLibraryExW (lpLibFileName="kernel32.dll", hFile=0x0, dwFlags=0x800) returned 0x77190000 [0049.971] GetProcAddress (hModule=0x77190000, lpProcName="GetStdHandle") returned 0x771a5330 [0049.971] GetStdHandle (nStdHandle=0xfffffff6) returned 0x8c [0049.971] GetProcAddress (hModule=0x77190000, lpProcName="SetHandleInformation") returned 0x771feae0 [0049.971] SetHandleInformation (hObject=0x8c, dwMask=0x1, dwFlags=0x0) returned 1 [0049.971] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0049.971] SetHandleInformation (hObject=0x90, dwMask=0x1, dwFlags=0x0) returned 1 [0049.971] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0049.971] SetHandleInformation (hObject=0x94, dwMask=0x1, dwFlags=0x0) returned 1 [0049.972] LoadLibraryExW (lpLibFileName="ws2_32.dll", hFile=0x0, dwFlags=0x800) returned 0x77120000 [0049.972] GetProcAddress (hModule=0x77120000, lpProcName="WSAStartup") returned 0x77125b40 [0049.972] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x10c97df4 | out: lpWSAData=0x10c97df4) returned 0 [0049.975] GetProcAddress (hModule=0x77190000, lpProcName="CancelIoEx") returned 0x771a42b0 [0049.976] GetProcAddress (hModule=0x77190000, lpProcName="SetFileCompletionNotificationModes") returned 0x771e50d0 [0049.976] GetProcAddress (hModule=0x77120000, lpProcName="WSAEnumProtocolsW") returned 0x7713b2f0 [0049.976] WSAEnumProtocolsW (in: lpiProtocols=0x10cb8f58, lpProtocolBuffer=0x10cb8f60, lpdwBufferLength=0x10cb8f54 | out: lpProtocolBuffer=0x10cb8f60, lpdwBufferLength=0x10cb8f54) returned 4 [0050.049] SetEvent (hEvent=0x168) returned 1 [0050.049] GetProcAddress (hModule=0x77190000, lpProcName="GetConsoleMode") returned 0x771ff450 [0050.049] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x10cbdf70 | out: lpMode=0x10cbdf70) returned 1 [0050.058] SetEvent (hEvent=0x160) returned 1 [0050.058] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x10cbdf70 | out: lpMode=0x10cbdf70) returned 1 [0050.059] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x10cbdf70 | out: lpMode=0x10cbdf70) returned 1 [0050.060] GetProcAddress (hModule=0x77190000, lpProcName="GetCommandLineW") returned 0x771a4cc0 [0050.060] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\look (uploaded by Matt Browning (via weblink) Sep 22 2020 11-03-47 UTC).exe\" " [0050.061] GetProcAddress (hModule=0x77190000, lpProcName="GetVersion") returned 0x771a56c0 [0050.061] GetVersion () returned 0x23f00206 [0050.062] GetProcAddress (hModule=0x77190000, lpProcName="CreateFileW") returned 0x771fed10 [0050.066] CreateFileW (lpFileName="A:\\" (normalized: "a:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.079] GetProcAddress (hModule=0x77190000, lpProcName="FindFirstFileW") returned 0x771fedf0 [0050.079] FindFirstFileW (in: lpFileName="A:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.084] CreateFileW (lpFileName="B:\\" (normalized: "b:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.084] FindFirstFileW (in: lpFileName="B:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.084] CreateFileW (lpFileName="C:\\" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.084] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x7e3ea8 [0050.086] GetProcAddress (hModule=0x77190000, lpProcName="FindClose") returned 0x771fed70 [0050.087] FindClose (in: hFindFile=0x7e3ea8 | out: hFindFile=0x7e3ea8) returned 1 [0050.091] CreateFileW (lpFileName="D:\\" (normalized: "d:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.091] FindFirstFileW (in: lpFileName="D:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.095] CreateFileW (lpFileName="E:\\" (normalized: "e:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.095] FindFirstFileW (in: lpFileName="E:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.099] CreateFileW (lpFileName="F:\\" (normalized: "f:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.099] FindFirstFileW (in: lpFileName="F:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.103] CreateFileW (lpFileName="G:\\" (normalized: "g:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.107] FindFirstFileW (in: lpFileName="G:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.112] CreateFileW (lpFileName="H:\\" (normalized: "h:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.112] FindFirstFileW (in: lpFileName="H:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.116] CreateFileW (lpFileName="I:\\" (normalized: "i:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.116] FindFirstFileW (in: lpFileName="I:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.120] CreateFileW (lpFileName="J:\\" (normalized: "j:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.122] FindFirstFileW (in: lpFileName="J:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.128] CreateFileW (lpFileName="K:\\" (normalized: "k:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.129] FindFirstFileW (in: lpFileName="K:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.134] CreateFileW (lpFileName="L:\\" (normalized: "l:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.135] FindFirstFileW (in: lpFileName="L:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.139] CreateFileW (lpFileName="M:\\" (normalized: "m:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.140] FindFirstFileW (in: lpFileName="M:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.144] CreateFileW (lpFileName="N:\\" (normalized: "n:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.144] FindFirstFileW (in: lpFileName="N:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.148] CreateFileW (lpFileName="O:\\" (normalized: "o:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.148] FindFirstFileW (in: lpFileName="O:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.152] CreateFileW (lpFileName="P:\\" (normalized: "p:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.152] FindFirstFileW (in: lpFileName="P:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.155] CreateFileW (lpFileName="Q:\\" (normalized: "q:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.159] FindFirstFileW (in: lpFileName="Q:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.163] CreateFileW (lpFileName="R:\\" (normalized: "r:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.163] FindFirstFileW (in: lpFileName="R:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.167] CreateFileW (lpFileName="S:\\" (normalized: "s:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.167] FindFirstFileW (in: lpFileName="S:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.171] CreateFileW (lpFileName="T:\\" (normalized: "t:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.171] FindFirstFileW (in: lpFileName="T:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.175] CreateFileW (lpFileName="U:\\" (normalized: "u:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.175] FindFirstFileW (in: lpFileName="U:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.179] CreateFileW (lpFileName="V:\\" (normalized: "v:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.179] FindFirstFileW (in: lpFileName="V:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.183] CreateFileW (lpFileName="W:\\" (normalized: "w:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.183] FindFirstFileW (in: lpFileName="W:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.186] CreateFileW (lpFileName="X:\\" (normalized: "x:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.187] FindFirstFileW (in: lpFileName="X:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.190] CreateFileW (lpFileName="Y:\\" (normalized: "y:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.190] FindFirstFileW (in: lpFileName="Y:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.194] CreateFileW (lpFileName="Z:\\" (normalized: "z:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.195] FindFirstFileW (in: lpFileName="Z:\\*", lpFindFileData=0x10cbdbe0 | out: lpFindFileData=0x10cbdbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0050.195] SetEvent (hEvent=0x158) returned 1 [0050.195] GetProcAddress (hModule=0x77190000, lpProcName="GetFileAttributesExW") returned 0x771fef00 [0050.195] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x31b3b9e4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x865407b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0x865407b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0050.195] CreateFileW (lpFileName="C:\\" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.196] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x10c89b94 | out: lpFindFileData=0x10c89b94*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x7e3ea8 [0050.196] GetProcAddress (hModule=0x77190000, lpProcName="FindNextFileW") returned 0x771fee40 [0050.196] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd84572f7, ftLastWriteTime.dwHighDateTime=0x1d63331, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0050.197] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xd9c77627, ftLastWriteTime.dwHighDateTime=0x1d63331, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0050.197] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0050.197] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1d58e3e3, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x1d58e3e3, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0050.197] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0050.197] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0050.197] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0050.197] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xd9c9d88a, ftLastWriteTime.dwHighDateTime=0x1d63331, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0050.197] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0050.197] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0050.197] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0050.197] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0050.197] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89bb4 | out: lpFindFileData=0x10c89bb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.197] FindClose (in: hFindFile=0x7e3ea8 | out: hFindFile=0x7e3ea8) returned 1 [0050.197] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent" (normalized: "c:\\$getcurrent"), fInfoLevelId=0x0, lpFileInformation=0x10cd27d8 | out: lpFileInformation=0x10cd27d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.205] CreateFileW (lpFileName="C:\\$GetCurrent" (normalized: "c:\\$getcurrent"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.205] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7e3ea8 [0050.205] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.205] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0050.205] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0050.205] FindNextFileW (in: hFindFile=0x7e3ea8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.205] FindClose (in: hFindFile=0x7e3ea8 | out: hFindFile=0x7e3ea8) returned 1 [0050.206] CreateFileW (lpFileName="C:\\$GetCurrent\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\$getcurrent\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0050.211] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d94 | out: lpMode=0x10c89d94) returned 0 [0050.211] GetProcAddress (hModule=0x77190000, lpProcName="GetFileType") returned 0x771fef60 [0050.211] GetFileType (hFile=0x164) returned 0x1 [0050.212] GetProcAddress (hModule=0x77190000, lpProcName="SetFilePointerEx") returned 0x771ff130 [0050.212] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0050.212] GetProcAddress (hModule=0x77190000, lpProcName="WriteFile") returned 0x771ff180 [0050.212] WriteFile (in: hFile=0x164, lpBuffer=0x10cea480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d84, lpOverlapped=0x10c89d88 | out: lpBuffer=0x10cea480*, lpNumberOfBytesWritten=0x10c89d84*=0x464, lpOverlapped=0x10c89d88) returned 1 [0050.213] GetFileType (hFile=0x164) returned 0x1 [0050.213] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0050.213] GetProcAddress (hModule=0x77190000, lpProcName="CloseHandle") returned 0x771feab0 [0050.213] CloseHandle (hObject=0x164) returned 1 [0050.214] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs" (normalized: "c:\\$getcurrent\\logs"), fInfoLevelId=0x0, lpFileInformation=0x10cd28c8 | out: lpFileInformation=0x10cd28c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.218] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs" (normalized: "c:\\$getcurrent\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.218] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efc78 [0050.235] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.235] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0050.235] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0050.235] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0050.235] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.235] FindClose (in: hFindFile=0x7efc78 | out: hFindFile=0x7efc78) returned 1 [0050.236] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\$getcurrent\\logs\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0050.237] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0050.237] GetFileType (hFile=0x164) returned 0x1 [0050.237] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0050.237] WriteFile (in: hFile=0x164, lpBuffer=0x10cead80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cead80*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0050.238] GetFileType (hFile=0x164) returned 0x1 [0050.238] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0050.238] CloseHandle (hObject=0x164) returned 1 [0050.238] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x10cd2a08 | out: lpFileInformation=0x10cd2a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0050.268] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0050.268] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0050.268] GetFileType (hFile=0x164) returned 0x1 [0050.268] GetProcAddress (hModule=0x77190000, lpProcName="GetFileInformationByHandle") returned 0x771fef20 [0050.268] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0050.268] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x759a0000 [0050.269] GetProcAddress (hModule=0x759a0000, lpProcName="CryptAcquireContextW") returned 0x759bfa40 [0050.269] CryptAcquireContextW (in: phProv=0x10cae070, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x10cae070*=0x7e0190) returned 1 [0050.752] SetEvent (hEvent=0x168) returned 1 [0050.752] GetProcAddress (hModule=0x759a0000, lpProcName="CryptGenRandom") returned 0x759c0730 [0050.752] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e020 | out: pbBuffer=0x10c6e020) returned 1 [0050.752] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0050.753] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d04001 | out: pbBuffer=0x10d04001) returned 1 [0050.753] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d04201 | out: pbBuffer=0x10d04201) returned 1 [0050.754] GetProcAddress (hModule=0x77190000, lpProcName="ReadFile") returned 0x771ff090 [0050.754] ReadFile (in: hFile=0x164, lpBuffer=0x10c68270, nNumberOfBytesToRead=0x28, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10c68270*, lpNumberOfBytesRead=0x10c89c54*=0x28, lpOverlapped=0x0) returned 1 [0050.755] GetFileType (hFile=0x164) returned 0x1 [0050.755] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.755] WriteFile (in: hFile=0x164, lpBuffer=0x10c682a0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c682a0*, lpNumberOfBytesWritten=0x10c89c54*=0x28, lpOverlapped=0x10c89c58) returned 1 [0050.755] GetFileType (hFile=0x164) returned 0x1 [0050.755] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.755] GetFileType (hFile=0x164) returned 0x1 [0050.755] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.755] WriteFile (in: hFile=0x164, lpBuffer=0x10d04100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d04100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.755] GetFileType (hFile=0x164) returned 0x1 [0050.755] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.755] GetFileType (hFile=0x164) returned 0x1 [0050.755] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.755] WriteFile (in: hFile=0x164, lpBuffer=0x10d04300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d04300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.755] GetFileType (hFile=0x164) returned 0x1 [0050.755] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.755] GetFileType (hFile=0x164) returned 0x1 [0050.756] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.756] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0050.756] GetFileType (hFile=0x164) returned 0x1 [0050.756] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.756] CloseHandle (hObject=0x164) returned 1 [0050.756] LoadLibraryExW (lpLibFileName="kernel32.dll", hFile=0x0, dwFlags=0x800) returned 0x77190000 [0050.757] GetProcAddress (hModule=0x77190000, lpProcName="MoveFileExW") returned 0x771a4370 [0050.757] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.TRAPGET" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.trapget"), dwFlags=0x1) returned 1 [0050.765] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x10cfa0f8 | out: lpFileInformation=0x10cfa0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2)) returned 1 [0050.797] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0050.798] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0050.798] GetFileType (hFile=0x164) returned 0x1 [0050.798] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0050.798] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e130 | out: pbBuffer=0x10c6e130) returned 1 [0050.798] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e140 | out: pbBuffer=0x10c6e140) returned 1 [0050.798] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d04401 | out: pbBuffer=0x10d04401) returned 1 [0050.798] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d04601 | out: pbBuffer=0x10d04601) returned 1 [0050.799] ReadFile (in: hFile=0x164, lpBuffer=0x10d20000, nNumberOfBytesToRead=0xa6b2, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10d20000*, lpNumberOfBytesRead=0x10c89c54*=0xa6b2, lpOverlapped=0x0) returned 1 [0050.806] GetFileType (hFile=0x164) returned 0x1 [0050.806] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.806] WriteFile (in: hFile=0x164, lpBuffer=0x10d2c000*, nNumberOfBytesToWrite=0xa6b2, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d2c000*, lpNumberOfBytesWritten=0x10c89c54*=0xa6b2, lpOverlapped=0x10c89c58) returned 1 [0050.806] GetFileType (hFile=0x164) returned 0x1 [0050.806] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa6b2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.806] GetFileType (hFile=0x164) returned 0x1 [0050.806] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.806] WriteFile (in: hFile=0x164, lpBuffer=0x10d04500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d04500*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.806] GetFileType (hFile=0x164) returned 0x1 [0050.806] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa6b2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.806] GetFileType (hFile=0x164) returned 0x1 [0050.806] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.807] WriteFile (in: hFile=0x164, lpBuffer=0x10d04700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d04700*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.807] GetFileType (hFile=0x164) returned 0x1 [0050.807] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa6b2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.807] GetFileType (hFile=0x164) returned 0x1 [0050.807] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.807] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0050.807] GetFileType (hFile=0x164) returned 0x1 [0050.807] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa6b2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.807] CloseHandle (hObject=0x164) returned 1 [0050.808] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.TRAPGET" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.trapget"), dwFlags=0x1) returned 1 [0050.837] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x10cfa238 | out: lpFileInformation=0x10cfa238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0050.843] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0050.843] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0050.844] GetFileType (hFile=0x164) returned 0x1 [0050.844] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0050.844] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e220 | out: pbBuffer=0x10c6e220) returned 1 [0050.844] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e230 | out: pbBuffer=0x10c6e230) returned 1 [0050.844] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d04801 | out: pbBuffer=0x10d04801) returned 1 [0050.845] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d04a01 | out: pbBuffer=0x10d04a01) returned 1 [0050.846] ReadFile (in: hFile=0x164, lpBuffer=0x10d44000, nNumberOfBytesToRead=0x1774, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10d44000*, lpNumberOfBytesRead=0x10c89c54*=0x1774, lpOverlapped=0x0) returned 1 [0050.863] GetFileType (hFile=0x164) returned 0x1 [0050.863] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.863] WriteFile (in: hFile=0x164, lpBuffer=0x10d45800*, nNumberOfBytesToWrite=0x1774, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d45800*, lpNumberOfBytesWritten=0x10c89c54*=0x1774, lpOverlapped=0x10c89c58) returned 1 [0050.863] GetFileType (hFile=0x164) returned 0x1 [0050.863] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1774, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.864] GetFileType (hFile=0x164) returned 0x1 [0050.864] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.864] WriteFile (in: hFile=0x164, lpBuffer=0x10d04900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d04900*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.864] GetFileType (hFile=0x164) returned 0x1 [0050.864] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1774, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.864] GetFileType (hFile=0x164) returned 0x1 [0050.864] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.864] WriteFile (in: hFile=0x164, lpBuffer=0x10d04b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d04b00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.864] GetFileType (hFile=0x164) returned 0x1 [0050.864] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1774, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.864] GetFileType (hFile=0x164) returned 0x1 [0050.864] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.864] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0050.864] GetFileType (hFile=0x164) returned 0x1 [0050.864] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1774, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.864] CloseHandle (hObject=0x164) returned 1 [0050.865] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.TRAPGET" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.trapget"), dwFlags=0x1) returned 1 [0050.866] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS" (normalized: "c:\\$getcurrent\\safeos"), fInfoLevelId=0x0, lpFileInformation=0x10cfa378 | out: lpFileInformation=0x10cfa378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.877] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS" (normalized: "c:\\$getcurrent\\safeos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0050.877] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eff78 [0050.893] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.894] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0050.894] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0050.894] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0050.894] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0050.894] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0050.894] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.894] FindClose (in: hFindFile=0x7eff78 | out: hFindFile=0x7eff78) returned 1 [0050.895] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\$getcurrent\\safeos\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0050.898] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0050.898] GetFileType (hFile=0x164) returned 0x1 [0050.898] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0050.898] WriteFile (in: hFile=0x164, lpBuffer=0x10d52480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10d52480*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0050.899] GetFileType (hFile=0x164) returned 0x1 [0050.899] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0050.899] CloseHandle (hObject=0x164) returned 1 [0050.899] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cfa558 | out: lpFileInformation=0x10cfa558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1 [0050.905] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cfa5a8 | out: lpFileInformation=0x10cfa5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0050.924] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0050.924] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0050.924] GetFileType (hFile=0x164) returned 0x1 [0050.924] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0050.925] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e360 | out: pbBuffer=0x10c6e360) returned 1 [0050.925] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e370 | out: pbBuffer=0x10c6e370) returned 1 [0050.925] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d04d01 | out: pbBuffer=0x10d04d01) returned 1 [0050.925] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d04f01 | out: pbBuffer=0x10d04f01) returned 1 [0050.926] ReadFile (in: hFile=0x164, lpBuffer=0x10d5e000, nNumberOfBytesToRead=0x9c, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10d5e000*, lpNumberOfBytesRead=0x10c89c54*=0x9c, lpOverlapped=0x0) returned 1 [0050.926] GetFileType (hFile=0x164) returned 0x1 [0050.927] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.927] WriteFile (in: hFile=0x164, lpBuffer=0x10d5e0a0*, nNumberOfBytesToWrite=0x9c, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d5e0a0*, lpNumberOfBytesWritten=0x10c89c54*=0x9c, lpOverlapped=0x10c89c58) returned 1 [0050.927] GetFileType (hFile=0x164) returned 0x1 [0050.927] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x9c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.927] GetFileType (hFile=0x164) returned 0x1 [0050.927] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.927] WriteFile (in: hFile=0x164, lpBuffer=0x10d04e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d04e00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.927] GetFileType (hFile=0x164) returned 0x1 [0050.927] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x9c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.927] GetFileType (hFile=0x164) returned 0x1 [0050.927] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.927] WriteFile (in: hFile=0x164, lpBuffer=0x10d05000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d05000*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.939] GetFileType (hFile=0x164) returned 0x1 [0050.939] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x9c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.939] GetFileType (hFile=0x164) returned 0x1 [0050.939] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.939] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0050.939] GetFileType (hFile=0x164) returned 0x1 [0050.939] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x9c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.940] CloseHandle (hObject=0x164) returned 1 [0050.941] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.TRAPGET" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.trapget"), dwFlags=0x1) returned 1 [0050.941] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x10cfa6e8 | out: lpFileInformation=0x10cfa6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0050.942] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0050.942] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0050.942] GetFileType (hFile=0x164) returned 0x1 [0050.942] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0050.942] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e450 | out: pbBuffer=0x10c6e450) returned 1 [0050.942] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e460 | out: pbBuffer=0x10c6e460) returned 1 [0050.942] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d05101 | out: pbBuffer=0x10d05101) returned 1 [0050.942] VirtualAlloc (lpAddress=0x10d60000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x10d60000 [0050.950] VirtualAlloc (lpAddress=0xfb7a000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xfb7a000 [0050.951] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d05301 | out: pbBuffer=0x10d05301) returned 1 [0050.951] ReadFile (in: hFile=0x164, lpBuffer=0x10d6c000, nNumberOfBytesToRead=0x241, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10d6c000*, lpNumberOfBytesRead=0x10c89c54*=0x241, lpOverlapped=0x0) returned 1 [0050.967] GetFileType (hFile=0x164) returned 0x1 [0050.967] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.967] WriteFile (in: hFile=0x164, lpBuffer=0x10d6c280*, nNumberOfBytesToWrite=0x241, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d6c280*, lpNumberOfBytesWritten=0x10c89c54*=0x241, lpOverlapped=0x10c89c58) returned 1 [0050.967] GetFileType (hFile=0x164) returned 0x1 [0050.967] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x241, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.968] GetFileType (hFile=0x164) returned 0x1 [0050.968] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.968] WriteFile (in: hFile=0x164, lpBuffer=0x10d05200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d05200*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.968] GetFileType (hFile=0x164) returned 0x1 [0050.968] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x241, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.968] GetFileType (hFile=0x164) returned 0x1 [0050.968] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.968] WriteFile (in: hFile=0x164, lpBuffer=0x10d05400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d05400*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.968] GetFileType (hFile=0x164) returned 0x1 [0050.968] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x241, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.968] GetFileType (hFile=0x164) returned 0x1 [0050.968] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.968] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0050.968] GetFileType (hFile=0x164) returned 0x1 [0050.968] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x241, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.968] CloseHandle (hObject=0x164) returned 1 [0050.969] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.TRAPGET" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.trapget"), dwFlags=0x1) returned 1 [0050.970] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x10cfa828 | out: lpFileInformation=0x10cfa828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0050.972] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0050.972] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0050.972] GetFileType (hFile=0x164) returned 0x1 [0050.972] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0050.972] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e540 | out: pbBuffer=0x10c6e540) returned 1 [0050.972] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e550 | out: pbBuffer=0x10c6e550) returned 1 [0050.972] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d05501 | out: pbBuffer=0x10d05501) returned 1 [0050.973] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d05701 | out: pbBuffer=0x10d05701) returned 1 [0050.973] ReadFile (in: hFile=0x164, lpBuffer=0x10d00f00, nNumberOfBytesToRead=0x133, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10d00f00*, lpNumberOfBytesRead=0x10c89c54*=0x133, lpOverlapped=0x0) returned 1 [0050.974] GetFileType (hFile=0x164) returned 0x1 [0050.974] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.974] WriteFile (in: hFile=0x164, lpBuffer=0x10d01040*, nNumberOfBytesToWrite=0x133, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d01040*, lpNumberOfBytesWritten=0x10c89c54*=0x133, lpOverlapped=0x10c89c58) returned 1 [0050.974] GetFileType (hFile=0x164) returned 0x1 [0050.974] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x133, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.974] GetFileType (hFile=0x164) returned 0x1 [0050.974] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.975] WriteFile (in: hFile=0x164, lpBuffer=0x10d05600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d05600*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.975] GetFileType (hFile=0x164) returned 0x1 [0050.975] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x133, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.975] GetFileType (hFile=0x164) returned 0x1 [0050.975] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.975] WriteFile (in: hFile=0x164, lpBuffer=0x10d05800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d05800*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.981] GetFileType (hFile=0x164) returned 0x1 [0050.981] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x133, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.981] GetFileType (hFile=0x164) returned 0x1 [0050.981] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.981] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0050.981] GetFileType (hFile=0x164) returned 0x1 [0050.981] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x133, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.982] CloseHandle (hObject=0x164) returned 1 [0050.982] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.TRAPGET" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.trapget"), dwFlags=0x1) returned 1 [0050.983] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x10cfa968 | out: lpFileInformation=0x10cfa968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0050.986] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0050.986] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0050.986] GetFileType (hFile=0x164) returned 0x1 [0050.986] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0050.986] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e620 | out: pbBuffer=0x10c6e620) returned 1 [0050.986] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e630 | out: pbBuffer=0x10c6e630) returned 1 [0050.986] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d05901 | out: pbBuffer=0x10d05901) returned 1 [0050.987] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d05b01 | out: pbBuffer=0x10d05b01) returned 1 [0050.988] ReadFile (in: hFile=0x164, lpBuffer=0x10c72370, nNumberOfBytesToRead=0x4a, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10c72370*, lpNumberOfBytesRead=0x10c89c54*=0x4a, lpOverlapped=0x0) returned 1 [0050.988] GetFileType (hFile=0x164) returned 0x1 [0050.988] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.989] WriteFile (in: hFile=0x164, lpBuffer=0x10c723c0*, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c723c0*, lpNumberOfBytesWritten=0x10c89c54*=0x4a, lpOverlapped=0x10c89c58) returned 1 [0050.989] GetFileType (hFile=0x164) returned 0x1 [0050.989] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.989] GetFileType (hFile=0x164) returned 0x1 [0050.989] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.989] WriteFile (in: hFile=0x164, lpBuffer=0x10d05a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d05a00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.989] GetFileType (hFile=0x164) returned 0x1 [0050.989] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.989] GetFileType (hFile=0x164) returned 0x1 [0050.989] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.989] WriteFile (in: hFile=0x164, lpBuffer=0x10d05c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d05c00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0050.989] GetFileType (hFile=0x164) returned 0x1 [0050.989] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.989] GetFileType (hFile=0x164) returned 0x1 [0050.989] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.989] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0050.989] GetFileType (hFile=0x164) returned 0x1 [0050.989] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x4a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0050.989] CloseHandle (hObject=0x164) returned 1 [0050.990] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.TRAPGET" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.trapget"), dwFlags=0x1) returned 1 [0051.004] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), fInfoLevelId=0x0, lpFileInformation=0x10cfaaa8 | out: lpFileInformation=0x10cfaaa8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.004] CreateFileW (lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.004] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efc38 [0051.006] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.006] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0051.006] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0051.006] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.006] FindClose (in: hFindFile=0x7efc38 | out: hFindFile=0x7efc38) returned 1 [0051.006] GetFileAttributesExW (in: lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x10cfab98 | out: lpFileInformation=0x10cfab98*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.086] CreateFileW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.087] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d2c | out: lpMode=0x10c89d2c) returned 0 [0051.087] GetFileType (hFile=0x164) returned 0x1 [0051.087] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89d5c | out: lpFileInformation=0x10c89d5c) returned 1 [0051.087] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e770 | out: pbBuffer=0x10c6e770) returned 1 [0051.087] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e780 | out: pbBuffer=0x10c6e780) returned 1 [0051.087] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d05d01 | out: pbBuffer=0x10d05d01) returned 1 [0051.088] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d05f01 | out: pbBuffer=0x10d05f01) returned 1 [0051.089] GetProcAddress (hModule=0x77190000, lpProcName="WriteConsoleW") returned 0x771ff500 [0051.089] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10d4e480*, nNumberOfCharsToWrite=0x30, lpNumberOfCharsWritten=0x10c89878, lpReserved=0x0 | out: lpBuffer=0x10d4e480*, lpNumberOfCharsWritten=0x10c89878*=0x30) returned 1 [0051.092] CloseHandle (hObject=0x164) returned 1 [0051.092] MoveFileExW (lpExistingFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), lpNewFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER.TRAPGET" (normalized: "c:\\$winre_backup_partition.marker.trapget"), dwFlags=0x1) returned 1 [0051.093] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212" (normalized: "c:\\588bce7c90097ed212"), fInfoLevelId=0x0, lpFileInformation=0x10cfacd8 | out: lpFileInformation=0x10cfacd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.106] CreateFileW (lpFileName="C:\\588bce7c90097ed212" (normalized: "c:\\588bce7c90097ed212"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.106] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efeb8 [0051.108] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.112] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1 [0051.112] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0051.112] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1 [0051.112] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1 [0051.112] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0051.112] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1 [0051.112] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0051.112] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1 [0051.112] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0051.112] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1 [0051.112] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0051.113] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0051.117] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.117] FindClose (in: hFindFile=0x7efeb8 | out: hFindFile=0x7efeb8) returned 1 [0051.118] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.119] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d94 | out: lpMode=0x10c89d94) returned 0 [0051.119] GetFileType (hFile=0x164) returned 0x1 [0051.119] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0051.122] WriteFile (in: hFile=0x164, lpBuffer=0x10d52d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d84, lpOverlapped=0x10c89d88 | out: lpBuffer=0x10d52d80*, lpNumberOfBytesWritten=0x10c89d84*=0x464, lpOverlapped=0x10c89d88) returned 1 [0051.122] GetFileType (hFile=0x164) returned 0x1 [0051.122] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0051.123] CloseHandle (hObject=0x164) returned 1 [0051.123] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025" (normalized: "c:\\588bce7c90097ed212\\1025"), fInfoLevelId=0x0, lpFileInformation=0x10cfbe08 | out: lpFileInformation=0x10cfbe08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.145] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025" (normalized: "c:\\588bce7c90097ed212\\1025"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.145] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efdf8 [0051.145] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.145] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0051.145] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0051.145] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0051.145] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.146] FindClose (in: hFindFile=0x7efdf8 | out: hFindFile=0x7efdf8) returned 1 [0051.146] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1025\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.154] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0051.154] GetFileType (hFile=0x164) returned 0x1 [0051.154] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.154] WriteFile (in: hFile=0x164, lpBuffer=0x10d53680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10d53680*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0051.155] GetFileType (hFile=0x164) returned 0x1 [0051.155] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.155] CloseHandle (hObject=0x164) returned 1 [0051.155] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cfbf48 | out: lpFileInformation=0x10cfbf48*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0051.172] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.172] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.172] GetFileType (hFile=0x164) returned 0x1 [0051.172] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.172] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ec00 | out: pbBuffer=0x10c6ec00) returned 1 [0051.172] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ec10 | out: pbBuffer=0x10c6ec10) returned 1 [0051.172] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d86101 | out: pbBuffer=0x10d86101) returned 1 [0051.173] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d86301 | out: pbBuffer=0x10d86301) returned 1 [0051.174] ReadFile (in: hFile=0x164, lpBuffer=0x10d96000, nNumberOfBytesToRead=0x121e6, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10d96000*, lpNumberOfBytesRead=0x10c89c54*=0x121e6, lpOverlapped=0x0) returned 1 [0051.206] GetFileType (hFile=0x164) returned 0x1 [0051.206] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.206] WriteFile (in: hFile=0x164, lpBuffer=0x10daa000*, nNumberOfBytesToWrite=0x121e6, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10daa000*, lpNumberOfBytesWritten=0x10c89c54*=0x121e6, lpOverlapped=0x10c89c58) returned 1 [0051.207] GetFileType (hFile=0x164) returned 0x1 [0051.207] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x121e6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.207] GetFileType (hFile=0x164) returned 0x1 [0051.207] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.207] WriteFile (in: hFile=0x164, lpBuffer=0x10d86200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d86200*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.207] GetFileType (hFile=0x164) returned 0x1 [0051.207] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x121e6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.207] GetFileType (hFile=0x164) returned 0x1 [0051.207] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.207] WriteFile (in: hFile=0x164, lpBuffer=0x10d86400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d86400*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.207] GetFileType (hFile=0x164) returned 0x1 [0051.207] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x121e6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.207] GetFileType (hFile=0x164) returned 0x1 [0051.207] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.207] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.207] GetFileType (hFile=0x164) returned 0x1 [0051.207] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x121e6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.207] CloseHandle (hObject=0x164) returned 1 [0051.209] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0051.210] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10d8c0a8 | out: lpFileInformation=0x10d8c0a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0051.228] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10d8c0f8 | out: lpFileInformation=0x10d8c0f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0051.235] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.235] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.235] GetFileType (hFile=0x164) returned 0x1 [0051.235] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.235] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ecf0 | out: pbBuffer=0x10c6ecf0) returned 1 [0051.235] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed00 | out: pbBuffer=0x10c6ed00) returned 1 [0051.236] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d86501 | out: pbBuffer=0x10d86501) returned 1 [0051.236] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d86701 | out: pbBuffer=0x10d86701) returned 1 [0051.237] ReadFile (in: hFile=0x164, lpBuffer=0x10dce000, nNumberOfBytesToRead=0x1d8f, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10dce000*, lpNumberOfBytesRead=0x10c89c54*=0x1d8f, lpOverlapped=0x0) returned 1 [0051.259] GetFileType (hFile=0x164) returned 0x1 [0051.259] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.259] WriteFile (in: hFile=0x164, lpBuffer=0x10dd0000*, nNumberOfBytesToWrite=0x1d8f, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10dd0000*, lpNumberOfBytesWritten=0x10c89c54*=0x1d8f, lpOverlapped=0x10c89c58) returned 1 [0051.259] GetFileType (hFile=0x164) returned 0x1 [0051.259] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1d8f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.259] GetFileType (hFile=0x164) returned 0x1 [0051.259] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.259] WriteFile (in: hFile=0x164, lpBuffer=0x10d86600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d86600*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.259] GetFileType (hFile=0x164) returned 0x1 [0051.259] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1d8f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.259] GetFileType (hFile=0x164) returned 0x1 [0051.259] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.259] WriteFile (in: hFile=0x164, lpBuffer=0x10d86800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d86800*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.259] GetFileType (hFile=0x164) returned 0x1 [0051.259] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1d8f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.259] GetFileType (hFile=0x164) returned 0x1 [0051.259] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.259] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.260] GetFileType (hFile=0x164) returned 0x1 [0051.260] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1d8f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.260] CloseHandle (hObject=0x164) returned 1 [0051.263] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0051.265] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028" (normalized: "c:\\588bce7c90097ed212\\1028"), fInfoLevelId=0x0, lpFileInformation=0x10d8c238 | out: lpFileInformation=0x10d8c238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.270] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028" (normalized: "c:\\588bce7c90097ed212\\1028"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.270] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcb8 [0051.270] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.270] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0051.270] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0051.270] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0051.270] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.270] FindClose (in: hFindFile=0x7efcb8 | out: hFindFile=0x7efcb8) returned 1 [0051.270] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1028\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.289] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0051.289] GetFileType (hFile=0x164) returned 0x1 [0051.289] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.289] WriteFile (in: hFile=0x164, lpBuffer=0x10dd2000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10dd2000*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0051.290] GetFileType (hFile=0x164) returned 0x1 [0051.290] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.290] CloseHandle (hObject=0x164) returned 1 [0051.290] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10d8c378 | out: lpFileInformation=0x10d8c378*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0051.293] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.294] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.294] GetFileType (hFile=0x164) returned 0x1 [0051.294] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.294] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee20 | out: pbBuffer=0x10c6ee20) returned 1 [0051.294] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee30 | out: pbBuffer=0x10c6ee30) returned 1 [0051.294] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d86901 | out: pbBuffer=0x10d86901) returned 1 [0051.294] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d86b01 | out: pbBuffer=0x10d86b01) returned 1 [0051.295] ReadFile (in: hFile=0x164, lpBuffer=0x10dda000, nNumberOfBytesToRead=0xed90, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10dda000*, lpNumberOfBytesRead=0x10c89c54*=0xed90, lpOverlapped=0x0) returned 1 [0051.315] GetFileType (hFile=0x164) returned 0x1 [0051.315] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.315] WriteFile (in: hFile=0x164, lpBuffer=0x10dea000*, nNumberOfBytesToWrite=0xed90, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10dea000*, lpNumberOfBytesWritten=0x10c89c54*=0xed90, lpOverlapped=0x10c89c58) returned 1 [0051.316] GetFileType (hFile=0x164) returned 0x1 [0051.316] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xed90, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.316] GetFileType (hFile=0x164) returned 0x1 [0051.316] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.316] WriteFile (in: hFile=0x164, lpBuffer=0x10d86a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d86a00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.316] GetFileType (hFile=0x164) returned 0x1 [0051.316] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xed90, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.316] GetFileType (hFile=0x164) returned 0x1 [0051.316] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.316] WriteFile (in: hFile=0x164, lpBuffer=0x10d86c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d86c00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.316] GetFileType (hFile=0x164) returned 0x1 [0051.316] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xed90, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.316] GetFileType (hFile=0x164) returned 0x1 [0051.316] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.317] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.317] GetFileType (hFile=0x164) returned 0x1 [0051.317] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xed90, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.317] CloseHandle (hObject=0x164) returned 1 [0051.318] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0051.319] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10d8c4b8 | out: lpFileInformation=0x10d8c4b8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0051.323] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10d8c508 | out: lpFileInformation=0x10d8c508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0051.324] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.324] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.324] GetFileType (hFile=0x164) returned 0x1 [0051.324] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.324] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ef10 | out: pbBuffer=0x10c6ef10) returned 1 [0051.324] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ef20 | out: pbBuffer=0x10c6ef20) returned 1 [0051.324] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d86d01 | out: pbBuffer=0x10d86d01) returned 1 [0051.325] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d86f01 | out: pbBuffer=0x10d86f01) returned 1 [0051.325] ReadFile (in: hFile=0x164, lpBuffer=0x10e06000, nNumberOfBytesToRead=0x18a5, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10e06000*, lpNumberOfBytesRead=0x10c89c54*=0x18a5, lpOverlapped=0x0) returned 1 [0051.333] GetFileType (hFile=0x164) returned 0x1 [0051.333] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.333] WriteFile (in: hFile=0x164, lpBuffer=0x10e07980*, nNumberOfBytesToWrite=0x18a5, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e07980*, lpNumberOfBytesWritten=0x10c89c54*=0x18a5, lpOverlapped=0x10c89c58) returned 1 [0051.333] GetFileType (hFile=0x164) returned 0x1 [0051.333] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x18a5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.333] GetFileType (hFile=0x164) returned 0x1 [0051.334] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.334] WriteFile (in: hFile=0x164, lpBuffer=0x10d86e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d86e00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.334] GetFileType (hFile=0x164) returned 0x1 [0051.334] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x18a5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.334] GetFileType (hFile=0x164) returned 0x1 [0051.334] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.334] WriteFile (in: hFile=0x164, lpBuffer=0x10d87000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d87000*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.334] GetFileType (hFile=0x164) returned 0x1 [0051.334] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x18a5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.334] GetFileType (hFile=0x164) returned 0x1 [0051.334] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.334] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.334] GetFileType (hFile=0x164) returned 0x1 [0051.334] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x18a5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.334] CloseHandle (hObject=0x164) returned 1 [0051.335] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0051.335] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029" (normalized: "c:\\588bce7c90097ed212\\1029"), fInfoLevelId=0x0, lpFileInformation=0x10d8c648 | out: lpFileInformation=0x10d8c648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.347] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029" (normalized: "c:\\588bce7c90097ed212\\1029"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.348] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0078 [0051.348] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.348] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0051.348] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0051.348] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0051.348] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.348] FindClose (in: hFindFile=0x7f0078 | out: hFindFile=0x7f0078) returned 1 [0051.350] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1029\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.364] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0051.364] GetFileType (hFile=0x164) returned 0x1 [0051.364] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.364] WriteFile (in: hFile=0x164, lpBuffer=0x10dd2900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10dd2900*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0051.365] GetFileType (hFile=0x164) returned 0x1 [0051.365] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.365] CloseHandle (hObject=0x164) returned 1 [0051.365] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10d8c788 | out: lpFileInformation=0x10d8c788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0051.365] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.365] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.365] GetFileType (hFile=0x164) returned 0x1 [0051.365] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.365] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f050 | out: pbBuffer=0x10c6f050) returned 1 [0051.365] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f060 | out: pbBuffer=0x10c6f060) returned 1 [0051.365] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d87101 | out: pbBuffer=0x10d87101) returned 1 [0051.366] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d87301 | out: pbBuffer=0x10d87301) returned 1 [0051.367] ReadFile (in: hFile=0x164, lpBuffer=0x10e18000, nNumberOfBytesToRead=0x13c4a, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10e18000*, lpNumberOfBytesRead=0x10c89c54*=0x13c4a, lpOverlapped=0x0) returned 1 [0051.387] GetFileType (hFile=0x164) returned 0x1 [0051.387] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.387] WriteFile (in: hFile=0x164, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x13c4a, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89c54*=0x13c4a, lpOverlapped=0x10c89c58) returned 1 [0051.387] GetFileType (hFile=0x164) returned 0x1 [0051.387] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x13c4a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.387] GetFileType (hFile=0x164) returned 0x1 [0051.388] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.388] WriteFile (in: hFile=0x164, lpBuffer=0x10d87200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d87200*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.388] GetFileType (hFile=0x164) returned 0x1 [0051.388] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x13c4a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.388] GetFileType (hFile=0x164) returned 0x1 [0051.388] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.388] WriteFile (in: hFile=0x164, lpBuffer=0x10d87400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d87400*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.388] GetFileType (hFile=0x164) returned 0x1 [0051.388] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x13c4a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.388] GetFileType (hFile=0x164) returned 0x1 [0051.388] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.388] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.388] GetFileType (hFile=0x164) returned 0x1 [0051.388] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x13c4a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.388] CloseHandle (hObject=0x164) returned 1 [0051.390] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0051.391] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10d8c8c8 | out: lpFileInformation=0x10d8c8c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0051.391] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10d8c918 | out: lpFileInformation=0x10d8c918*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1 [0051.397] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.397] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.397] GetFileType (hFile=0x164) returned 0x1 [0051.397] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.398] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f140 | out: pbBuffer=0x10c6f140) returned 1 [0051.398] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f150 | out: pbBuffer=0x10c6f150) returned 1 [0051.398] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d87501 | out: pbBuffer=0x10d87501) returned 1 [0051.398] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d87701 | out: pbBuffer=0x10d87701) returned 1 [0051.399] ReadFile (in: hFile=0x164, lpBuffer=0x10e50000, nNumberOfBytesToRead=0xe8e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10e50000*, lpNumberOfBytesRead=0x10c89c54*=0xe8e, lpOverlapped=0x0) returned 1 [0051.417] GetFileType (hFile=0x164) returned 0x1 [0051.417] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.417] WriteFile (in: hFile=0x164, lpBuffer=0x10e51000*, nNumberOfBytesToWrite=0xe8e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e51000*, lpNumberOfBytesWritten=0x10c89c54*=0xe8e, lpOverlapped=0x10c89c58) returned 1 [0051.417] GetFileType (hFile=0x164) returned 0x1 [0051.417] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xe8e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.417] GetFileType (hFile=0x164) returned 0x1 [0051.417] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.418] WriteFile (in: hFile=0x164, lpBuffer=0x10d87600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d87600*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.418] GetFileType (hFile=0x164) returned 0x1 [0051.418] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xe8e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.418] GetFileType (hFile=0x164) returned 0x1 [0051.418] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.418] WriteFile (in: hFile=0x164, lpBuffer=0x10d87800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d87800*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.418] GetFileType (hFile=0x164) returned 0x1 [0051.418] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xe8e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.418] GetFileType (hFile=0x164) returned 0x1 [0051.418] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.418] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.418] GetFileType (hFile=0x164) returned 0x1 [0051.418] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xe8e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.418] CloseHandle (hObject=0x164) returned 1 [0051.419] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0051.420] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030" (normalized: "c:\\588bce7c90097ed212\\1030"), fInfoLevelId=0x0, lpFileInformation=0x10d8ca58 | out: lpFileInformation=0x10d8ca58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.426] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030" (normalized: "c:\\588bce7c90097ed212\\1030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.427] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0178 [0051.427] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.427] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0051.427] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0051.427] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0051.427] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.427] FindClose (in: hFindFile=0x7f0178 | out: hFindFile=0x7f0178) returned 1 [0051.427] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1030\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.431] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0051.431] GetFileType (hFile=0x164) returned 0x1 [0051.431] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.431] WriteFile (in: hFile=0x164, lpBuffer=0x10dd3200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10dd3200*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0051.432] GetFileType (hFile=0x164) returned 0x1 [0051.432] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.432] CloseHandle (hObject=0x164) returned 1 [0051.432] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10d8cb98 | out: lpFileInformation=0x10d8cb98*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0051.432] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.432] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.432] GetFileType (hFile=0x164) returned 0x1 [0051.432] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.433] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f270 | out: pbBuffer=0x10c6f270) returned 1 [0051.433] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f280 | out: pbBuffer=0x10c6f280) returned 1 [0051.433] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d87901 | out: pbBuffer=0x10d87901) returned 1 [0051.433] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d87b01 | out: pbBuffer=0x10d87b01) returned 1 [0051.434] VirtualAlloc (lpAddress=0x10e60000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x10e60000 [0051.436] VirtualAlloc (lpAddress=0xfb6a000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xfb6a000 [0051.436] ReadFile (in: hFile=0x164, lpBuffer=0x10e5a000, nNumberOfBytesToRead=0x12fb4, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10e5a000*, lpNumberOfBytesRead=0x10c89c54*=0x12fb4, lpOverlapped=0x0) returned 1 [0051.459] GetFileType (hFile=0x164) returned 0x1 [0051.459] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.459] WriteFile (in: hFile=0x164, lpBuffer=0x10e6e000*, nNumberOfBytesToWrite=0x12fb4, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e6e000*, lpNumberOfBytesWritten=0x10c89c54*=0x12fb4, lpOverlapped=0x10c89c58) returned 1 [0051.459] GetFileType (hFile=0x164) returned 0x1 [0051.460] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x12fb4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.460] GetFileType (hFile=0x164) returned 0x1 [0051.460] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.460] WriteFile (in: hFile=0x164, lpBuffer=0x10d87a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d87a00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.460] GetFileType (hFile=0x164) returned 0x1 [0051.460] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x12fb4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.460] GetFileType (hFile=0x164) returned 0x1 [0051.460] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.460] WriteFile (in: hFile=0x164, lpBuffer=0x10d87c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d87c00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.460] GetFileType (hFile=0x164) returned 0x1 [0051.460] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x12fb4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.460] GetFileType (hFile=0x164) returned 0x1 [0051.460] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.460] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.460] GetFileType (hFile=0x164) returned 0x1 [0051.460] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x12fb4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.460] CloseHandle (hObject=0x164) returned 1 [0051.462] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0051.463] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10d8ccd8 | out: lpFileInformation=0x10d8ccd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0051.476] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10d8cd28 | out: lpFileInformation=0x10d8cd28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1 [0051.477] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.477] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.477] GetFileType (hFile=0x164) returned 0x1 [0051.477] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.477] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f360 | out: pbBuffer=0x10c6f360) returned 1 [0051.477] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f370 | out: pbBuffer=0x10c6f370) returned 1 [0051.477] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d87d01 | out: pbBuffer=0x10d87d01) returned 1 [0051.478] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d87f01 | out: pbBuffer=0x10d87f01) returned 1 [0051.478] ReadFile (in: hFile=0x164, lpBuffer=0x10e92000, nNumberOfBytesToRead=0xcf2, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10e92000*, lpNumberOfBytesRead=0x10c89c54*=0xcf2, lpOverlapped=0x0) returned 1 [0051.492] GetFileType (hFile=0x164) returned 0x1 [0051.492] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.492] WriteFile (in: hFile=0x164, lpBuffer=0x10e92d80*, nNumberOfBytesToWrite=0xcf2, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e92d80*, lpNumberOfBytesWritten=0x10c89c54*=0xcf2, lpOverlapped=0x10c89c58) returned 1 [0051.493] GetFileType (hFile=0x164) returned 0x1 [0051.493] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xcf2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.493] GetFileType (hFile=0x164) returned 0x1 [0051.493] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.493] WriteFile (in: hFile=0x164, lpBuffer=0x10d87e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d87e00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.493] GetFileType (hFile=0x164) returned 0x1 [0051.493] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xcf2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.493] GetFileType (hFile=0x164) returned 0x1 [0051.493] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.493] WriteFile (in: hFile=0x164, lpBuffer=0x10e90000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e90000*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.493] GetFileType (hFile=0x164) returned 0x1 [0051.493] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xcf2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.493] GetFileType (hFile=0x164) returned 0x1 [0051.493] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.493] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.493] GetFileType (hFile=0x164) returned 0x1 [0051.493] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xcf2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.493] CloseHandle (hObject=0x164) returned 1 [0051.494] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0051.495] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031" (normalized: "c:\\588bce7c90097ed212\\1031"), fInfoLevelId=0x0, lpFileInformation=0x10d8ce68 | out: lpFileInformation=0x10d8ce68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.498] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031" (normalized: "c:\\588bce7c90097ed212\\1031"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.498] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0378 [0051.499] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.499] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0051.499] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0051.499] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0051.499] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.499] FindClose (in: hFindFile=0x7f0378 | out: hFindFile=0x7f0378) returned 1 [0051.499] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1031\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.515] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0051.515] GetFileType (hFile=0x164) returned 0x1 [0051.515] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.515] WriteFile (in: hFile=0x164, lpBuffer=0x10dd3b00*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10dd3b00*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0051.516] GetFileType (hFile=0x164) returned 0x1 [0051.516] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.516] CloseHandle (hObject=0x164) returned 1 [0051.516] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10d8cfa8 | out: lpFileInformation=0x10d8cfa8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0051.516] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.517] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.517] GetFileType (hFile=0x164) returned 0x1 [0051.517] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.517] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f4a0 | out: pbBuffer=0x10c6f4a0) returned 1 [0051.517] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f4b0 | out: pbBuffer=0x10c6f4b0) returned 1 [0051.517] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e90101 | out: pbBuffer=0x10e90101) returned 1 [0051.517] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e90301 | out: pbBuffer=0x10e90301) returned 1 [0051.518] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x31560000 [0051.518] ReadFile (in: hFile=0x164, lpBuffer=0x10e9e000, nNumberOfBytesToRead=0x141aa, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10e9e000*, lpNumberOfBytesRead=0x10c89c54*=0x141aa, lpOverlapped=0x0) returned 1 [0051.543] GetFileType (hFile=0x164) returned 0x1 [0051.543] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.543] WriteFile (in: hFile=0x164, lpBuffer=0x10eb4000*, nNumberOfBytesToWrite=0x141aa, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10eb4000*, lpNumberOfBytesWritten=0x10c89c54*=0x141aa, lpOverlapped=0x10c89c58) returned 1 [0051.543] GetFileType (hFile=0x164) returned 0x1 [0051.543] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x141aa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.543] GetFileType (hFile=0x164) returned 0x1 [0051.543] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.543] WriteFile (in: hFile=0x164, lpBuffer=0x10e90200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e90200*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.544] GetFileType (hFile=0x164) returned 0x1 [0051.544] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x141aa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.544] GetFileType (hFile=0x164) returned 0x1 [0051.544] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.544] WriteFile (in: hFile=0x164, lpBuffer=0x10e90400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e90400*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.544] GetFileType (hFile=0x164) returned 0x1 [0051.544] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x141aa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.544] GetFileType (hFile=0x164) returned 0x1 [0051.544] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.544] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.544] GetFileType (hFile=0x164) returned 0x1 [0051.544] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x141aa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.544] CloseHandle (hObject=0x164) returned 1 [0051.546] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0051.546] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10d8d0e8 | out: lpFileInformation=0x10d8d0e8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0051.547] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10d8d138 | out: lpFileInformation=0x10d8d138*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1 [0051.547] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.547] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.547] GetFileType (hFile=0x164) returned 0x1 [0051.547] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.547] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f590 | out: pbBuffer=0x10c6f590) returned 1 [0051.547] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f5a0 | out: pbBuffer=0x10c6f5a0) returned 1 [0051.547] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e90501 | out: pbBuffer=0x10e90501) returned 1 [0051.548] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e90701 | out: pbBuffer=0x10e90701) returned 1 [0051.548] ReadFile (in: hFile=0x164, lpBuffer=0x10e93b00, nNumberOfBytesToRead=0xd5b, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10e93b00*, lpNumberOfBytesRead=0x10c89c54*=0xd5b, lpOverlapped=0x0) returned 1 [0051.557] GetFileType (hFile=0x164) returned 0x1 [0051.557] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.557] WriteFile (in: hFile=0x164, lpBuffer=0x10e94880*, nNumberOfBytesToWrite=0xd5b, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e94880*, lpNumberOfBytesWritten=0x10c89c54*=0xd5b, lpOverlapped=0x10c89c58) returned 1 [0051.557] GetFileType (hFile=0x164) returned 0x1 [0051.557] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xd5b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.557] GetFileType (hFile=0x164) returned 0x1 [0051.557] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.557] WriteFile (in: hFile=0x164, lpBuffer=0x10e90600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e90600*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.557] GetFileType (hFile=0x164) returned 0x1 [0051.557] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xd5b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.557] GetFileType (hFile=0x164) returned 0x1 [0051.557] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.557] WriteFile (in: hFile=0x164, lpBuffer=0x10e90800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e90800*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.557] GetFileType (hFile=0x164) returned 0x1 [0051.557] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xd5b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.557] GetFileType (hFile=0x164) returned 0x1 [0051.557] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.557] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.558] GetFileType (hFile=0x164) returned 0x1 [0051.558] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xd5b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.558] CloseHandle (hObject=0x164) returned 1 [0051.558] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0051.559] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032" (normalized: "c:\\588bce7c90097ed212\\1032"), fInfoLevelId=0x0, lpFileInformation=0x10d8d278 | out: lpFileInformation=0x10d8d278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.561] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032" (normalized: "c:\\588bce7c90097ed212\\1032"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.561] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0238 [0051.561] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.561] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0051.561] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0051.561] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0051.561] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.562] FindClose (in: hFindFile=0x7f0238 | out: hFindFile=0x7f0238) returned 1 [0051.562] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1032\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.565] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0051.566] GetFileType (hFile=0x164) returned 0x1 [0051.566] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.566] WriteFile (in: hFile=0x164, lpBuffer=0x10ed2480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10ed2480*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0051.566] GetFileType (hFile=0x164) returned 0x1 [0051.566] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.566] CloseHandle (hObject=0x164) returned 1 [0051.567] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10d8d3b8 | out: lpFileInformation=0x10d8d3b8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0051.567] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.567] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.567] GetFileType (hFile=0x164) returned 0x1 [0051.572] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.572] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f6c0 | out: pbBuffer=0x10c6f6c0) returned 1 [0051.572] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f6d0 | out: pbBuffer=0x10c6f6d0) returned 1 [0051.572] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e90901 | out: pbBuffer=0x10e90901) returned 1 [0051.573] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e90b01 | out: pbBuffer=0x10e90b01) returned 1 [0051.573] ReadFile (in: hFile=0x164, lpBuffer=0x10ee4000, nNumberOfBytesToRead=0x1510c, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10ee4000*, lpNumberOfBytesRead=0x10c89c54*=0x1510c, lpOverlapped=0x0) returned 1 [0051.580] GetFileType (hFile=0x164) returned 0x1 [0051.580] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.580] WriteFile (in: hFile=0x164, lpBuffer=0x10efa000*, nNumberOfBytesToWrite=0x1510c, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10efa000*, lpNumberOfBytesWritten=0x10c89c54*=0x1510c, lpOverlapped=0x10c89c58) returned 1 [0051.580] GetFileType (hFile=0x164) returned 0x1 [0051.580] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1510c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.580] GetFileType (hFile=0x164) returned 0x1 [0051.580] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.580] WriteFile (in: hFile=0x164, lpBuffer=0x10e90a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e90a00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.581] GetFileType (hFile=0x164) returned 0x1 [0051.581] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1510c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.581] GetFileType (hFile=0x164) returned 0x1 [0051.581] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.581] WriteFile (in: hFile=0x164, lpBuffer=0x10e90c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e90c00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.581] GetFileType (hFile=0x164) returned 0x1 [0051.581] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1510c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.581] GetFileType (hFile=0x164) returned 0x1 [0051.581] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.581] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.581] GetFileType (hFile=0x164) returned 0x1 [0051.581] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1510c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.581] CloseHandle (hObject=0x164) returned 1 [0051.584] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0051.585] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10d8d4f8 | out: lpFileInformation=0x10d8d4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0051.585] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10d8d548 | out: lpFileInformation=0x10d8d548*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1 [0051.587] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.587] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.587] GetFileType (hFile=0x164) returned 0x1 [0051.587] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.588] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f7b0 | out: pbBuffer=0x10c6f7b0) returned 1 [0051.588] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f7c0 | out: pbBuffer=0x10c6f7c0) returned 1 [0051.588] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e90d01 | out: pbBuffer=0x10e90d01) returned 1 [0051.588] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e90f01 | out: pbBuffer=0x10e90f01) returned 1 [0051.589] ReadFile (in: hFile=0x164, lpBuffer=0x10f1a000, nNumberOfBytesToRead=0x22ac, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10f1a000*, lpNumberOfBytesRead=0x10c89c54*=0x22ac, lpOverlapped=0x0) returned 1 [0051.591] GetFileType (hFile=0x164) returned 0x1 [0051.591] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.591] WriteFile (in: hFile=0x164, lpBuffer=0x10f1c500*, nNumberOfBytesToWrite=0x22ac, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10f1c500*, lpNumberOfBytesWritten=0x10c89c54*=0x22ac, lpOverlapped=0x10c89c58) returned 1 [0051.591] GetFileType (hFile=0x164) returned 0x1 [0051.591] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x22ac, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.591] GetFileType (hFile=0x164) returned 0x1 [0051.591] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.591] WriteFile (in: hFile=0x164, lpBuffer=0x10e90e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e90e00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.591] GetFileType (hFile=0x164) returned 0x1 [0051.591] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x22ac, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.592] GetFileType (hFile=0x164) returned 0x1 [0051.592] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.592] WriteFile (in: hFile=0x164, lpBuffer=0x10e91000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e91000*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.592] GetFileType (hFile=0x164) returned 0x1 [0051.592] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x22ac, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.592] GetFileType (hFile=0x164) returned 0x1 [0051.592] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.592] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.592] GetFileType (hFile=0x164) returned 0x1 [0051.592] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x22ac, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.592] CloseHandle (hObject=0x164) returned 1 [0051.593] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0051.593] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033" (normalized: "c:\\588bce7c90097ed212\\1033"), fInfoLevelId=0x0, lpFileInformation=0x10d8d688 | out: lpFileInformation=0x10d8d688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.595] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033" (normalized: "c:\\588bce7c90097ed212\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.595] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0078 [0051.595] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.595] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0051.595] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0051.595] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0051.596] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.596] FindClose (in: hFindFile=0x7f0078 | out: hFindFile=0x7f0078) returned 1 [0051.596] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1033\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.598] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0051.598] GetFileType (hFile=0x164) returned 0x1 [0051.598] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.598] WriteFile (in: hFile=0x164, lpBuffer=0x10ed2d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10ed2d80*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0051.599] GetFileType (hFile=0x164) returned 0x1 [0051.601] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.601] CloseHandle (hObject=0x164) returned 1 [0051.601] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10d8d7c8 | out: lpFileInformation=0x10d8d7c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0051.603] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.603] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.603] GetFileType (hFile=0x164) returned 0x1 [0051.603] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.603] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f8f0 | out: pbBuffer=0x10c6f8f0) returned 1 [0051.603] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f900 | out: pbBuffer=0x10c6f900) returned 1 [0051.603] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e91101 | out: pbBuffer=0x10e91101) returned 1 [0051.604] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e91301 | out: pbBuffer=0x10e91301) returned 1 [0051.640] ReadFile (in: hFile=0x164, lpBuffer=0x10f32000, nNumberOfBytesToRead=0x12db0, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10f32000*, lpNumberOfBytesRead=0x10c89c54*=0x12db0, lpOverlapped=0x0) returned 1 [0051.680] GetFileType (hFile=0x164) returned 0x1 [0051.680] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.681] WriteFile (in: hFile=0x164, lpBuffer=0x10f46000*, nNumberOfBytesToWrite=0x12db0, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10f46000*, lpNumberOfBytesWritten=0x10c89c54*=0x12db0, lpOverlapped=0x10c89c58) returned 1 [0051.682] GetFileType (hFile=0x164) returned 0x1 [0051.682] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x12db0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.682] GetFileType (hFile=0x164) returned 0x1 [0051.683] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.683] WriteFile (in: hFile=0x164, lpBuffer=0x10e91200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e91200*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.683] GetFileType (hFile=0x164) returned 0x1 [0051.683] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x12db0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.683] GetFileType (hFile=0x164) returned 0x1 [0051.683] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.683] WriteFile (in: hFile=0x164, lpBuffer=0x10e91400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e91400*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.683] GetFileType (hFile=0x164) returned 0x1 [0051.683] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x12db0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.683] GetFileType (hFile=0x164) returned 0x1 [0051.683] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.683] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.683] GetFileType (hFile=0x164) returned 0x1 [0051.683] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x12db0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.683] CloseHandle (hObject=0x164) returned 1 [0051.685] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0051.686] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10d8d908 | out: lpFileInformation=0x10d8d908*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1 [0051.686] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10d8d958 | out: lpFileInformation=0x10d8d958*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0051.686] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.686] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.686] GetFileType (hFile=0x164) returned 0x1 [0051.686] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.686] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f9e0 | out: pbBuffer=0x10c6f9e0) returned 1 [0051.686] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f9f0 | out: pbBuffer=0x10c6f9f0) returned 1 [0051.686] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e91501 | out: pbBuffer=0x10e91501) returned 1 [0051.687] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e91701 | out: pbBuffer=0x10e91701) returned 1 [0051.687] VirtualAlloc (lpAddress=0x10f60000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x10f60000 [0051.689] VirtualAlloc (lpAddress=0xfb5a000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xfb5a000 [0051.689] VirtualAlloc (lpAddress=0xa82000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xa82000 [0051.689] ReadFile (in: hFile=0x164, lpBuffer=0x10f62000, nNumberOfBytesToRead=0xc74, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10f62000*, lpNumberOfBytesRead=0x10c89c54*=0xc74, lpOverlapped=0x0) returned 1 [0051.698] GetFileType (hFile=0x164) returned 0x1 [0051.698] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.699] WriteFile (in: hFile=0x164, lpBuffer=0x10f62c80*, nNumberOfBytesToWrite=0xc74, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10f62c80*, lpNumberOfBytesWritten=0x10c89c54*=0xc74, lpOverlapped=0x10c89c58) returned 1 [0051.699] GetFileType (hFile=0x164) returned 0x1 [0051.699] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xc74, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.699] GetFileType (hFile=0x164) returned 0x1 [0051.699] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.700] WriteFile (in: hFile=0x164, lpBuffer=0x10e91600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e91600*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.700] GetFileType (hFile=0x164) returned 0x1 [0051.700] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xc74, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.700] GetFileType (hFile=0x164) returned 0x1 [0051.701] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.701] WriteFile (in: hFile=0x164, lpBuffer=0x10e91800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e91800*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.704] GetFileType (hFile=0x164) returned 0x1 [0051.729] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xc74, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.729] GetFileType (hFile=0x164) returned 0x1 [0051.729] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.729] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.729] GetFileType (hFile=0x164) returned 0x1 [0051.729] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xc74, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.729] CloseHandle (hObject=0x164) returned 1 [0051.748] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0051.749] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035" (normalized: "c:\\588bce7c90097ed212\\1035"), fInfoLevelId=0x0, lpFileInformation=0x10d8da98 | out: lpFileInformation=0x10d8da98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.749] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035" (normalized: "c:\\588bce7c90097ed212\\1035"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.749] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0338 [0051.749] FindNextFileW (in: hFindFile=0x7f0338, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.749] FindNextFileW (in: hFindFile=0x7f0338, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0051.790] FindNextFileW (in: hFindFile=0x7f0338, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0051.790] FindNextFileW (in: hFindFile=0x7f0338, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0051.791] FindNextFileW (in: hFindFile=0x7f0338, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.791] FindClose (in: hFindFile=0x7f0338 | out: hFindFile=0x7f0338) returned 1 [0051.791] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1035\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.827] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0051.827] GetFileType (hFile=0x164) returned 0x1 [0051.827] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.828] WriteFile (in: hFile=0x164, lpBuffer=0x10ed3680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10ed3680*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0051.828] GetFileType (hFile=0x164) returned 0x1 [0051.828] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.828] CloseHandle (hObject=0x164) returned 1 [0051.829] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10d8dbd8 | out: lpFileInformation=0x10d8dbd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0051.829] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.829] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.829] GetFileType (hFile=0x164) returned 0x1 [0051.829] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.829] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fb10 | out: pbBuffer=0x10c6fb10) returned 1 [0051.829] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fb20 | out: pbBuffer=0x10c6fb20) returned 1 [0051.829] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e91901 | out: pbBuffer=0x10e91901) returned 1 [0051.830] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e91b01 | out: pbBuffer=0x10e91b01) returned 1 [0051.830] ReadFile (in: hFile=0x164, lpBuffer=0x10f72000, nNumberOfBytesToRead=0x12cde, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10f72000*, lpNumberOfBytesRead=0x10c89c54*=0x12cde, lpOverlapped=0x0) returned 1 [0051.873] GetFileType (hFile=0x164) returned 0x1 [0051.873] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.873] WriteFile (in: hFile=0x164, lpBuffer=0x10f86000*, nNumberOfBytesToWrite=0x12cde, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10f86000*, lpNumberOfBytesWritten=0x10c89c54*=0x12cde, lpOverlapped=0x10c89c58) returned 1 [0051.874] GetFileType (hFile=0x164) returned 0x1 [0051.874] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x12cde, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.874] GetFileType (hFile=0x164) returned 0x1 [0051.874] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.874] WriteFile (in: hFile=0x164, lpBuffer=0x10e91a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e91a00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.874] GetFileType (hFile=0x164) returned 0x1 [0051.874] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x12cde, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.874] GetFileType (hFile=0x164) returned 0x1 [0051.874] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.874] WriteFile (in: hFile=0x164, lpBuffer=0x10e91c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e91c00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.874] GetFileType (hFile=0x164) returned 0x1 [0051.874] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x12cde, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.874] GetFileType (hFile=0x164) returned 0x1 [0051.874] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.874] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.874] GetFileType (hFile=0x164) returned 0x1 [0051.874] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x12cde, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.874] CloseHandle (hObject=0x164) returned 1 [0051.876] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0051.877] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10d8dd18 | out: lpFileInformation=0x10d8dd18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0051.877] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10d8dd68 | out: lpFileInformation=0x10d8dd68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1 [0051.877] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.877] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.877] GetFileType (hFile=0x164) returned 0x1 [0051.877] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.877] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fc00 | out: pbBuffer=0x10c6fc00) returned 1 [0051.877] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fc10 | out: pbBuffer=0x10c6fc10) returned 1 [0051.877] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e91d01 | out: pbBuffer=0x10e91d01) returned 1 [0051.878] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e91f01 | out: pbBuffer=0x10e91f01) returned 1 [0051.878] ReadFile (in: hFile=0x164, lpBuffer=0x10fa2000, nNumberOfBytesToRead=0xe76, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10fa2000*, lpNumberOfBytesRead=0x10c89c54*=0xe76, lpOverlapped=0x0) returned 1 [0051.912] GetFileType (hFile=0x164) returned 0x1 [0051.912] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.914] WriteFile (in: hFile=0x164, lpBuffer=0x10fa3000*, nNumberOfBytesToWrite=0xe76, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa3000*, lpNumberOfBytesWritten=0x10c89c54*=0xe76, lpOverlapped=0x10c89c58) returned 1 [0051.915] GetFileType (hFile=0x164) returned 0x1 [0051.915] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xe76, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.915] GetFileType (hFile=0x164) returned 0x1 [0051.915] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.915] WriteFile (in: hFile=0x164, lpBuffer=0x10e91e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e91e00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.915] GetFileType (hFile=0x164) returned 0x1 [0051.915] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xe76, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.915] GetFileType (hFile=0x164) returned 0x1 [0051.915] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.915] WriteFile (in: hFile=0x164, lpBuffer=0x10fa0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0000*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.915] GetFileType (hFile=0x164) returned 0x1 [0051.915] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xe76, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.915] GetFileType (hFile=0x164) returned 0x1 [0051.915] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.915] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.915] GetFileType (hFile=0x164) returned 0x1 [0051.916] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xe76, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.916] CloseHandle (hObject=0x164) returned 1 [0051.916] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0051.917] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036" (normalized: "c:\\588bce7c90097ed212\\1036"), fInfoLevelId=0x0, lpFileInformation=0x10d8dea8 | out: lpFileInformation=0x10d8dea8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.917] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036" (normalized: "c:\\588bce7c90097ed212\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.917] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f00b8 [0051.918] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.918] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0051.918] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0051.918] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0051.918] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.918] FindClose (in: hFindFile=0x7f00b8 | out: hFindFile=0x7f00b8) returned 1 [0051.918] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1036\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.933] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0051.933] GetFileType (hFile=0x164) returned 0x1 [0051.933] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.933] WriteFile (in: hFile=0x164, lpBuffer=0x10faa000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10faa000*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0051.942] GetFileType (hFile=0x164) returned 0x1 [0051.942] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.942] CloseHandle (hObject=0x164) returned 1 [0051.942] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10fac008 | out: lpFileInformation=0x10fac008*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0051.943] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.943] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.943] GetFileType (hFile=0x164) returned 0x1 [0051.943] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.943] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fd40 | out: pbBuffer=0x10c6fd40) returned 1 [0051.943] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fd50 | out: pbBuffer=0x10c6fd50) returned 1 [0051.943] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0101 | out: pbBuffer=0x10fa0101) returned 1 [0051.944] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0301 | out: pbBuffer=0x10fa0301) returned 1 [0051.944] ReadFile (in: hFile=0x164, lpBuffer=0x10fbe000, nNumberOfBytesToRead=0x14412, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10fbe000*, lpNumberOfBytesRead=0x10c89c54*=0x14412, lpOverlapped=0x0) returned 1 [0051.962] GetFileType (hFile=0x164) returned 0x1 [0051.962] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.962] WriteFile (in: hFile=0x164, lpBuffer=0x10fd4000*, nNumberOfBytesToWrite=0x14412, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fd4000*, lpNumberOfBytesWritten=0x10c89c54*=0x14412, lpOverlapped=0x10c89c58) returned 1 [0051.963] GetFileType (hFile=0x164) returned 0x1 [0051.963] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x14412, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.963] GetFileType (hFile=0x164) returned 0x1 [0051.963] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.963] WriteFile (in: hFile=0x164, lpBuffer=0x10fa0200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0200*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.963] GetFileType (hFile=0x164) returned 0x1 [0051.963] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x14412, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.963] GetFileType (hFile=0x164) returned 0x1 [0051.963] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.963] WriteFile (in: hFile=0x164, lpBuffer=0x10fa0400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0400*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.963] GetFileType (hFile=0x164) returned 0x1 [0051.963] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x14412, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.963] GetFileType (hFile=0x164) returned 0x1 [0051.963] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.963] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.963] GetFileType (hFile=0x164) returned 0x1 [0051.964] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x14412, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.964] CloseHandle (hObject=0x164) returned 1 [0051.967] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0051.967] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10fac148 | out: lpFileInformation=0x10fac148*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0051.967] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10fac198 | out: lpFileInformation=0x10fac198*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0051.967] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.968] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.968] GetFileType (hFile=0x164) returned 0x1 [0051.968] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.968] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fe30 | out: pbBuffer=0x10c6fe30) returned 1 [0051.968] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fe40 | out: pbBuffer=0x10c6fe40) returned 1 [0051.968] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0501 | out: pbBuffer=0x10fa0501) returned 1 [0051.970] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0701 | out: pbBuffer=0x10fa0701) returned 1 [0051.971] ReadFile (in: hFile=0x164, lpBuffer=0x10ff2000, nNumberOfBytesToRead=0xdc6, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10ff2000*, lpNumberOfBytesRead=0x10c89c54*=0xdc6, lpOverlapped=0x0) returned 1 [0051.974] GetFileType (hFile=0x164) returned 0x1 [0051.974] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.974] WriteFile (in: hFile=0x164, lpBuffer=0x10ff3000*, nNumberOfBytesToWrite=0xdc6, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10ff3000*, lpNumberOfBytesWritten=0x10c89c54*=0xdc6, lpOverlapped=0x10c89c58) returned 1 [0051.974] GetFileType (hFile=0x164) returned 0x1 [0051.974] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xdc6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.974] GetFileType (hFile=0x164) returned 0x1 [0051.975] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.975] WriteFile (in: hFile=0x164, lpBuffer=0x10fa0600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0600*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.975] GetFileType (hFile=0x164) returned 0x1 [0051.975] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xdc6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.975] GetFileType (hFile=0x164) returned 0x1 [0051.975] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.975] WriteFile (in: hFile=0x164, lpBuffer=0x10fa0800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0800*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.975] GetFileType (hFile=0x164) returned 0x1 [0051.975] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xdc6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.975] GetFileType (hFile=0x164) returned 0x1 [0051.975] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.975] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.975] GetFileType (hFile=0x164) returned 0x1 [0051.975] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xdc6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.975] CloseHandle (hObject=0x164) returned 1 [0051.976] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0051.977] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037" (normalized: "c:\\588bce7c90097ed212\\1037"), fInfoLevelId=0x0, lpFileInformation=0x10fac2d8 | out: lpFileInformation=0x10fac2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.977] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037" (normalized: "c:\\588bce7c90097ed212\\1037"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.977] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd78 [0051.977] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.977] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0051.977] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0051.977] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0051.977] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.977] FindClose (in: hFindFile=0x7efd78 | out: hFindFile=0x7efd78) returned 1 [0051.978] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1037\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.980] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0051.980] GetFileType (hFile=0x164) returned 0x1 [0051.980] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.980] WriteFile (in: hFile=0x164, lpBuffer=0x10faa900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10faa900*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0051.981] GetFileType (hFile=0x164) returned 0x1 [0051.981] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0051.981] CloseHandle (hObject=0x164) returned 1 [0051.981] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10fac418 | out: lpFileInformation=0x10fac418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0051.987] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0051.987] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0051.987] GetFileType (hFile=0x164) returned 0x1 [0051.987] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0051.988] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ff60 | out: pbBuffer=0x10c6ff60) returned 1 [0051.988] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ff70 | out: pbBuffer=0x10c6ff70) returned 1 [0051.988] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0901 | out: pbBuffer=0x10fa0901) returned 1 [0051.988] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0b01 | out: pbBuffer=0x10fa0b01) returned 1 [0051.989] ReadFile (in: hFile=0x164, lpBuffer=0x11000000, nNumberOfBytesToRead=0x1198c, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11000000*, lpNumberOfBytesRead=0x10c89c54*=0x1198c, lpOverlapped=0x0) returned 1 [0051.994] GetFileType (hFile=0x164) returned 0x1 [0051.995] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.995] WriteFile (in: hFile=0x164, lpBuffer=0x11012000*, nNumberOfBytesToWrite=0x1198c, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11012000*, lpNumberOfBytesWritten=0x10c89c54*=0x1198c, lpOverlapped=0x10c89c58) returned 1 [0051.995] GetFileType (hFile=0x164) returned 0x1 [0051.995] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1198c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.995] GetFileType (hFile=0x164) returned 0x1 [0051.995] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.995] WriteFile (in: hFile=0x164, lpBuffer=0x10fa0a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0a00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.995] GetFileType (hFile=0x164) returned 0x1 [0051.995] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1198c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.995] GetFileType (hFile=0x164) returned 0x1 [0051.995] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.996] WriteFile (in: hFile=0x164, lpBuffer=0x10fa0c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0c00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0051.996] GetFileType (hFile=0x164) returned 0x1 [0051.996] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1198c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.996] GetFileType (hFile=0x164) returned 0x1 [0051.996] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.996] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0051.996] GetFileType (hFile=0x164) returned 0x1 [0051.996] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1198c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0051.996] CloseHandle (hObject=0x164) returned 1 [0051.998] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.000] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10fac558 | out: lpFileInformation=0x10fac558*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1 [0052.001] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10fac5a8 | out: lpFileInformation=0x10fac5a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1 [0052.001] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0052.002] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.002] GetFileType (hFile=0x164) returned 0x1 [0052.002] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.002] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10ffc050 | out: pbBuffer=0x10ffc050) returned 1 [0052.002] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10ffc060 | out: pbBuffer=0x10ffc060) returned 1 [0052.002] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0d01 | out: pbBuffer=0x10fa0d01) returned 1 [0052.002] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0f01 | out: pbBuffer=0x10fa0f01) returned 1 [0052.003] ReadFile (in: hFile=0x164, lpBuffer=0x11030000, nNumberOfBytesToRead=0x1ac3, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11030000*, lpNumberOfBytesRead=0x10c89c54*=0x1ac3, lpOverlapped=0x0) returned 1 [0052.005] GetFileType (hFile=0x164) returned 0x1 [0052.005] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.005] WriteFile (in: hFile=0x164, lpBuffer=0x11031b00*, nNumberOfBytesToWrite=0x1ac3, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11031b00*, lpNumberOfBytesWritten=0x10c89c54*=0x1ac3, lpOverlapped=0x10c89c58) returned 1 [0052.006] GetFileType (hFile=0x164) returned 0x1 [0052.006] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1ac3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.006] GetFileType (hFile=0x164) returned 0x1 [0052.006] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.006] WriteFile (in: hFile=0x164, lpBuffer=0x10fa0e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0e00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.006] GetFileType (hFile=0x164) returned 0x1 [0052.006] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1ac3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.006] GetFileType (hFile=0x164) returned 0x1 [0052.006] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.006] WriteFile (in: hFile=0x164, lpBuffer=0x10fa1000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa1000*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.006] GetFileType (hFile=0x164) returned 0x1 [0052.006] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1ac3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.006] GetFileType (hFile=0x164) returned 0x1 [0052.006] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.006] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.006] GetFileType (hFile=0x164) returned 0x1 [0052.006] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x1ac3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.006] CloseHandle (hObject=0x164) returned 1 [0052.007] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.008] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038" (normalized: "c:\\588bce7c90097ed212\\1038"), fInfoLevelId=0x0, lpFileInformation=0x10fac6e8 | out: lpFileInformation=0x10fac6e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.008] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038" (normalized: "c:\\588bce7c90097ed212\\1038"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.008] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd78 [0052.008] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.008] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.008] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.008] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.008] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.008] FindClose (in: hFindFile=0x7efd78 | out: hFindFile=0x7efd78) returned 1 [0052.008] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1038\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0052.010] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.010] GetFileType (hFile=0x164) returned 0x1 [0052.010] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.010] WriteFile (in: hFile=0x164, lpBuffer=0x10fab200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10fab200*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.011] GetFileType (hFile=0x164) returned 0x1 [0052.011] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.011] CloseHandle (hObject=0x164) returned 1 [0052.011] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10fac828 | out: lpFileInformation=0x10fac828*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0052.011] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0052.011] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.011] GetFileType (hFile=0x164) returned 0x1 [0052.011] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.012] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10ffc190 | out: pbBuffer=0x10ffc190) returned 1 [0052.012] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10ffc1a0 | out: pbBuffer=0x10ffc1a0) returned 1 [0052.012] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa1101 | out: pbBuffer=0x10fa1101) returned 1 [0052.012] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa1301 | out: pbBuffer=0x10fa1301) returned 1 [0052.013] ReadFile (in: hFile=0x164, lpBuffer=0x11048000, nNumberOfBytesToRead=0x151aa, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11048000*, lpNumberOfBytesRead=0x10c89c54*=0x151aa, lpOverlapped=0x0) returned 1 [0052.016] VirtualAlloc (lpAddress=0x11060000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x11060000 [0052.018] VirtualAlloc (lpAddress=0xfb4a000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xfb4a000 [0052.025] GetFileType (hFile=0x164) returned 0x1 [0052.025] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.025] WriteFile (in: hFile=0x164, lpBuffer=0x1105e000*, nNumberOfBytesToWrite=0x151aa, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1105e000*, lpNumberOfBytesWritten=0x10c89c54*=0x151aa, lpOverlapped=0x10c89c58) returned 1 [0052.026] GetFileType (hFile=0x164) returned 0x1 [0052.026] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x151aa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.026] GetFileType (hFile=0x164) returned 0x1 [0052.026] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.026] WriteFile (in: hFile=0x164, lpBuffer=0x10fa1200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa1200*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.026] GetFileType (hFile=0x164) returned 0x1 [0052.026] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x151aa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.026] GetFileType (hFile=0x164) returned 0x1 [0052.026] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.026] WriteFile (in: hFile=0x164, lpBuffer=0x10fa1400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa1400*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.026] GetFileType (hFile=0x164) returned 0x1 [0052.026] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x151aa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.026] GetFileType (hFile=0x164) returned 0x1 [0052.027] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.027] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.027] GetFileType (hFile=0x164) returned 0x1 [0052.027] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x151aa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.027] CloseHandle (hObject=0x164) returned 1 [0052.029] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.029] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10fac968 | out: lpFileInformation=0x10fac968*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0052.037] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10fac9b8 | out: lpFileInformation=0x10fac9b8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1 [0052.037] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0052.037] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.037] GetFileType (hFile=0x164) returned 0x1 [0052.037] GetFileInformationByHandle (in: hFile=0x164, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.037] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10ffc280 | out: pbBuffer=0x10ffc280) returned 1 [0052.037] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10ffc290 | out: pbBuffer=0x10ffc290) returned 1 [0052.037] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa1501 | out: pbBuffer=0x10fa1501) returned 1 [0052.038] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa1701 | out: pbBuffer=0x10fa1701) returned 1 [0052.039] SetEvent (hEvent=0x158) returned 1 [0052.039] SetEvent (hEvent=0x160) returned 1 [0052.039] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0052.041] SetEvent (hEvent=0x138) returned 1 [0052.041] SetEvent (hEvent=0x160) returned 1 [0052.041] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0052.044] SetEvent (hEvent=0x158) returned 1 [0052.044] SetEvent (hEvent=0x160) returned 1 [0052.044] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0052.046] SetEvent (hEvent=0x138) returned 1 [0052.046] SetEvent (hEvent=0x160) returned 1 [0052.046] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0052.047] SetEvent (hEvent=0x158) returned 1 [0052.047] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x7a0000 [0052.048] ReadFile (in: hFile=0x164, lpBuffer=0x1107e000, nNumberOfBytesToRead=0x109e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x1107e000*, lpNumberOfBytesRead=0x10c89c54*=0x109e, lpOverlapped=0x0) returned 1 [0052.053] GetFileType (hFile=0x164) returned 0x1 [0052.053] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.053] WriteFile (in: hFile=0x164, lpBuffer=0x1109e000*, nNumberOfBytesToWrite=0x109e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1109e000*, lpNumberOfBytesWritten=0x10c89c54*=0x109e, lpOverlapped=0x10c89c58) returned 1 [0052.053] GetFileType (hFile=0x164) returned 0x1 [0052.053] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x109e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.053] GetFileType (hFile=0x164) returned 0x1 [0052.053] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.053] WriteFile (in: hFile=0x164, lpBuffer=0x10fa1600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa1600*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.054] GetFileType (hFile=0x164) returned 0x1 [0052.054] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x109e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.054] GetFileType (hFile=0x164) returned 0x1 [0052.054] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.054] WriteFile (in: hFile=0x164, lpBuffer=0x10fa1800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa1800*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.054] GetFileType (hFile=0x164) returned 0x1 [0052.054] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x109e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.054] GetFileType (hFile=0x164) returned 0x1 [0052.054] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.054] WriteFile (in: hFile=0x164, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.054] GetFileType (hFile=0x164) returned 0x1 [0052.054] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x109e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.054] CloseHandle (hObject=0x164) returned 1 [0052.055] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.056] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040" (normalized: "c:\\588bce7c90097ed212\\1040"), fInfoLevelId=0x0, lpFileInformation=0x110b6008 | out: lpFileInformation=0x110b6008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.058] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0052.063] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040" (normalized: "c:\\588bce7c90097ed212\\1040"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.064] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f00b8 [0052.064] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.064] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.064] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.064] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.064] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.064] FindClose (in: hFindFile=0x7f00b8 | out: hFindFile=0x7f00b8) returned 1 [0052.064] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1040\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.067] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.068] GetFileType (hFile=0x19c) returned 0x1 [0052.068] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.068] WriteFile (in: hFile=0x19c, lpBuffer=0x10cc2480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cc2480*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.068] GetFileType (hFile=0x19c) returned 0x1 [0052.068] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.069] CloseHandle (hObject=0x19c) returned 1 [0052.069] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cfa0f8 | out: lpFileInformation=0x10cfa0f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0052.069] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.069] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.069] GetFileType (hFile=0x19c) returned 0x1 [0052.069] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.069] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e080 | out: pbBuffer=0x10c6e080) returned 1 [0052.069] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e090 | out: pbBuffer=0x10c6e090) returned 1 [0052.069] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0001 | out: pbBuffer=0x10fa0001) returned 1 [0052.070] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0201 | out: pbBuffer=0x10fa0201) returned 1 [0052.070] ReadFile (in: hFile=0x19c, lpBuffer=0x10fae000, nNumberOfBytesToRead=0x138bc, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10fae000*, lpNumberOfBytesRead=0x10c89c54*=0x138bc, lpOverlapped=0x0) returned 1 [0052.074] GetFileType (hFile=0x19c) returned 0x1 [0052.074] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.074] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc2000*, nNumberOfBytesToWrite=0x138bc, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fc2000*, lpNumberOfBytesWritten=0x10c89c54*=0x138bc, lpOverlapped=0x10c89c58) returned 1 [0052.074] GetFileType (hFile=0x19c) returned 0x1 [0052.074] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x138bc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.075] GetFileType (hFile=0x19c) returned 0x1 [0052.075] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.075] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa0100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.075] GetFileType (hFile=0x19c) returned 0x1 [0052.075] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x138bc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.075] GetFileType (hFile=0x19c) returned 0x1 [0052.075] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.075] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa0300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.075] GetFileType (hFile=0x19c) returned 0x1 [0052.075] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x138bc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.075] GetFileType (hFile=0x19c) returned 0x1 [0052.075] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.075] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.075] GetFileType (hFile=0x19c) returned 0x1 [0052.075] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x138bc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.075] CloseHandle (hObject=0x19c) returned 1 [0052.077] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.078] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cfa238 | out: lpFileInformation=0x10cfa238*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0052.080] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa288 | out: lpFileInformation=0x10cfa288*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1 [0052.087] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.087] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.087] GetFileType (hFile=0x19c) returned 0x1 [0052.087] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.087] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e170 | out: pbBuffer=0x10c6e170) returned 1 [0052.087] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e180 | out: pbBuffer=0x10c6e180) returned 1 [0052.087] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0401 | out: pbBuffer=0x10fa0401) returned 1 [0052.087] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0601 | out: pbBuffer=0x10fa0601) returned 1 [0052.088] ReadFile (in: hFile=0x19c, lpBuffer=0x10ce2000, nNumberOfBytesToRead=0xe3b, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10ce2000*, lpNumberOfBytesRead=0x10c89c54*=0xe3b, lpOverlapped=0x0) returned 1 [0052.092] GetFileType (hFile=0x19c) returned 0x1 [0052.092] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.092] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce3000*, nNumberOfBytesToWrite=0xe3b, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10ce3000*, lpNumberOfBytesWritten=0x10c89c54*=0xe3b, lpOverlapped=0x10c89c58) returned 1 [0052.092] GetFileType (hFile=0x19c) returned 0x1 [0052.092] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe3b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.093] GetFileType (hFile=0x19c) returned 0x1 [0052.093] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.093] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa0500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0500*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.093] GetFileType (hFile=0x19c) returned 0x1 [0052.093] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe3b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.093] GetFileType (hFile=0x19c) returned 0x1 [0052.093] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.093] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa0700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0700*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.093] GetFileType (hFile=0x19c) returned 0x1 [0052.093] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe3b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.093] GetFileType (hFile=0x19c) returned 0x1 [0052.093] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.093] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.093] GetFileType (hFile=0x19c) returned 0x1 [0052.093] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe3b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.093] CloseHandle (hObject=0x19c) returned 1 [0052.094] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.095] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041" (normalized: "c:\\588bce7c90097ed212\\1041"), fInfoLevelId=0x0, lpFileInformation=0x10cfa3c8 | out: lpFileInformation=0x10cfa3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.095] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041" (normalized: "c:\\588bce7c90097ed212\\1041"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.095] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efdf8 [0052.095] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.096] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.096] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.096] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.096] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.096] FindClose (in: hFindFile=0x7efdf8 | out: hFindFile=0x7efdf8) returned 1 [0052.096] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1041\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.099] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.099] GetFileType (hFile=0x19c) returned 0x1 [0052.099] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.099] WriteFile (in: hFile=0x19c, lpBuffer=0x10cc2d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cc2d80*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.102] GetFileType (hFile=0x19c) returned 0x1 [0052.102] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.102] CloseHandle (hObject=0x19c) returned 1 [0052.102] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cfa508 | out: lpFileInformation=0x10cfa508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0052.102] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.102] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.102] GetFileType (hFile=0x19c) returned 0x1 [0052.103] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.103] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e2a0 | out: pbBuffer=0x10c6e2a0) returned 1 [0052.103] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e2b0 | out: pbBuffer=0x10c6e2b0) returned 1 [0052.103] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0801 | out: pbBuffer=0x10fa0801) returned 1 [0052.103] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0a01 | out: pbBuffer=0x10fa0a01) returned 1 [0052.103] ReadFile (in: hFile=0x19c, lpBuffer=0x10fd6000, nNumberOfBytesToRead=0x10a82, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10fd6000*, lpNumberOfBytesRead=0x10c89c54*=0x10a82, lpOverlapped=0x0) returned 1 [0052.109] GetFileType (hFile=0x19c) returned 0x1 [0052.109] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.109] WriteFile (in: hFile=0x19c, lpBuffer=0x10fe8000*, nNumberOfBytesToWrite=0x10a82, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fe8000*, lpNumberOfBytesWritten=0x10c89c54*=0x10a82, lpOverlapped=0x10c89c58) returned 1 [0052.110] GetFileType (hFile=0x19c) returned 0x1 [0052.110] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10a82, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.110] GetFileType (hFile=0x19c) returned 0x1 [0052.110] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.110] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa0900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0900*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.110] GetFileType (hFile=0x19c) returned 0x1 [0052.110] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10a82, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.115] GetFileType (hFile=0x19c) returned 0x1 [0052.115] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.115] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa0b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0b00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.115] GetFileType (hFile=0x19c) returned 0x1 [0052.115] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10a82, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.115] GetFileType (hFile=0x19c) returned 0x1 [0052.115] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.115] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.116] GetFileType (hFile=0x19c) returned 0x1 [0052.116] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10a82, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.116] CloseHandle (hObject=0x19c) returned 1 [0052.117] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.118] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cfa648 | out: lpFileInformation=0x10cfa648*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1 [0052.118] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa698 | out: lpFileInformation=0x10cfa698*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1 [0052.118] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.118] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.118] GetFileType (hFile=0x19c) returned 0x1 [0052.118] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.118] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e390 | out: pbBuffer=0x10c6e390) returned 1 [0052.118] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e3a0 | out: pbBuffer=0x10c6e3a0) returned 1 [0052.119] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0c01 | out: pbBuffer=0x10fa0c01) returned 1 [0052.119] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa0e01 | out: pbBuffer=0x10fa0e01) returned 1 [0052.119] ReadFile (in: hFile=0x19c, lpBuffer=0x11000000, nNumberOfBytesToRead=0x278d, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11000000*, lpNumberOfBytesRead=0x10c89c54*=0x278d, lpOverlapped=0x0) returned 1 [0052.128] GetFileType (hFile=0x19c) returned 0x1 [0052.129] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.129] WriteFile (in: hFile=0x19c, lpBuffer=0x11002800*, nNumberOfBytesToWrite=0x278d, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11002800*, lpNumberOfBytesWritten=0x10c89c54*=0x278d, lpOverlapped=0x10c89c58) returned 1 [0052.129] GetFileType (hFile=0x19c) returned 0x1 [0052.129] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x278d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.129] GetFileType (hFile=0x19c) returned 0x1 [0052.129] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.129] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa0d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0d00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.129] GetFileType (hFile=0x19c) returned 0x1 [0052.129] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x278d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.129] GetFileType (hFile=0x19c) returned 0x1 [0052.130] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.130] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa0f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa0f00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.130] GetFileType (hFile=0x19c) returned 0x1 [0052.130] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x278d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.130] GetFileType (hFile=0x19c) returned 0x1 [0052.130] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.130] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.130] GetFileType (hFile=0x19c) returned 0x1 [0052.130] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x278d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.130] CloseHandle (hObject=0x19c) returned 1 [0052.131] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.132] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042" (normalized: "c:\\588bce7c90097ed212\\1042"), fInfoLevelId=0x0, lpFileInformation=0x10cfa7d8 | out: lpFileInformation=0x10cfa7d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.132] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042" (normalized: "c:\\588bce7c90097ed212\\1042"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.132] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0078 [0052.132] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.132] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.132] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.132] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.132] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.132] FindClose (in: hFindFile=0x7f0078 | out: hFindFile=0x7f0078) returned 1 [0052.132] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1042\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.145] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.145] GetFileType (hFile=0x19c) returned 0x1 [0052.145] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.146] WriteFile (in: hFile=0x19c, lpBuffer=0x10cc3680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cc3680*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.146] GetFileType (hFile=0x19c) returned 0x1 [0052.146] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.146] CloseHandle (hObject=0x19c) returned 1 [0052.147] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cfa918 | out: lpFileInformation=0x10cfa918*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0052.147] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.147] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.147] GetFileType (hFile=0x19c) returned 0x1 [0052.147] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.147] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e4d0 | out: pbBuffer=0x10c6e4d0) returned 1 [0052.147] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e4e0 | out: pbBuffer=0x10c6e4e0) returned 1 [0052.147] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa1001 | out: pbBuffer=0x10fa1001) returned 1 [0052.147] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa1201 | out: pbBuffer=0x10fa1201) returned 1 [0052.148] ReadFile (in: hFile=0x19c, lpBuffer=0x11016000, nNumberOfBytesToRead=0xfed6, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11016000*, lpNumberOfBytesRead=0x10c89c54*=0xfed6, lpOverlapped=0x0) returned 1 [0052.152] GetFileType (hFile=0x19c) returned 0x1 [0052.152] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.152] WriteFile (in: hFile=0x19c, lpBuffer=0x11026000*, nNumberOfBytesToWrite=0xfed6, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11026000*, lpNumberOfBytesWritten=0x10c89c54*=0xfed6, lpOverlapped=0x10c89c58) returned 1 [0052.152] GetFileType (hFile=0x19c) returned 0x1 [0052.152] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfed6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.152] GetFileType (hFile=0x19c) returned 0x1 [0052.152] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.152] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa1100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa1100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.153] GetFileType (hFile=0x19c) returned 0x1 [0052.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfed6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.153] GetFileType (hFile=0x19c) returned 0x1 [0052.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.153] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa1300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa1300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.153] GetFileType (hFile=0x19c) returned 0x1 [0052.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfed6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.153] GetFileType (hFile=0x19c) returned 0x1 [0052.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.153] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.153] GetFileType (hFile=0x19c) returned 0x1 [0052.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfed6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.153] CloseHandle (hObject=0x19c) returned 1 [0052.157] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.158] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cfaa58 | out: lpFileInformation=0x10cfaa58*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1 [0052.158] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10cfaaa8 | out: lpFileInformation=0x10cfaaa8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1 [0052.158] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.159] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.159] GetFileType (hFile=0x19c) returned 0x1 [0052.159] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.159] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e5c0 | out: pbBuffer=0x10c6e5c0) returned 1 [0052.159] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e5d0 | out: pbBuffer=0x10c6e5d0) returned 1 [0052.159] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa1401 | out: pbBuffer=0x10fa1401) returned 1 [0052.159] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa1701 | out: pbBuffer=0x10fa1701) returned 1 [0052.160] ReadFile (in: hFile=0x19c, lpBuffer=0x1103c000, nNumberOfBytesToRead=0x318f, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x1103c000*, lpNumberOfBytesRead=0x10c89c54*=0x318f, lpOverlapped=0x0) returned 1 [0052.162] GetFileType (hFile=0x19c) returned 0x1 [0052.162] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.162] WriteFile (in: hFile=0x19c, lpBuffer=0x1103f500*, nNumberOfBytesToWrite=0x318f, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1103f500*, lpNumberOfBytesWritten=0x10c89c54*=0x318f, lpOverlapped=0x10c89c58) returned 1 [0052.162] GetFileType (hFile=0x19c) returned 0x1 [0052.162] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x318f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.162] GetFileType (hFile=0x19c) returned 0x1 [0052.162] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.163] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa1500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa1500*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.163] GetFileType (hFile=0x19c) returned 0x1 [0052.163] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x318f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.163] GetFileType (hFile=0x19c) returned 0x1 [0052.163] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.163] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa1900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa1900*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.163] GetFileType (hFile=0x19c) returned 0x1 [0052.163] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x318f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.163] GetFileType (hFile=0x19c) returned 0x1 [0052.163] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.163] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.163] GetFileType (hFile=0x19c) returned 0x1 [0052.163] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x318f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.163] CloseHandle (hObject=0x19c) returned 1 [0052.165] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.165] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043" (normalized: "c:\\588bce7c90097ed212\\1043"), fInfoLevelId=0x0, lpFileInformation=0x10cfabe8 | out: lpFileInformation=0x10cfabe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.165] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043" (normalized: "c:\\588bce7c90097ed212\\1043"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.165] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efeb8 [0052.166] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.166] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.166] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.166] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.166] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.166] FindClose (in: hFindFile=0x7efeb8 | out: hFindFile=0x7efeb8) returned 1 [0052.166] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1043\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.168] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.168] GetFileType (hFile=0x19c) returned 0x1 [0052.168] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.168] WriteFile (in: hFile=0x19c, lpBuffer=0x11046000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x11046000*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.169] GetFileType (hFile=0x19c) returned 0x1 [0052.169] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.169] CloseHandle (hObject=0x19c) returned 1 [0052.169] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cfad78 | out: lpFileInformation=0x10cfad78*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0052.169] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.169] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.169] GetFileType (hFile=0x19c) returned 0x1 [0052.169] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.169] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e6f0 | out: pbBuffer=0x10c6e6f0) returned 1 [0052.170] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e700 | out: pbBuffer=0x10c6e700) returned 1 [0052.170] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa1a01 | out: pbBuffer=0x10fa1a01) returned 1 [0052.170] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa1c01 | out: pbBuffer=0x10fa1c01) returned 1 [0052.170] ReadFile (in: hFile=0x19c, lpBuffer=0x11052000, nNumberOfBytesToRead=0x13712, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11052000*, lpNumberOfBytesRead=0x10c89c54*=0x13712, lpOverlapped=0x0) returned 1 [0052.175] GetFileType (hFile=0x19c) returned 0x1 [0052.175] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.175] WriteFile (in: hFile=0x19c, lpBuffer=0x11066000*, nNumberOfBytesToWrite=0x13712, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11066000*, lpNumberOfBytesWritten=0x10c89c54*=0x13712, lpOverlapped=0x10c89c58) returned 1 [0052.175] GetFileType (hFile=0x19c) returned 0x1 [0052.175] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13712, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.175] GetFileType (hFile=0x19c) returned 0x1 [0052.175] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.175] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa1b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa1b00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.175] GetFileType (hFile=0x19c) returned 0x1 [0052.175] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13712, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.175] GetFileType (hFile=0x19c) returned 0x1 [0052.175] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.175] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa1d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa1d00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.176] GetFileType (hFile=0x19c) returned 0x1 [0052.176] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13712, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.176] GetFileType (hFile=0x19c) returned 0x1 [0052.176] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.176] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.176] GetFileType (hFile=0x19c) returned 0x1 [0052.176] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13712, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.176] CloseHandle (hObject=0x19c) returned 1 [0052.178] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.178] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cfaeb8 | out: lpFileInformation=0x10cfaeb8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1 [0052.179] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10cfaf08 | out: lpFileInformation=0x10cfaf08*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0052.180] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.180] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.180] GetFileType (hFile=0x19c) returned 0x1 [0052.180] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.180] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e7e0 | out: pbBuffer=0x10c6e7e0) returned 1 [0052.180] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e7f0 | out: pbBuffer=0x10c6e7f0) returned 1 [0052.180] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fa1e01 | out: pbBuffer=0x10fa1e01) returned 1 [0052.181] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86001 | out: pbBuffer=0x10e86001) returned 1 [0052.181] ReadFile (in: hFile=0x19c, lpBuffer=0x10e8a000, nNumberOfBytesToRead=0xdda, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10e8a000*, lpNumberOfBytesRead=0x10c89c54*=0xdda, lpOverlapped=0x0) returned 1 [0052.183] GetFileType (hFile=0x19c) returned 0x1 [0052.183] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.183] WriteFile (in: hFile=0x19c, lpBuffer=0x10e8b000*, nNumberOfBytesToWrite=0xdda, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e8b000*, lpNumberOfBytesWritten=0x10c89c54*=0xdda, lpOverlapped=0x10c89c58) returned 1 [0052.183] GetFileType (hFile=0x19c) returned 0x1 [0052.183] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdda, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.183] GetFileType (hFile=0x19c) returned 0x1 [0052.183] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.183] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa1f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fa1f00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.184] GetFileType (hFile=0x19c) returned 0x1 [0052.184] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdda, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.184] GetFileType (hFile=0x19c) returned 0x1 [0052.184] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.184] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e86100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.184] GetFileType (hFile=0x19c) returned 0x1 [0052.184] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdda, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.184] GetFileType (hFile=0x19c) returned 0x1 [0052.184] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.184] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.184] GetFileType (hFile=0x19c) returned 0x1 [0052.184] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdda, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.184] CloseHandle (hObject=0x19c) returned 1 [0052.185] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.186] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044" (normalized: "c:\\588bce7c90097ed212\\1044"), fInfoLevelId=0x0, lpFileInformation=0x10cfb048 | out: lpFileInformation=0x10cfb048*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.187] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044" (normalized: "c:\\588bce7c90097ed212\\1044"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.187] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0378 [0052.187] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.187] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.187] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.187] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.187] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.187] FindClose (in: hFindFile=0x7f0378 | out: hFindFile=0x7f0378) returned 1 [0052.187] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1044\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.189] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.189] GetFileType (hFile=0x19c) returned 0x1 [0052.189] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.189] WriteFile (in: hFile=0x19c, lpBuffer=0x11046900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x11046900*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.190] GetFileType (hFile=0x19c) returned 0x1 [0052.190] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.190] CloseHandle (hObject=0x19c) returned 1 [0052.191] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cfb188 | out: lpFileInformation=0x10cfb188*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0052.191] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.191] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.191] GetFileType (hFile=0x19c) returned 0x1 [0052.191] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.191] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e980 | out: pbBuffer=0x10c6e980) returned 1 [0052.191] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e9a0 | out: pbBuffer=0x10c6e9a0) returned 1 [0052.191] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86201 | out: pbBuffer=0x10e86201) returned 1 [0052.191] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86401 | out: pbBuffer=0x10e86401) returned 1 [0052.192] ReadFile (in: hFile=0x19c, lpBuffer=0x10e94000, nNumberOfBytesToRead=0x135c0, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10e94000*, lpNumberOfBytesRead=0x10c89c54*=0x135c0, lpOverlapped=0x0) returned 1 [0052.195] GetFileType (hFile=0x19c) returned 0x1 [0052.195] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.195] WriteFile (in: hFile=0x19c, lpBuffer=0x10ea8000*, nNumberOfBytesToWrite=0x135c0, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10ea8000*, lpNumberOfBytesWritten=0x10c89c54*=0x135c0, lpOverlapped=0x10c89c58) returned 1 [0052.196] GetFileType (hFile=0x19c) returned 0x1 [0052.196] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x135c0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.196] GetFileType (hFile=0x19c) returned 0x1 [0052.196] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.196] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e86300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.196] GetFileType (hFile=0x19c) returned 0x1 [0052.196] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x135c0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.196] GetFileType (hFile=0x19c) returned 0x1 [0052.196] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.196] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e86500*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.196] GetFileType (hFile=0x19c) returned 0x1 [0052.196] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x135c0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.196] GetFileType (hFile=0x19c) returned 0x1 [0052.196] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.196] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.196] GetFileType (hFile=0x19c) returned 0x1 [0052.196] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x135c0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.196] CloseHandle (hObject=0x19c) returned 1 [0052.198] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.199] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cfb2c8 | out: lpFileInformation=0x10cfb2c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0052.199] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10cfb318 | out: lpFileInformation=0x10cfb318*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1 [0052.199] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.199] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.199] GetFileType (hFile=0x19c) returned 0x1 [0052.199] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.199] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eb90 | out: pbBuffer=0x10c6eb90) returned 1 [0052.199] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eba0 | out: pbBuffer=0x10c6eba0) returned 1 [0052.199] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86601 | out: pbBuffer=0x10e86601) returned 1 [0052.200] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86801 | out: pbBuffer=0x10e86801) returned 1 [0052.200] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0xbe6, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89c54*=0xbe6, lpOverlapped=0x0) returned 1 [0052.203] GetFileType (hFile=0x19c) returned 0x1 [0052.203] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.203] WriteFile (in: hFile=0x19c, lpBuffer=0x10eccc00*, nNumberOfBytesToWrite=0xbe6, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10eccc00*, lpNumberOfBytesWritten=0x10c89c54*=0xbe6, lpOverlapped=0x10c89c58) returned 1 [0052.204] GetFileType (hFile=0x19c) returned 0x1 [0052.204] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.204] GetFileType (hFile=0x19c) returned 0x1 [0052.204] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.204] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e86700*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.204] GetFileType (hFile=0x19c) returned 0x1 [0052.204] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.204] GetFileType (hFile=0x19c) returned 0x1 [0052.204] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.204] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e86900*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.204] GetFileType (hFile=0x19c) returned 0x1 [0052.204] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.204] GetFileType (hFile=0x19c) returned 0x1 [0052.204] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.204] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.204] GetFileType (hFile=0x19c) returned 0x1 [0052.204] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.204] CloseHandle (hObject=0x19c) returned 1 [0052.205] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.206] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045" (normalized: "c:\\588bce7c90097ed212\\1045"), fInfoLevelId=0x0, lpFileInformation=0x10cfb458 | out: lpFileInformation=0x10cfb458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.210] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045" (normalized: "c:\\588bce7c90097ed212\\1045"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.210] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0052.211] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.211] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.211] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.211] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.211] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.211] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0052.211] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1045\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.214] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.214] GetFileType (hFile=0x19c) returned 0x1 [0052.214] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.214] WriteFile (in: hFile=0x19c, lpBuffer=0x11047200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x11047200*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.215] GetFileType (hFile=0x19c) returned 0x1 [0052.215] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.215] CloseHandle (hObject=0x19c) returned 1 [0052.215] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cfb598 | out: lpFileInformation=0x10cfb598*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0052.215] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.215] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.215] GetFileType (hFile=0x19c) returned 0x1 [0052.215] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.215] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ecc0 | out: pbBuffer=0x10c6ecc0) returned 1 [0052.215] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ecd0 | out: pbBuffer=0x10c6ecd0) returned 1 [0052.216] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86a01 | out: pbBuffer=0x10e86a01) returned 1 [0052.216] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86c01 | out: pbBuffer=0x10e86c01) returned 1 [0052.216] ReadFile (in: hFile=0x19c, lpBuffer=0x10edc000, nNumberOfBytesToRead=0x141c6, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10edc000*, lpNumberOfBytesRead=0x10c89c54*=0x141c6, lpOverlapped=0x0) returned 1 [0052.220] GetFileType (hFile=0x19c) returned 0x1 [0052.220] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.220] WriteFile (in: hFile=0x19c, lpBuffer=0x10ef2000*, nNumberOfBytesToWrite=0x141c6, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10ef2000*, lpNumberOfBytesWritten=0x10c89c54*=0x141c6, lpOverlapped=0x10c89c58) returned 1 [0052.221] GetFileType (hFile=0x19c) returned 0x1 [0052.221] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x141c6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.221] GetFileType (hFile=0x19c) returned 0x1 [0052.221] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.221] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e86b00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.221] GetFileType (hFile=0x19c) returned 0x1 [0052.221] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x141c6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.221] GetFileType (hFile=0x19c) returned 0x1 [0052.221] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.221] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e86d00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.221] GetFileType (hFile=0x19c) returned 0x1 [0052.221] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x141c6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.221] GetFileType (hFile=0x19c) returned 0x1 [0052.221] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.221] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.221] GetFileType (hFile=0x19c) returned 0x1 [0052.221] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x141c6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.221] CloseHandle (hObject=0x19c) returned 1 [0052.223] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.224] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cfb6d8 | out: lpFileInformation=0x10cfb6d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0052.224] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10cfb728 | out: lpFileInformation=0x10cfb728*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1 [0052.224] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.224] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.224] GetFileType (hFile=0x19c) returned 0x1 [0052.224] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.224] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6edb0 | out: pbBuffer=0x10c6edb0) returned 1 [0052.225] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6edc0 | out: pbBuffer=0x10c6edc0) returned 1 [0052.225] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86e01 | out: pbBuffer=0x10e86e01) returned 1 [0052.225] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87001 | out: pbBuffer=0x10e87001) returned 1 [0052.225] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0xfc8, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89c54*=0xfc8, lpOverlapped=0x0) returned 1 [0052.228] GetFileType (hFile=0x19c) returned 0x1 [0052.228] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.228] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfd000*, nNumberOfBytesToWrite=0xfc8, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cfd000*, lpNumberOfBytesWritten=0x10c89c54*=0xfc8, lpOverlapped=0x10c89c58) returned 1 [0052.228] GetFileType (hFile=0x19c) returned 0x1 [0052.228] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfc8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.228] GetFileType (hFile=0x19c) returned 0x1 [0052.228] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.228] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e86f00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.228] GetFileType (hFile=0x19c) returned 0x1 [0052.228] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfc8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.228] GetFileType (hFile=0x19c) returned 0x1 [0052.229] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.229] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e87100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.229] GetFileType (hFile=0x19c) returned 0x1 [0052.229] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfc8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.229] GetFileType (hFile=0x19c) returned 0x1 [0052.229] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.229] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.229] GetFileType (hFile=0x19c) returned 0x1 [0052.229] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfc8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.229] CloseHandle (hObject=0x19c) returned 1 [0052.230] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.230] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046" (normalized: "c:\\588bce7c90097ed212\\1046"), fInfoLevelId=0x0, lpFileInformation=0x10cfb868 | out: lpFileInformation=0x10cfb868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.232] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046" (normalized: "c:\\588bce7c90097ed212\\1046"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.232] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f01b8 [0052.233] FindNextFileW (in: hFindFile=0x7f01b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.233] FindNextFileW (in: hFindFile=0x7f01b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.233] FindNextFileW (in: hFindFile=0x7f01b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.233] FindNextFileW (in: hFindFile=0x7f01b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.233] FindNextFileW (in: hFindFile=0x7f01b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.233] FindClose (in: hFindFile=0x7f01b8 | out: hFindFile=0x7f01b8) returned 1 [0052.233] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1046\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.236] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.236] GetFileType (hFile=0x19c) returned 0x1 [0052.236] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.236] WriteFile (in: hFile=0x19c, lpBuffer=0x11047b00*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x11047b00*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.237] GetFileType (hFile=0x19c) returned 0x1 [0052.237] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.237] CloseHandle (hObject=0x19c) returned 1 [0052.237] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cfb9a8 | out: lpFileInformation=0x10cfb9a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0052.237] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.238] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.238] GetFileType (hFile=0x19c) returned 0x1 [0052.238] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.238] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eef0 | out: pbBuffer=0x10c6eef0) returned 1 [0052.238] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ef00 | out: pbBuffer=0x10c6ef00) returned 1 [0052.238] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87201 | out: pbBuffer=0x10e87201) returned 1 [0052.238] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87401 | out: pbBuffer=0x10e87401) returned 1 [0052.239] ReadFile (in: hFile=0x19c, lpBuffer=0x10d0c000, nNumberOfBytesToRead=0x13b62, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10d0c000*, lpNumberOfBytesRead=0x10c89c54*=0x13b62, lpOverlapped=0x0) returned 1 [0052.243] GetFileType (hFile=0x19c) returned 0x1 [0052.243] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.243] WriteFile (in: hFile=0x19c, lpBuffer=0x10d20000*, nNumberOfBytesToWrite=0x13b62, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d20000*, lpNumberOfBytesWritten=0x10c89c54*=0x13b62, lpOverlapped=0x10c89c58) returned 1 [0052.244] GetFileType (hFile=0x19c) returned 0x1 [0052.244] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13b62, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.244] GetFileType (hFile=0x19c) returned 0x1 [0052.244] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.244] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e87300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.244] GetFileType (hFile=0x19c) returned 0x1 [0052.244] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13b62, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.244] GetFileType (hFile=0x19c) returned 0x1 [0052.244] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.244] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e87500*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.244] GetFileType (hFile=0x19c) returned 0x1 [0052.244] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13b62, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.244] GetFileType (hFile=0x19c) returned 0x1 [0052.244] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.244] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.245] GetFileType (hFile=0x19c) returned 0x1 [0052.245] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13b62, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.245] CloseHandle (hObject=0x19c) returned 1 [0052.246] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.247] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cfbae8 | out: lpFileInformation=0x10cfbae8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0052.247] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10cfbb38 | out: lpFileInformation=0x10cfbb38*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0052.247] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.247] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.248] GetFileType (hFile=0x19c) returned 0x1 [0052.248] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.248] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6efe0 | out: pbBuffer=0x10c6efe0) returned 1 [0052.248] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eff0 | out: pbBuffer=0x10c6eff0) returned 1 [0052.248] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87601 | out: pbBuffer=0x10e87601) returned 1 [0052.248] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87801 | out: pbBuffer=0x10e87801) returned 1 [0052.248] ReadFile (in: hFile=0x19c, lpBuffer=0x10d40000, nNumberOfBytesToRead=0xe63, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10d40000*, lpNumberOfBytesRead=0x10c89c54*=0xe63, lpOverlapped=0x0) returned 1 [0052.268] GetFileType (hFile=0x19c) returned 0x1 [0052.268] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.268] WriteFile (in: hFile=0x19c, lpBuffer=0x10d41000*, nNumberOfBytesToWrite=0xe63, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d41000*, lpNumberOfBytesWritten=0x10c89c54*=0xe63, lpOverlapped=0x10c89c58) returned 1 [0052.269] GetFileType (hFile=0x19c) returned 0x1 [0052.269] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe63, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.269] GetFileType (hFile=0x19c) returned 0x1 [0052.269] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.269] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e87700*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.269] GetFileType (hFile=0x19c) returned 0x1 [0052.269] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe63, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.269] GetFileType (hFile=0x19c) returned 0x1 [0052.269] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.269] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e87900*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.269] GetFileType (hFile=0x19c) returned 0x1 [0052.269] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe63, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.269] GetFileType (hFile=0x19c) returned 0x1 [0052.269] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.269] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.270] GetFileType (hFile=0x19c) returned 0x1 [0052.270] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe63, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.270] CloseHandle (hObject=0x19c) returned 1 [0052.271] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.271] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049" (normalized: "c:\\588bce7c90097ed212\\1049"), fInfoLevelId=0x0, lpFileInformation=0x10cfbc78 | out: lpFileInformation=0x10cfbc78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.271] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049" (normalized: "c:\\588bce7c90097ed212\\1049"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.271] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efeb8 [0052.272] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.272] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.272] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.272] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.272] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.272] FindClose (in: hFindFile=0x7efeb8 | out: hFindFile=0x7efeb8) returned 1 [0052.272] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1049\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.356] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.356] GetFileType (hFile=0x19c) returned 0x1 [0052.356] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.356] WriteFile (in: hFile=0x19c, lpBuffer=0x10d44480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10d44480*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.357] GetFileType (hFile=0x19c) returned 0x1 [0052.357] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.357] CloseHandle (hObject=0x19c) returned 1 [0052.357] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cfbdb8 | out: lpFileInformation=0x10cfbdb8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0052.357] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.358] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.358] GetFileType (hFile=0x19c) returned 0x1 [0052.358] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.358] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f110 | out: pbBuffer=0x10c6f110) returned 1 [0052.358] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f120 | out: pbBuffer=0x10c6f120) returned 1 [0052.358] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87a01 | out: pbBuffer=0x10e87a01) returned 1 [0052.358] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87c01 | out: pbBuffer=0x10e87c01) returned 1 [0052.359] ReadFile (in: hFile=0x19c, lpBuffer=0x10d4c000, nNumberOfBytesToRead=0x13e4a, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10d4c000*, lpNumberOfBytesRead=0x10c89c54*=0x13e4a, lpOverlapped=0x0) returned 1 [0052.383] GetFileType (hFile=0x19c) returned 0x1 [0052.383] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.383] WriteFile (in: hFile=0x19c, lpBuffer=0x10d60000*, nNumberOfBytesToWrite=0x13e4a, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d60000*, lpNumberOfBytesWritten=0x10c89c54*=0x13e4a, lpOverlapped=0x10c89c58) returned 1 [0052.383] GetFileType (hFile=0x19c) returned 0x1 [0052.383] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13e4a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.383] GetFileType (hFile=0x19c) returned 0x1 [0052.383] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.383] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e87b00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.383] GetFileType (hFile=0x19c) returned 0x1 [0052.384] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13e4a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.384] GetFileType (hFile=0x19c) returned 0x1 [0052.384] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.384] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e87d00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.384] GetFileType (hFile=0x19c) returned 0x1 [0052.384] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13e4a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.384] GetFileType (hFile=0x19c) returned 0x1 [0052.384] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.384] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.384] GetFileType (hFile=0x19c) returned 0x1 [0052.384] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13e4a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.384] CloseHandle (hObject=0x19c) returned 1 [0052.386] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.387] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cfbef8 | out: lpFileInformation=0x10cfbef8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1 [0052.387] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10cfbf48 | out: lpFileInformation=0x10cfbf48*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1 [0052.392] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.392] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.392] GetFileType (hFile=0x19c) returned 0x1 [0052.392] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.392] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f200 | out: pbBuffer=0x10c6f200) returned 1 [0052.392] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f210 | out: pbBuffer=0x10c6f210) returned 1 [0052.392] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87e01 | out: pbBuffer=0x10e87e01) returned 1 [0052.392] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d78001 | out: pbBuffer=0x10d78001) returned 1 [0052.393] ReadFile (in: hFile=0x19c, lpBuffer=0x10f12000, nNumberOfBytesToRead=0xd4b8, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10f12000*, lpNumberOfBytesRead=0x10c89c54*=0xd4b8, lpOverlapped=0x0) returned 1 [0052.411] GetFileType (hFile=0x19c) returned 0x1 [0052.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.411] WriteFile (in: hFile=0x19c, lpBuffer=0x10f20000*, nNumberOfBytesToWrite=0xd4b8, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10f20000*, lpNumberOfBytesWritten=0x10c89c54*=0xd4b8, lpOverlapped=0x10c89c58) returned 1 [0052.411] GetFileType (hFile=0x19c) returned 0x1 [0052.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd4b8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.411] GetFileType (hFile=0x19c) returned 0x1 [0052.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.411] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e87f00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.411] GetFileType (hFile=0x19c) returned 0x1 [0052.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd4b8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.411] GetFileType (hFile=0x19c) returned 0x1 [0052.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.412] WriteFile (in: hFile=0x19c, lpBuffer=0x10d78100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d78100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.412] GetFileType (hFile=0x19c) returned 0x1 [0052.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd4b8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.412] GetFileType (hFile=0x19c) returned 0x1 [0052.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.412] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.412] GetFileType (hFile=0x19c) returned 0x1 [0052.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd4b8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.412] CloseHandle (hObject=0x19c) returned 1 [0052.413] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.414] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053" (normalized: "c:\\588bce7c90097ed212\\1053"), fInfoLevelId=0x0, lpFileInformation=0x110b60f8 | out: lpFileInformation=0x110b60f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.420] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053" (normalized: "c:\\588bce7c90097ed212\\1053"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.420] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0378 [0052.420] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.420] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.420] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.420] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.420] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.420] FindClose (in: hFindFile=0x7f0378 | out: hFindFile=0x7f0378) returned 1 [0052.421] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1053\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.426] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.427] GetFileType (hFile=0x19c) returned 0x1 [0052.427] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.427] WriteFile (in: hFile=0x19c, lpBuffer=0x10d44d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10d44d80*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.427] GetFileType (hFile=0x19c) returned 0x1 [0052.427] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.427] CloseHandle (hObject=0x19c) returned 1 [0052.428] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x110b6238 | out: lpFileInformation=0x110b6238*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0052.433] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.433] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.433] GetFileType (hFile=0x19c) returned 0x1 [0052.433] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.433] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f340 | out: pbBuffer=0x10c6f340) returned 1 [0052.433] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f350 | out: pbBuffer=0x10c6f350) returned 1 [0052.433] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d78201 | out: pbBuffer=0x10d78201) returned 1 [0052.434] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d78401 | out: pbBuffer=0x10d78401) returned 1 [0052.434] ReadFile (in: hFile=0x19c, lpBuffer=0x10f2e000, nNumberOfBytesToRead=0x12f70, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10f2e000*, lpNumberOfBytesRead=0x10c89c54*=0x12f70, lpOverlapped=0x0) returned 1 [0052.438] GetFileType (hFile=0x19c) returned 0x1 [0052.438] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.438] WriteFile (in: hFile=0x19c, lpBuffer=0x10f42000*, nNumberOfBytesToWrite=0x12f70, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10f42000*, lpNumberOfBytesWritten=0x10c89c54*=0x12f70, lpOverlapped=0x10c89c58) returned 1 [0052.438] GetFileType (hFile=0x19c) returned 0x1 [0052.438] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12f70, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.438] GetFileType (hFile=0x19c) returned 0x1 [0052.438] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.438] WriteFile (in: hFile=0x19c, lpBuffer=0x10d78300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d78300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.438] GetFileType (hFile=0x19c) returned 0x1 [0052.439] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12f70, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.439] GetFileType (hFile=0x19c) returned 0x1 [0052.439] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.439] WriteFile (in: hFile=0x19c, lpBuffer=0x10d78500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d78500*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.439] GetFileType (hFile=0x19c) returned 0x1 [0052.439] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12f70, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.439] GetFileType (hFile=0x19c) returned 0x1 [0052.439] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.439] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.445] GetFileType (hFile=0x19c) returned 0x1 [0052.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12f70, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.445] CloseHandle (hObject=0x19c) returned 1 [0052.449] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.450] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x110b6378 | out: lpFileInformation=0x110b6378*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0052.450] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x110b63c8 | out: lpFileInformation=0x110b63c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1 [0052.450] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.451] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.451] GetFileType (hFile=0x19c) returned 0x1 [0052.451] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.451] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f430 | out: pbBuffer=0x10c6f430) returned 1 [0052.451] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f440 | out: pbBuffer=0x10c6f440) returned 1 [0052.451] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d78601 | out: pbBuffer=0x10d78601) returned 1 [0052.451] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d78801 | out: pbBuffer=0x10d78801) returned 1 [0052.452] ReadFile (in: hFile=0x19c, lpBuffer=0x10f5a000, nNumberOfBytesToRead=0xf19, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10f5a000*, lpNumberOfBytesRead=0x10c89c54*=0xf19, lpOverlapped=0x0) returned 1 [0052.458] GetFileType (hFile=0x19c) returned 0x1 [0052.483] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.483] WriteFile (in: hFile=0x19c, lpBuffer=0x10f5b000*, nNumberOfBytesToWrite=0xf19, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10f5b000*, lpNumberOfBytesWritten=0x10c89c54*=0xf19, lpOverlapped=0x10c89c58) returned 1 [0052.484] GetFileType (hFile=0x19c) returned 0x1 [0052.484] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf19, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.484] GetFileType (hFile=0x19c) returned 0x1 [0052.484] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.484] WriteFile (in: hFile=0x19c, lpBuffer=0x10d78700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d78700*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.484] GetFileType (hFile=0x19c) returned 0x1 [0052.484] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf19, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.484] GetFileType (hFile=0x19c) returned 0x1 [0052.484] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.484] WriteFile (in: hFile=0x19c, lpBuffer=0x10d78900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d78900*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.484] GetFileType (hFile=0x19c) returned 0x1 [0052.484] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf19, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.484] GetFileType (hFile=0x19c) returned 0x1 [0052.484] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.484] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.485] GetFileType (hFile=0x19c) returned 0x1 [0052.485] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf19, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.485] CloseHandle (hObject=0x19c) returned 1 [0052.509] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.509] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055" (normalized: "c:\\588bce7c90097ed212\\1055"), fInfoLevelId=0x0, lpFileInformation=0x110b6508 | out: lpFileInformation=0x110b6508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.510] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055" (normalized: "c:\\588bce7c90097ed212\\1055"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.510] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0278 [0052.510] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.510] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.510] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.510] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.510] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.510] FindClose (in: hFindFile=0x7f0278 | out: hFindFile=0x7f0278) returned 1 [0052.510] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\1055\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.523] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.523] GetFileType (hFile=0x19c) returned 0x1 [0052.523] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.523] WriteFile (in: hFile=0x19c, lpBuffer=0x10d45680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10d45680*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.524] GetFileType (hFile=0x19c) returned 0x1 [0052.524] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.524] CloseHandle (hObject=0x19c) returned 1 [0052.524] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x110b6648 | out: lpFileInformation=0x110b6648*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0052.524] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.524] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.524] GetFileType (hFile=0x19c) returned 0x1 [0052.524] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.524] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f560 | out: pbBuffer=0x10c6f560) returned 1 [0052.524] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f570 | out: pbBuffer=0x10c6f570) returned 1 [0052.525] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d78a01 | out: pbBuffer=0x10d78a01) returned 1 [0052.525] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d78c01 | out: pbBuffer=0x10d78c01) returned 1 [0052.525] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x12c12, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89c54*=0x12c12, lpOverlapped=0x0) returned 1 [0052.529] GetFileType (hFile=0x19c) returned 0x1 [0052.529] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.529] WriteFile (in: hFile=0x19c, lpBuffer=0x10f80000*, nNumberOfBytesToWrite=0x12c12, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10f80000*, lpNumberOfBytesWritten=0x10c89c54*=0x12c12, lpOverlapped=0x10c89c58) returned 1 [0052.530] GetFileType (hFile=0x19c) returned 0x1 [0052.530] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12c12, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.530] GetFileType (hFile=0x19c) returned 0x1 [0052.530] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.530] WriteFile (in: hFile=0x19c, lpBuffer=0x10d78b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d78b00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.530] GetFileType (hFile=0x19c) returned 0x1 [0052.530] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12c12, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.530] GetFileType (hFile=0x19c) returned 0x1 [0052.531] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.531] WriteFile (in: hFile=0x19c, lpBuffer=0x10d78d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d78d00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.531] GetFileType (hFile=0x19c) returned 0x1 [0052.531] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12c12, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.531] GetFileType (hFile=0x19c) returned 0x1 [0052.531] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.531] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.531] GetFileType (hFile=0x19c) returned 0x1 [0052.531] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12c12, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.532] CloseHandle (hObject=0x19c) returned 1 [0052.533] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.534] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x110b6788 | out: lpFileInformation=0x110b6788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1 [0052.534] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x110b67d8 | out: lpFileInformation=0x110b67d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1 [0052.534] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.534] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.534] GetFileType (hFile=0x19c) returned 0x1 [0052.534] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.534] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f650 | out: pbBuffer=0x10c6f650) returned 1 [0052.535] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f660 | out: pbBuffer=0x10c6f660) returned 1 [0052.535] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d78e01 | out: pbBuffer=0x10d78e01) returned 1 [0052.535] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d79001 | out: pbBuffer=0x10d79001) returned 1 [0052.535] ReadFile (in: hFile=0x19c, lpBuffer=0x10f9c000, nNumberOfBytesToRead=0xf13, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10f9c000*, lpNumberOfBytesRead=0x10c89c54*=0xf13, lpOverlapped=0x0) returned 1 [0052.537] GetFileType (hFile=0x19c) returned 0x1 [0052.537] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.538] WriteFile (in: hFile=0x19c, lpBuffer=0x10f9d000*, nNumberOfBytesToWrite=0xf13, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10f9d000*, lpNumberOfBytesWritten=0x10c89c54*=0xf13, lpOverlapped=0x10c89c58) returned 1 [0052.538] GetFileType (hFile=0x19c) returned 0x1 [0052.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf13, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.538] GetFileType (hFile=0x19c) returned 0x1 [0052.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.538] WriteFile (in: hFile=0x19c, lpBuffer=0x10d78f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d78f00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.538] GetFileType (hFile=0x19c) returned 0x1 [0052.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf13, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.538] GetFileType (hFile=0x19c) returned 0x1 [0052.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.538] WriteFile (in: hFile=0x19c, lpBuffer=0x10d79100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d79100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.538] GetFileType (hFile=0x19c) returned 0x1 [0052.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf13, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.538] GetFileType (hFile=0x19c) returned 0x1 [0052.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.538] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.538] GetFileType (hFile=0x19c) returned 0x1 [0052.539] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf13, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.539] CloseHandle (hObject=0x19c) returned 1 [0052.539] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.540] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052" (normalized: "c:\\588bce7c90097ed212\\2052"), fInfoLevelId=0x0, lpFileInformation=0x110b6918 | out: lpFileInformation=0x110b6918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.540] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052" (normalized: "c:\\588bce7c90097ed212\\2052"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.540] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f00f8 [0052.540] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.540] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.540] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.540] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.540] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.541] FindClose (in: hFindFile=0x7f00f8 | out: hFindFile=0x7f00f8) returned 1 [0052.541] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\2052\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.543] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.543] GetFileType (hFile=0x19c) returned 0x1 [0052.543] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.543] WriteFile (in: hFile=0x19c, lpBuffer=0x110ba000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110ba000*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.544] GetFileType (hFile=0x19c) returned 0x1 [0052.544] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.544] CloseHandle (hObject=0x19c) returned 1 [0052.544] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x110b6a58 | out: lpFileInformation=0x110b6a58*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0052.544] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.544] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.544] GetFileType (hFile=0x19c) returned 0x1 [0052.544] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.544] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f790 | out: pbBuffer=0x10c6f790) returned 1 [0052.545] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f7a0 | out: pbBuffer=0x10c6f7a0) returned 1 [0052.545] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d79201 | out: pbBuffer=0x10d79201) returned 1 [0052.545] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d79401 | out: pbBuffer=0x10d79401) returned 1 [0052.546] ReadFile (in: hFile=0x19c, lpBuffer=0x110c6000, nNumberOfBytesToRead=0xed0c, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x110c6000*, lpNumberOfBytesRead=0x10c89c54*=0xed0c, lpOverlapped=0x0) returned 1 [0052.551] GetFileType (hFile=0x19c) returned 0x1 [0052.552] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.552] WriteFile (in: hFile=0x19c, lpBuffer=0x110d6000*, nNumberOfBytesToWrite=0xed0c, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110d6000*, lpNumberOfBytesWritten=0x10c89c54*=0xed0c, lpOverlapped=0x10c89c58) returned 1 [0052.552] GetFileType (hFile=0x19c) returned 0x1 [0052.552] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xed0c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.552] GetFileType (hFile=0x19c) returned 0x1 [0052.552] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.552] WriteFile (in: hFile=0x19c, lpBuffer=0x10d79300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d79300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.552] GetFileType (hFile=0x19c) returned 0x1 [0052.552] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xed0c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.552] GetFileType (hFile=0x19c) returned 0x1 [0052.552] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.552] WriteFile (in: hFile=0x19c, lpBuffer=0x10d79500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d79500*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.552] GetFileType (hFile=0x19c) returned 0x1 [0052.552] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xed0c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.552] GetFileType (hFile=0x19c) returned 0x1 [0052.552] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.553] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.553] GetFileType (hFile=0x19c) returned 0x1 [0052.553] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xed0c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.553] CloseHandle (hObject=0x19c) returned 1 [0052.554] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.555] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x110b6b98 | out: lpFileInformation=0x110b6b98*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0052.555] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x110b6be8 | out: lpFileInformation=0x110b6be8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1 [0052.555] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.555] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.555] GetFileType (hFile=0x19c) returned 0x1 [0052.555] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.555] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f880 | out: pbBuffer=0x10c6f880) returned 1 [0052.555] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f890 | out: pbBuffer=0x10c6f890) returned 1 [0052.555] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d79601 | out: pbBuffer=0x10d79601) returned 1 [0052.556] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d79801 | out: pbBuffer=0x10d79801) returned 1 [0052.557] ReadFile (in: hFile=0x19c, lpBuffer=0x110f2000, nNumberOfBytesToRead=0x16c3, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x110f2000*, lpNumberOfBytesRead=0x10c89c54*=0x16c3, lpOverlapped=0x0) returned 1 [0052.561] GetFileType (hFile=0x19c) returned 0x1 [0052.562] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.562] WriteFile (in: hFile=0x19c, lpBuffer=0x110f3800*, nNumberOfBytesToWrite=0x16c3, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110f3800*, lpNumberOfBytesWritten=0x10c89c54*=0x16c3, lpOverlapped=0x10c89c58) returned 1 [0052.562] GetFileType (hFile=0x19c) returned 0x1 [0052.562] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16c3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.562] GetFileType (hFile=0x19c) returned 0x1 [0052.562] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.562] WriteFile (in: hFile=0x19c, lpBuffer=0x10d79700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d79700*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.562] GetFileType (hFile=0x19c) returned 0x1 [0052.562] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16c3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.562] GetFileType (hFile=0x19c) returned 0x1 [0052.562] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.562] WriteFile (in: hFile=0x19c, lpBuffer=0x10d79900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d79900*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.562] GetFileType (hFile=0x19c) returned 0x1 [0052.562] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16c3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.562] GetFileType (hFile=0x19c) returned 0x1 [0052.562] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.563] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.563] GetFileType (hFile=0x19c) returned 0x1 [0052.563] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16c3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.563] CloseHandle (hObject=0x19c) returned 1 [0052.563] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.565] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070" (normalized: "c:\\588bce7c90097ed212\\2070"), fInfoLevelId=0x0, lpFileInformation=0x110b6d28 | out: lpFileInformation=0x110b6d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.565] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070" (normalized: "c:\\588bce7c90097ed212\\2070"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.565] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eff38 [0052.565] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.565] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.565] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.565] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.565] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.565] FindClose (in: hFindFile=0x7eff38 | out: hFindFile=0x7eff38) returned 1 [0052.565] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\2070\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.567] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.567] GetFileType (hFile=0x19c) returned 0x1 [0052.567] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.568] WriteFile (in: hFile=0x19c, lpBuffer=0x110ba900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110ba900*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.568] GetFileType (hFile=0x19c) returned 0x1 [0052.568] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.568] CloseHandle (hObject=0x19c) returned 1 [0052.569] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x110b6e68 | out: lpFileInformation=0x110b6e68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0052.569] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.569] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.569] GetFileType (hFile=0x19c) returned 0x1 [0052.569] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.569] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f9b0 | out: pbBuffer=0x10c6f9b0) returned 1 [0052.569] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f9c0 | out: pbBuffer=0x10c6f9c0) returned 1 [0052.569] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d79a01 | out: pbBuffer=0x10d79a01) returned 1 [0052.570] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d79c01 | out: pbBuffer=0x10d79c01) returned 1 [0052.570] ReadFile (in: hFile=0x19c, lpBuffer=0x11104000, nNumberOfBytesToRead=0x1397e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11104000*, lpNumberOfBytesRead=0x10c89c54*=0x1397e, lpOverlapped=0x0) returned 1 [0052.575] GetFileType (hFile=0x19c) returned 0x1 [0052.575] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.575] WriteFile (in: hFile=0x19c, lpBuffer=0x11118000*, nNumberOfBytesToWrite=0x1397e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11118000*, lpNumberOfBytesWritten=0x10c89c54*=0x1397e, lpOverlapped=0x10c89c58) returned 1 [0052.575] GetFileType (hFile=0x19c) returned 0x1 [0052.575] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1397e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.575] GetFileType (hFile=0x19c) returned 0x1 [0052.575] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.576] WriteFile (in: hFile=0x19c, lpBuffer=0x10d79b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d79b00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.576] GetFileType (hFile=0x19c) returned 0x1 [0052.576] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1397e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.576] GetFileType (hFile=0x19c) returned 0x1 [0052.576] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.576] WriteFile (in: hFile=0x19c, lpBuffer=0x10d79d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d79d00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.576] GetFileType (hFile=0x19c) returned 0x1 [0052.576] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1397e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.576] GetFileType (hFile=0x19c) returned 0x1 [0052.576] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.576] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.576] GetFileType (hFile=0x19c) returned 0x1 [0052.576] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1397e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.576] CloseHandle (hObject=0x19c) returned 1 [0052.578] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.578] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x110b6fa8 | out: lpFileInformation=0x110b6fa8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0052.579] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x110b6ff8 | out: lpFileInformation=0x110b6ff8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1 [0052.581] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.581] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.581] GetFileType (hFile=0x19c) returned 0x1 [0052.581] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.581] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6faa0 | out: pbBuffer=0x10c6faa0) returned 1 [0052.581] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fab0 | out: pbBuffer=0x10c6fab0) returned 1 [0052.581] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d79e01 | out: pbBuffer=0x10d79e01) returned 1 [0052.582] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130001 | out: pbBuffer=0x11130001) returned 1 [0052.583] ReadFile (in: hFile=0x19c, lpBuffer=0x11134000, nNumberOfBytesToRead=0xfaf, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11134000*, lpNumberOfBytesRead=0x10c89c54*=0xfaf, lpOverlapped=0x0) returned 1 [0052.585] GetFileType (hFile=0x19c) returned 0x1 [0052.585] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.585] WriteFile (in: hFile=0x19c, lpBuffer=0x11135000*, nNumberOfBytesToWrite=0xfaf, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11135000*, lpNumberOfBytesWritten=0x10c89c54*=0xfaf, lpOverlapped=0x10c89c58) returned 1 [0052.585] GetFileType (hFile=0x19c) returned 0x1 [0052.585] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfaf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.585] GetFileType (hFile=0x19c) returned 0x1 [0052.585] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.585] WriteFile (in: hFile=0x19c, lpBuffer=0x10d79f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d79f00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.585] GetFileType (hFile=0x19c) returned 0x1 [0052.585] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfaf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.585] GetFileType (hFile=0x19c) returned 0x1 [0052.585] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.585] WriteFile (in: hFile=0x19c, lpBuffer=0x11130100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11130100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.585] GetFileType (hFile=0x19c) returned 0x1 [0052.585] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfaf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.586] GetFileType (hFile=0x19c) returned 0x1 [0052.586] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.586] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.586] GetFileType (hFile=0x19c) returned 0x1 [0052.586] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfaf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.586] CloseHandle (hObject=0x19c) returned 1 [0052.586] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.587] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076" (normalized: "c:\\588bce7c90097ed212\\3076"), fInfoLevelId=0x0, lpFileInformation=0x110b7138 | out: lpFileInformation=0x110b7138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37db23a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.587] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076" (normalized: "c:\\588bce7c90097ed212\\3076"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.587] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eff78 [0052.587] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.588] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.588] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.588] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.588] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.588] FindClose (in: hFindFile=0x7eff78 | out: hFindFile=0x7eff78) returned 1 [0052.588] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\3076\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.590] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.590] GetFileType (hFile=0x19c) returned 0x1 [0052.590] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.590] WriteFile (in: hFile=0x19c, lpBuffer=0x110bb200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110bb200*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.591] GetFileType (hFile=0x19c) returned 0x1 [0052.591] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.591] CloseHandle (hObject=0x19c) returned 1 [0052.591] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x110b7278 | out: lpFileInformation=0x110b7278*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0052.591] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.592] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.592] GetFileType (hFile=0x19c) returned 0x1 [0052.592] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.592] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fbe0 | out: pbBuffer=0x10c6fbe0) returned 1 [0052.592] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fbf0 | out: pbBuffer=0x10c6fbf0) returned 1 [0052.592] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130201 | out: pbBuffer=0x11130201) returned 1 [0052.592] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130401 | out: pbBuffer=0x11130401) returned 1 [0052.593] ReadFile (in: hFile=0x19c, lpBuffer=0x11144000, nNumberOfBytesToRead=0xed90, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11144000*, lpNumberOfBytesRead=0x10c89c54*=0xed90, lpOverlapped=0x0) returned 1 [0052.596] GetFileType (hFile=0x19c) returned 0x1 [0052.596] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.596] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0xed90, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89c54*=0xed90, lpOverlapped=0x10c89c58) returned 1 [0052.597] GetFileType (hFile=0x19c) returned 0x1 [0052.597] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xed90, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.597] GetFileType (hFile=0x19c) returned 0x1 [0052.597] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.597] WriteFile (in: hFile=0x19c, lpBuffer=0x11130300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11130300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.597] GetFileType (hFile=0x19c) returned 0x1 [0052.597] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xed90, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.597] GetFileType (hFile=0x19c) returned 0x1 [0052.597] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.597] WriteFile (in: hFile=0x19c, lpBuffer=0x11130500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11130500*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.597] GetFileType (hFile=0x19c) returned 0x1 [0052.597] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xed90, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.597] GetFileType (hFile=0x19c) returned 0x1 [0052.597] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.597] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.597] GetFileType (hFile=0x19c) returned 0x1 [0052.597] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xed90, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.597] CloseHandle (hObject=0x19c) returned 1 [0052.599] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.599] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x110b73b8 | out: lpFileInformation=0x110b73b8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1 [0052.599] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x110b7408 | out: lpFileInformation=0x110b7408*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0052.600] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.600] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.600] GetFileType (hFile=0x19c) returned 0x1 [0052.600] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.600] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fcd0 | out: pbBuffer=0x10c6fcd0) returned 1 [0052.600] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fce0 | out: pbBuffer=0x10c6fce0) returned 1 [0052.600] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130601 | out: pbBuffer=0x11130601) returned 1 [0052.601] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130801 | out: pbBuffer=0x11130801) returned 1 [0052.601] ReadFile (in: hFile=0x19c, lpBuffer=0x10d9c000, nNumberOfBytesToRead=0x18a5, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10d9c000*, lpNumberOfBytesRead=0x10c89c54*=0x18a5, lpOverlapped=0x0) returned 1 [0052.603] GetFileType (hFile=0x19c) returned 0x1 [0052.603] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.603] WriteFile (in: hFile=0x19c, lpBuffer=0x10d9d980*, nNumberOfBytesToWrite=0x18a5, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10d9d980*, lpNumberOfBytesWritten=0x10c89c54*=0x18a5, lpOverlapped=0x10c89c58) returned 1 [0052.603] GetFileType (hFile=0x19c) returned 0x1 [0052.603] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x18a5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.603] GetFileType (hFile=0x19c) returned 0x1 [0052.603] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.603] WriteFile (in: hFile=0x19c, lpBuffer=0x11130700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11130700*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.603] GetFileType (hFile=0x19c) returned 0x1 [0052.603] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x18a5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.603] GetFileType (hFile=0x19c) returned 0x1 [0052.604] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.604] WriteFile (in: hFile=0x19c, lpBuffer=0x11130900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11130900*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.604] GetFileType (hFile=0x19c) returned 0x1 [0052.604] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x18a5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.604] GetFileType (hFile=0x19c) returned 0x1 [0052.604] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.604] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.604] GetFileType (hFile=0x19c) returned 0x1 [0052.604] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x18a5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.604] CloseHandle (hObject=0x19c) returned 1 [0052.636] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.637] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082" (normalized: "c:\\588bce7c90097ed212\\3082"), fInfoLevelId=0x0, lpFileInformation=0x110b7548 | out: lpFileInformation=0x110b7548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf38014a5, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.638] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082" (normalized: "c:\\588bce7c90097ed212\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.638] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efc38 [0052.638] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.638] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0052.638] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.638] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0052.638] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.638] FindClose (in: hFindFile=0x7efc38 | out: hFindFile=0x7efc38) returned 1 [0052.638] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\3082\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.656] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.656] GetFileType (hFile=0x19c) returned 0x1 [0052.656] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.656] WriteFile (in: hFile=0x19c, lpBuffer=0x110bbb00*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110bbb00*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.657] GetFileType (hFile=0x19c) returned 0x1 [0052.657] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.657] CloseHandle (hObject=0x19c) returned 1 [0052.657] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x110b7688 | out: lpFileInformation=0x110b7688*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0052.658] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.658] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.658] GetFileType (hFile=0x19c) returned 0x1 [0052.658] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.658] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fe00 | out: pbBuffer=0x10c6fe00) returned 1 [0052.658] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fe10 | out: pbBuffer=0x10c6fe10) returned 1 [0052.658] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130a01 | out: pbBuffer=0x11130a01) returned 1 [0052.659] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130c01 | out: pbBuffer=0x11130c01) returned 1 [0052.659] ReadFile (in: hFile=0x19c, lpBuffer=0x10daa000, nNumberOfBytesToRead=0x1387c, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10daa000*, lpNumberOfBytesRead=0x10c89c54*=0x1387c, lpOverlapped=0x0) returned 1 [0052.667] GetFileType (hFile=0x19c) returned 0x1 [0052.667] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.667] WriteFile (in: hFile=0x19c, lpBuffer=0x10dbe000*, nNumberOfBytesToWrite=0x1387c, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10dbe000*, lpNumberOfBytesWritten=0x10c89c54*=0x1387c, lpOverlapped=0x10c89c58) returned 1 [0052.667] GetFileType (hFile=0x19c) returned 0x1 [0052.667] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1387c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.667] GetFileType (hFile=0x19c) returned 0x1 [0052.667] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.667] WriteFile (in: hFile=0x19c, lpBuffer=0x11130b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11130b00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.667] GetFileType (hFile=0x19c) returned 0x1 [0052.667] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1387c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.667] GetFileType (hFile=0x19c) returned 0x1 [0052.667] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.667] WriteFile (in: hFile=0x19c, lpBuffer=0x11130d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11130d00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.668] GetFileType (hFile=0x19c) returned 0x1 [0052.668] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1387c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.668] GetFileType (hFile=0x19c) returned 0x1 [0052.668] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.668] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.668] GetFileType (hFile=0x19c) returned 0x1 [0052.668] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1387c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.668] CloseHandle (hObject=0x19c) returned 1 [0052.670] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.trapget"), dwFlags=0x1) returned 1 [0052.670] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x110b77c8 | out: lpFileInformation=0x110b77c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1 [0052.670] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x110b7818 | out: lpFileInformation=0x110b7818*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1 [0052.670] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.671] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.671] GetFileType (hFile=0x19c) returned 0x1 [0052.671] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.671] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fef0 | out: pbBuffer=0x10c6fef0) returned 1 [0052.671] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ff00 | out: pbBuffer=0x10c6ff00) returned 1 [0052.671] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130e01 | out: pbBuffer=0x11130e01) returned 1 [0052.671] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11131001 | out: pbBuffer=0x11131001) returned 1 [0052.672] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecd800, nNumberOfBytesToRead=0xbfd, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10ecd800*, lpNumberOfBytesRead=0x10c89c54*=0xbfd, lpOverlapped=0x0) returned 1 [0052.686] GetFileType (hFile=0x19c) returned 0x1 [0052.686] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.686] WriteFile (in: hFile=0x19c, lpBuffer=0x10ece400*, nNumberOfBytesToWrite=0xbfd, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10ece400*, lpNumberOfBytesWritten=0x10c89c54*=0xbfd, lpOverlapped=0x10c89c58) returned 1 [0052.687] GetFileType (hFile=0x19c) returned 0x1 [0052.687] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbfd, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.687] GetFileType (hFile=0x19c) returned 0x1 [0052.687] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.687] WriteFile (in: hFile=0x19c, lpBuffer=0x11130f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11130f00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.687] GetFileType (hFile=0x19c) returned 0x1 [0052.687] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbfd, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.687] GetFileType (hFile=0x19c) returned 0x1 [0052.687] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.687] WriteFile (in: hFile=0x19c, lpBuffer=0x11131100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11131100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.687] GetFileType (hFile=0x19c) returned 0x1 [0052.687] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbfd, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.687] GetFileType (hFile=0x19c) returned 0x1 [0052.687] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.687] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.687] GetFileType (hFile=0x19c) returned 0x1 [0052.687] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbfd, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.688] CloseHandle (hObject=0x19c) returned 1 [0052.688] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.trapget"), dwFlags=0x1) returned 1 [0052.689] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client" (normalized: "c:\\588bce7c90097ed212\\client"), fInfoLevelId=0x0, lpFileInformation=0x110b7958 | out: lpFileInformation=0x110b7958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.692] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client" (normalized: "c:\\588bce7c90097ed212\\client"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.693] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0078 [0052.693] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.693] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0052.693] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0052.693] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.693] FindClose (in: hFindFile=0x7f0078 | out: hFindFile=0x7f0078) returned 1 [0052.693] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\client\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.695] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.696] GetFileType (hFile=0x19c) returned 0x1 [0052.696] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.696] WriteFile (in: hFile=0x19c, lpBuffer=0x10dde480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10dde480*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.696] GetFileType (hFile=0x19c) returned 0x1 [0052.696] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.696] CloseHandle (hObject=0x19c) returned 1 [0052.697] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x110b7a48 | out: lpFileInformation=0x110b7a48*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0052.697] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.697] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.697] GetFileType (hFile=0x19c) returned 0x1 [0052.697] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.697] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x110a4040 | out: pbBuffer=0x110a4040) returned 1 [0052.697] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x110a4050 | out: pbBuffer=0x110a4050) returned 1 [0052.697] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11131201 | out: pbBuffer=0x11131201) returned 1 [0052.698] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11131401 | out: pbBuffer=0x11131401) returned 1 [0052.698] SetEvent (hEvent=0x170) returned 1 [0052.698] ReadFile (in: hFile=0x19c, lpBuffer=0x10dea000, nNumberOfBytesToRead=0x31444, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10dea000*, lpNumberOfBytesRead=0x10c89c54*=0x31444, lpOverlapped=0x0) returned 1 [0052.711] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x7b0000 [0052.714] GetFileType (hFile=0x19c) returned 0x1 [0052.714] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.714] WriteFile (in: hFile=0x19c, lpBuffer=0x10e26000*, nNumberOfBytesToWrite=0x31444, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10e26000*, lpNumberOfBytesWritten=0x10c89c54*=0x31444, lpOverlapped=0x10c89c58) returned 1 [0052.715] GetFileType (hFile=0x19c) returned 0x1 [0052.715] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x31444, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.715] GetFileType (hFile=0x19c) returned 0x1 [0052.715] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.715] WriteFile (in: hFile=0x19c, lpBuffer=0x11131300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11131300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.715] GetFileType (hFile=0x19c) returned 0x1 [0052.715] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x31444, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.715] GetFileType (hFile=0x19c) returned 0x1 [0052.715] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.715] WriteFile (in: hFile=0x19c, lpBuffer=0x11131500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11131500*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.715] GetFileType (hFile=0x19c) returned 0x1 [0052.715] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x31444, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.715] GetFileType (hFile=0x19c) returned 0x1 [0052.715] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.715] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.715] GetFileType (hFile=0x19c) returned 0x1 [0052.715] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x31444, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.715] CloseHandle (hObject=0x19c) returned 1 [0052.719] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.trapget"), dwFlags=0x1) returned 1 [0052.719] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0052.726] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0052.744] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.744] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.744] GetFileType (hFile=0x19c) returned 0x1 [0052.744] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.744] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e030 | out: pbBuffer=0x10c6e030) returned 1 [0052.744] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0052.744] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130001 | out: pbBuffer=0x11130001) returned 1 [0052.752] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130201 | out: pbBuffer=0x11130201) returned 1 [0052.753] ReadFile (in: hFile=0x19c, lpBuffer=0x10cdc000, nNumberOfBytesToRead=0x9882, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10cdc000*, lpNumberOfBytesRead=0x10c89c54*=0x9882, lpOverlapped=0x0) returned 1 [0052.762] GetFileType (hFile=0x19c) returned 0x1 [0052.763] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.763] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce8000*, nNumberOfBytesToWrite=0x9882, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10ce8000*, lpNumberOfBytesWritten=0x10c89c54*=0x9882, lpOverlapped=0x10c89c58) returned 1 [0052.763] GetFileType (hFile=0x19c) returned 0x1 [0052.763] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9882, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.763] GetFileType (hFile=0x19c) returned 0x1 [0052.763] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.763] WriteFile (in: hFile=0x19c, lpBuffer=0x11130100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11130100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.763] GetFileType (hFile=0x19c) returned 0x1 [0052.763] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9882, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.763] GetFileType (hFile=0x19c) returned 0x1 [0052.763] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.763] WriteFile (in: hFile=0x19c, lpBuffer=0x11130300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11130300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.763] GetFileType (hFile=0x19c) returned 0x1 [0052.763] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9882, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.763] GetFileType (hFile=0x19c) returned 0x1 [0052.763] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.763] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.764] GetFileType (hFile=0x19c) returned 0x1 [0052.764] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9882, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.764] CloseHandle (hObject=0x19c) returned 1 [0052.765] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.trapget"), dwFlags=0x1) returned 1 [0052.769] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x10cfa0f8 | out: lpFileInformation=0x10cfa0f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0052.769] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.769] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0052.769] GetFileType (hFile=0x19c) returned 0x1 [0052.769] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0052.769] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e110 | out: pbBuffer=0x10c6e110) returned 1 [0052.769] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e120 | out: pbBuffer=0x10c6e120) returned 1 [0052.770] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130401 | out: pbBuffer=0x11130401) returned 1 [0052.770] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130601 | out: pbBuffer=0x11130601) returned 1 [0052.770] ReadFile (in: hFile=0x19c, lpBuffer=0x10cb6000, nNumberOfBytesToRead=0x3ef6, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10cb6000*, lpNumberOfBytesRead=0x10c89cb8*=0x3ef6, lpOverlapped=0x0) returned 1 [0052.772] GetFileType (hFile=0x19c) returned 0x1 [0052.772] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.772] WriteFile (in: hFile=0x19c, lpBuffer=0x10cba000*, nNumberOfBytesToWrite=0x3ef6, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cba000*, lpNumberOfBytesWritten=0x10c89cb8*=0x3ef6, lpOverlapped=0x10c89cbc) returned 1 [0052.773] GetFileType (hFile=0x19c) returned 0x1 [0052.773] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3ef6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.773] GetFileType (hFile=0x19c) returned 0x1 [0052.773] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.773] WriteFile (in: hFile=0x19c, lpBuffer=0x11130500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11130500*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0052.773] GetFileType (hFile=0x19c) returned 0x1 [0052.773] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3ef6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.773] GetFileType (hFile=0x19c) returned 0x1 [0052.773] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.773] WriteFile (in: hFile=0x19c, lpBuffer=0x11130700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11130700*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0052.773] GetFileType (hFile=0x19c) returned 0x1 [0052.773] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3ef6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.773] GetFileType (hFile=0x19c) returned 0x1 [0052.773] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.773] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0052.773] GetFileType (hFile=0x19c) returned 0x1 [0052.773] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3ef6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.773] CloseHandle (hObject=0x19c) returned 1 [0052.776] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), lpNewFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.trapget"), dwFlags=0x1) returned 1 [0052.777] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfa238 | out: lpFileInformation=0x10cfa238*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0052.784] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.784] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0052.784] GetFileType (hFile=0x19c) returned 0x1 [0052.784] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0052.784] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e200 | out: pbBuffer=0x10c6e200) returned 1 [0052.784] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e210 | out: pbBuffer=0x10c6e210) returned 1 [0052.784] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130801 | out: pbBuffer=0x11130801) returned 1 [0052.785] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130a01 | out: pbBuffer=0x11130a01) returned 1 [0052.785] ReadFile (in: hFile=0x19c, lpBuffer=0x11132000, nNumberOfBytesToRead=0x159d5, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x11132000*, lpNumberOfBytesRead=0x10c89cb8*=0x159d5, lpOverlapped=0x0) returned 1 [0052.789] GetFileType (hFile=0x19c) returned 0x1 [0052.789] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.789] WriteFile (in: hFile=0x19c, lpBuffer=0x11148000*, nNumberOfBytesToWrite=0x159d5, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11148000*, lpNumberOfBytesWritten=0x10c89cb8*=0x159d5, lpOverlapped=0x10c89cbc) returned 1 [0052.789] GetFileType (hFile=0x19c) returned 0x1 [0052.789] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x159d5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.789] GetFileType (hFile=0x19c) returned 0x1 [0052.789] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.789] WriteFile (in: hFile=0x19c, lpBuffer=0x11130900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11130900*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0052.789] GetFileType (hFile=0x19c) returned 0x1 [0052.790] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x159d5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.790] GetFileType (hFile=0x19c) returned 0x1 [0052.790] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.790] WriteFile (in: hFile=0x19c, lpBuffer=0x11130b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11130b00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0052.790] GetFileType (hFile=0x19c) returned 0x1 [0052.790] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x159d5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.790] GetFileType (hFile=0x19c) returned 0x1 [0052.790] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.790] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0052.790] GetFileType (hFile=0x19c) returned 0x1 [0052.790] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x159d5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0052.790] CloseHandle (hObject=0x19c) returned 1 [0052.792] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), lpNewFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.trapget"), dwFlags=0x1) returned 1 [0052.793] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended" (normalized: "c:\\588bce7c90097ed212\\extended"), fInfoLevelId=0x0, lpFileInformation=0x10cfa378 | out: lpFileInformation=0x10cfa378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.793] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended" (normalized: "c:\\588bce7c90097ed212\\extended"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.793] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcf8 [0052.793] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.793] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0052.793] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0052.793] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.793] FindClose (in: hFindFile=0x7efcf8 | out: hFindFile=0x7efcf8) returned 1 [0052.793] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\extended\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.794] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.794] GetFileType (hFile=0x19c) returned 0x1 [0052.794] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.794] WriteFile (in: hFile=0x19c, lpBuffer=0x11094480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x11094480*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.795] GetFileType (hFile=0x19c) returned 0x1 [0052.795] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.795] CloseHandle (hObject=0x19c) returned 1 [0052.795] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cfa468 | out: lpFileInformation=0x10cfa468*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0052.795] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.795] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.795] GetFileType (hFile=0x19c) returned 0x1 [0052.795] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.795] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e340 | out: pbBuffer=0x10c6e340) returned 1 [0052.795] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e350 | out: pbBuffer=0x10c6e350) returned 1 [0052.795] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130c01 | out: pbBuffer=0x11130c01) returned 1 [0052.796] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11130e01 | out: pbBuffer=0x11130e01) returned 1 [0052.796] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x16c82, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89c54*=0x16c82, lpOverlapped=0x0) returned 1 [0052.799] GetFileType (hFile=0x19c) returned 0x1 [0052.799] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.799] WriteFile (in: hFile=0x19c, lpBuffer=0x10da4000*, nNumberOfBytesToWrite=0x16c82, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10da4000*, lpNumberOfBytesWritten=0x10c89c54*=0x16c82, lpOverlapped=0x10c89c58) returned 1 [0052.800] GetFileType (hFile=0x19c) returned 0x1 [0052.800] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16c82, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.800] GetFileType (hFile=0x19c) returned 0x1 [0052.800] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.800] WriteFile (in: hFile=0x19c, lpBuffer=0x11130d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11130d00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.800] GetFileType (hFile=0x19c) returned 0x1 [0052.800] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16c82, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.800] GetFileType (hFile=0x19c) returned 0x1 [0052.800] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.800] WriteFile (in: hFile=0x19c, lpBuffer=0x11130f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11130f00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.800] GetFileType (hFile=0x19c) returned 0x1 [0052.800] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16c82, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.800] GetFileType (hFile=0x19c) returned 0x1 [0052.800] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.800] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.801] GetFileType (hFile=0x19c) returned 0x1 [0052.801] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16c82, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.801] CloseHandle (hObject=0x19c) returned 1 [0052.802] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.trapget"), dwFlags=0x1) returned 1 [0052.803] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cfa5a8 | out: lpFileInformation=0x10cfa5a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0052.803] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.803] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.803] GetFileType (hFile=0x19c) returned 0x1 [0052.803] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.803] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e430 | out: pbBuffer=0x10c6e430) returned 1 [0052.804] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e440 | out: pbBuffer=0x10c6e440) returned 1 [0052.804] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11131001 | out: pbBuffer=0x11131001) returned 1 [0052.804] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11131201 | out: pbBuffer=0x11131201) returned 1 [0052.804] ReadFile (in: hFile=0x19c, lpBuffer=0x10dc6000, nNumberOfBytesToRead=0x988a, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10dc6000*, lpNumberOfBytesRead=0x10c89c54*=0x988a, lpOverlapped=0x0) returned 1 [0052.807] GetFileType (hFile=0x19c) returned 0x1 [0052.807] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.807] WriteFile (in: hFile=0x19c, lpBuffer=0x10dd0000*, nNumberOfBytesToWrite=0x988a, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10dd0000*, lpNumberOfBytesWritten=0x10c89c54*=0x988a, lpOverlapped=0x10c89c58) returned 1 [0052.807] GetFileType (hFile=0x19c) returned 0x1 [0052.807] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x988a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.807] GetFileType (hFile=0x19c) returned 0x1 [0052.807] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.807] WriteFile (in: hFile=0x19c, lpBuffer=0x11131100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11131100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.809] GetFileType (hFile=0x19c) returned 0x1 [0052.809] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x988a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.809] GetFileType (hFile=0x19c) returned 0x1 [0052.809] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.809] WriteFile (in: hFile=0x19c, lpBuffer=0x11131400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11131400*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.809] GetFileType (hFile=0x19c) returned 0x1 [0052.809] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x988a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.809] GetFileType (hFile=0x19c) returned 0x1 [0052.809] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.809] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.809] GetFileType (hFile=0x19c) returned 0x1 [0052.809] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x988a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.809] CloseHandle (hObject=0x19c) returned 1 [0052.810] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.trapget"), dwFlags=0x1) returned 1 [0052.814] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics" (normalized: "c:\\588bce7c90097ed212\\graphics"), fInfoLevelId=0x0, lpFileInformation=0x10cfa6e8 | out: lpFileInformation=0x10cfa6e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.814] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics" (normalized: "c:\\588bce7c90097ed212\\graphics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.814] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd78 [0052.816] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.816] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0052.816] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.817] FindClose (in: hFindFile=0x7efd78 | out: hFindFile=0x7efd78) returned 1 [0052.817] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\588bce7c90097ed212\\graphics\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.818] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0052.818] GetFileType (hFile=0x19c) returned 0x1 [0052.818] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.818] WriteFile (in: hFile=0x19c, lpBuffer=0x11094d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x11094d80*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0052.819] GetFileType (hFile=0x19c) returned 0x1 [0052.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0052.819] CloseHandle (hObject=0x19c) returned 1 [0052.819] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfabe8 | out: lpFileInformation=0x10cfabe8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0052.821] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.821] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.821] GetFileType (hFile=0x19c) returned 0x1 [0052.821] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.821] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e640 | out: pbBuffer=0x10c6e640) returned 1 [0052.821] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e650 | out: pbBuffer=0x10c6e650) returned 1 [0052.821] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11131601 | out: pbBuffer=0x11131601) returned 1 [0052.822] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11131801 | out: pbBuffer=0x11131801) returned 1 [0052.822] ReadFile (in: hFile=0x19c, lpBuffer=0x11095200, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11095200*, lpNumberOfBytesRead=0x10c89c54*=0x47e, lpOverlapped=0x0) returned 1 [0052.824] GetFileType (hFile=0x19c) returned 0x1 [0052.824] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.824] WriteFile (in: hFile=0x19c, lpBuffer=0x11095680*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11095680*, lpNumberOfBytesWritten=0x10c89c54*=0x47e, lpOverlapped=0x10c89c58) returned 1 [0052.824] GetFileType (hFile=0x19c) returned 0x1 [0052.824] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.824] GetFileType (hFile=0x19c) returned 0x1 [0052.824] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.825] WriteFile (in: hFile=0x19c, lpBuffer=0x11131700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11131700*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.825] GetFileType (hFile=0x19c) returned 0x1 [0052.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.825] GetFileType (hFile=0x19c) returned 0x1 [0052.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.825] WriteFile (in: hFile=0x19c, lpBuffer=0x11131900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11131900*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.825] GetFileType (hFile=0x19c) returned 0x1 [0052.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.825] GetFileType (hFile=0x19c) returned 0x1 [0052.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.825] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.826] GetFileType (hFile=0x19c) returned 0x1 [0052.826] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.826] CloseHandle (hObject=0x19c) returned 1 [0052.826] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.trapget"), dwFlags=0x1) returned 1 [0052.827] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfad78 | out: lpFileInformation=0x10cfad78*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0052.827] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.827] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.827] GetFileType (hFile=0x19c) returned 0x1 [0052.827] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.827] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e730 | out: pbBuffer=0x10c6e730) returned 1 [0052.827] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e740 | out: pbBuffer=0x10c6e740) returned 1 [0052.828] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11131a01 | out: pbBuffer=0x11131a01) returned 1 [0052.828] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11131c01 | out: pbBuffer=0x11131c01) returned 1 [0052.828] ReadFile (in: hFile=0x19c, lpBuffer=0x10dc5180, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10dc5180*, lpNumberOfBytesRead=0x10c89c54*=0x37e, lpOverlapped=0x0) returned 1 [0052.831] GetFileType (hFile=0x19c) returned 0x1 [0052.831] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.831] WriteFile (in: hFile=0x19c, lpBuffer=0x10dc5500*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10dc5500*, lpNumberOfBytesWritten=0x10c89c54*=0x37e, lpOverlapped=0x10c89c58) returned 1 [0052.832] GetFileType (hFile=0x19c) returned 0x1 [0052.832] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.832] GetFileType (hFile=0x19c) returned 0x1 [0052.832] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.832] WriteFile (in: hFile=0x19c, lpBuffer=0x11131b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11131b00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.832] GetFileType (hFile=0x19c) returned 0x1 [0052.832] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.832] GetFileType (hFile=0x19c) returned 0x1 [0052.832] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.832] WriteFile (in: hFile=0x19c, lpBuffer=0x11131d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11131d00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.832] GetFileType (hFile=0x19c) returned 0x1 [0052.832] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.832] GetFileType (hFile=0x19c) returned 0x1 [0052.832] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.832] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.832] GetFileType (hFile=0x19c) returned 0x1 [0052.832] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.832] CloseHandle (hObject=0x19c) returned 1 [0052.833] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.trapget"), dwFlags=0x1) returned 1 [0052.834] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfaeb8 | out: lpFileInformation=0x10cfaeb8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0052.834] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.834] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.834] GetFileType (hFile=0x19c) returned 0x1 [0052.834] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.834] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e810 | out: pbBuffer=0x10c6e810) returned 1 [0052.834] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e820 | out: pbBuffer=0x10c6e820) returned 1 [0052.834] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11131e01 | out: pbBuffer=0x11131e01) returned 1 [0052.835] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c4001 | out: pbBuffer=0x110c4001) returned 1 [0052.835] ReadFile (in: hFile=0x19c, lpBuffer=0x110c8000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x110c8000*, lpNumberOfBytesRead=0x10c89c54*=0x37e, lpOverlapped=0x0) returned 1 [0052.838] GetFileType (hFile=0x19c) returned 0x1 [0052.838] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.838] WriteFile (in: hFile=0x19c, lpBuffer=0x110c8380*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c8380*, lpNumberOfBytesWritten=0x10c89c54*=0x37e, lpOverlapped=0x10c89c58) returned 1 [0052.838] GetFileType (hFile=0x19c) returned 0x1 [0052.838] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.839] GetFileType (hFile=0x19c) returned 0x1 [0052.839] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.839] WriteFile (in: hFile=0x19c, lpBuffer=0x11131f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11131f00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.839] GetFileType (hFile=0x19c) returned 0x1 [0052.839] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.839] GetFileType (hFile=0x19c) returned 0x1 [0052.839] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.839] WriteFile (in: hFile=0x19c, lpBuffer=0x110c4100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c4100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.839] GetFileType (hFile=0x19c) returned 0x1 [0052.839] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.839] GetFileType (hFile=0x19c) returned 0x1 [0052.839] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.839] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.839] GetFileType (hFile=0x19c) returned 0x1 [0052.839] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.839] CloseHandle (hObject=0x19c) returned 1 [0052.840] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.trapget"), dwFlags=0x1) returned 1 [0052.841] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfaff8 | out: lpFileInformation=0x10cfaff8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0052.841] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.841] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.841] GetFileType (hFile=0x19c) returned 0x1 [0052.841] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.841] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e950 | out: pbBuffer=0x10c6e950) returned 1 [0052.841] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e970 | out: pbBuffer=0x10c6e970) returned 1 [0052.842] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c4201 | out: pbBuffer=0x110c4201) returned 1 [0052.842] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c4401 | out: pbBuffer=0x110c4401) returned 1 [0052.842] ReadFile (in: hFile=0x19c, lpBuffer=0x110c8e00, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x110c8e00*, lpNumberOfBytesRead=0x10c89c54*=0x37e, lpOverlapped=0x0) returned 1 [0052.845] GetFileType (hFile=0x19c) returned 0x1 [0052.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.846] WriteFile (in: hFile=0x19c, lpBuffer=0x110c9180*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c9180*, lpNumberOfBytesWritten=0x10c89c54*=0x37e, lpOverlapped=0x10c89c58) returned 1 [0052.846] GetFileType (hFile=0x19c) returned 0x1 [0052.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.846] GetFileType (hFile=0x19c) returned 0x1 [0052.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.846] WriteFile (in: hFile=0x19c, lpBuffer=0x110c4300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c4300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.846] GetFileType (hFile=0x19c) returned 0x1 [0052.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.846] GetFileType (hFile=0x19c) returned 0x1 [0052.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.846] WriteFile (in: hFile=0x19c, lpBuffer=0x110c4500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c4500*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.846] GetFileType (hFile=0x19c) returned 0x1 [0052.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.846] GetFileType (hFile=0x19c) returned 0x1 [0052.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.846] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.846] GetFileType (hFile=0x19c) returned 0x1 [0052.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.847] CloseHandle (hObject=0x19c) returned 1 [0052.847] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.trapget"), dwFlags=0x1) returned 1 [0052.848] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfb138 | out: lpFileInformation=0x10cfb138*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0052.850] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.850] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.850] GetFileType (hFile=0x19c) returned 0x1 [0052.850] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.850] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eac0 | out: pbBuffer=0x10c6eac0) returned 1 [0052.850] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eb80 | out: pbBuffer=0x10c6eb80) returned 1 [0052.850] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c4601 | out: pbBuffer=0x110c4601) returned 1 [0052.851] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c4801 | out: pbBuffer=0x110c4801) returned 1 [0052.851] ReadFile (in: hFile=0x19c, lpBuffer=0x110c9c00, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x110c9c00*, lpNumberOfBytesRead=0x10c89c54*=0x37e, lpOverlapped=0x0) returned 1 [0052.855] GetFileType (hFile=0x19c) returned 0x1 [0052.855] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.855] WriteFile (in: hFile=0x19c, lpBuffer=0x110e0000*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110e0000*, lpNumberOfBytesWritten=0x10c89c54*=0x37e, lpOverlapped=0x10c89c58) returned 1 [0052.855] GetFileType (hFile=0x19c) returned 0x1 [0052.855] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.855] GetFileType (hFile=0x19c) returned 0x1 [0052.856] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.856] WriteFile (in: hFile=0x19c, lpBuffer=0x110c4700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c4700*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.856] GetFileType (hFile=0x19c) returned 0x1 [0052.856] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.856] GetFileType (hFile=0x19c) returned 0x1 [0052.856] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.856] WriteFile (in: hFile=0x19c, lpBuffer=0x110c4900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c4900*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.856] GetFileType (hFile=0x19c) returned 0x1 [0052.856] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.856] GetFileType (hFile=0x19c) returned 0x1 [0052.856] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.856] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.856] GetFileType (hFile=0x19c) returned 0x1 [0052.856] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.856] CloseHandle (hObject=0x19c) returned 1 [0052.867] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.trapget"), dwFlags=0x1) returned 1 [0052.918] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfb278 | out: lpFileInformation=0x10cfb278*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0052.918] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.919] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.919] GetFileType (hFile=0x19c) returned 0x1 [0052.919] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.919] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ec60 | out: pbBuffer=0x10c6ec60) returned 1 [0052.919] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ec70 | out: pbBuffer=0x10c6ec70) returned 1 [0052.919] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c4a01 | out: pbBuffer=0x110c4a01) returned 1 [0052.919] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c4c01 | out: pbBuffer=0x110c4c01) returned 1 [0052.919] ReadFile (in: hFile=0x19c, lpBuffer=0x110e0a80, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x110e0a80*, lpNumberOfBytesRead=0x10c89c54*=0x37e, lpOverlapped=0x0) returned 1 [0052.924] GetFileType (hFile=0x19c) returned 0x1 [0052.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.924] WriteFile (in: hFile=0x19c, lpBuffer=0x110e0e00*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110e0e00*, lpNumberOfBytesWritten=0x10c89c54*=0x37e, lpOverlapped=0x10c89c58) returned 1 [0052.924] GetFileType (hFile=0x19c) returned 0x1 [0052.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.924] GetFileType (hFile=0x19c) returned 0x1 [0052.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.924] WriteFile (in: hFile=0x19c, lpBuffer=0x110c4b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c4b00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.924] GetFileType (hFile=0x19c) returned 0x1 [0052.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.924] GetFileType (hFile=0x19c) returned 0x1 [0052.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.924] WriteFile (in: hFile=0x19c, lpBuffer=0x110c4d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c4d00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.925] GetFileType (hFile=0x19c) returned 0x1 [0052.925] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.925] GetFileType (hFile=0x19c) returned 0x1 [0052.925] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.925] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.925] GetFileType (hFile=0x19c) returned 0x1 [0052.925] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.925] CloseHandle (hObject=0x19c) returned 1 [0052.926] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.trapget"), dwFlags=0x1) returned 1 [0052.926] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfb3b8 | out: lpFileInformation=0x10cfb3b8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0052.926] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.926] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.927] GetFileType (hFile=0x19c) returned 0x1 [0052.927] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.927] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed40 | out: pbBuffer=0x10c6ed40) returned 1 [0052.927] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed50 | out: pbBuffer=0x10c6ed50) returned 1 [0052.927] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c4e01 | out: pbBuffer=0x110c4e01) returned 1 [0052.927] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c5001 | out: pbBuffer=0x110c5001) returned 1 [0052.927] ReadFile (in: hFile=0x19c, lpBuffer=0x110e1880, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x110e1880*, lpNumberOfBytesRead=0x10c89c54*=0x37e, lpOverlapped=0x0) returned 1 [0052.933] GetFileType (hFile=0x19c) returned 0x1 [0052.933] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.933] WriteFile (in: hFile=0x19c, lpBuffer=0x110e1c00*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110e1c00*, lpNumberOfBytesWritten=0x10c89c54*=0x37e, lpOverlapped=0x10c89c58) returned 1 [0052.934] GetFileType (hFile=0x19c) returned 0x1 [0052.934] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.934] GetFileType (hFile=0x19c) returned 0x1 [0052.934] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.934] WriteFile (in: hFile=0x19c, lpBuffer=0x110c4f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c4f00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.934] GetFileType (hFile=0x19c) returned 0x1 [0052.934] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.934] GetFileType (hFile=0x19c) returned 0x1 [0052.934] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.934] WriteFile (in: hFile=0x19c, lpBuffer=0x110c5100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c5100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.934] GetFileType (hFile=0x19c) returned 0x1 [0052.934] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.934] GetFileType (hFile=0x19c) returned 0x1 [0052.934] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.934] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.934] GetFileType (hFile=0x19c) returned 0x1 [0052.934] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.934] CloseHandle (hObject=0x19c) returned 1 [0052.935] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.trapget"), dwFlags=0x1) returned 1 [0052.936] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfb4f8 | out: lpFileInformation=0x10cfb4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0052.936] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.936] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.936] GetFileType (hFile=0x19c) returned 0x1 [0052.936] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.936] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee30 | out: pbBuffer=0x10c6ee30) returned 1 [0052.936] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee40 | out: pbBuffer=0x10c6ee40) returned 1 [0052.936] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c5201 | out: pbBuffer=0x110c5201) returned 1 [0052.937] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c5401 | out: pbBuffer=0x110c5401) returned 1 [0052.937] ReadFile (in: hFile=0x19c, lpBuffer=0x110fa700, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x110fa700*, lpNumberOfBytesRead=0x10c89c54*=0x37e, lpOverlapped=0x0) returned 1 [0052.945] GetFileType (hFile=0x19c) returned 0x1 [0052.945] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.945] WriteFile (in: hFile=0x19c, lpBuffer=0x110faa80*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110faa80*, lpNumberOfBytesWritten=0x10c89c54*=0x37e, lpOverlapped=0x10c89c58) returned 1 [0052.945] GetFileType (hFile=0x19c) returned 0x1 [0052.945] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.945] GetFileType (hFile=0x19c) returned 0x1 [0052.945] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.946] WriteFile (in: hFile=0x19c, lpBuffer=0x110c5300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c5300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.946] GetFileType (hFile=0x19c) returned 0x1 [0052.946] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.946] GetFileType (hFile=0x19c) returned 0x1 [0052.946] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.946] WriteFile (in: hFile=0x19c, lpBuffer=0x110c5500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c5500*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.946] GetFileType (hFile=0x19c) returned 0x1 [0052.946] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.946] GetFileType (hFile=0x19c) returned 0x1 [0052.946] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.946] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.946] GetFileType (hFile=0x19c) returned 0x1 [0052.946] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.946] CloseHandle (hObject=0x19c) returned 1 [0052.948] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.trapget"), dwFlags=0x1) returned 1 [0052.948] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfb638 | out: lpFileInformation=0x10cfb638*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0052.959] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.959] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.959] GetFileType (hFile=0x19c) returned 0x1 [0052.959] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.959] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ef20 | out: pbBuffer=0x10c6ef20) returned 1 [0052.959] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ef30 | out: pbBuffer=0x10c6ef30) returned 1 [0052.959] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c5601 | out: pbBuffer=0x110c5601) returned 1 [0052.959] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c5901 | out: pbBuffer=0x110c5901) returned 1 [0052.960] ReadFile (in: hFile=0x19c, lpBuffer=0x110fb500, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x110fb500*, lpNumberOfBytesRead=0x10c89c54*=0x37e, lpOverlapped=0x0) returned 1 [0052.962] GetFileType (hFile=0x19c) returned 0x1 [0052.962] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.962] WriteFile (in: hFile=0x19c, lpBuffer=0x110fb880*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110fb880*, lpNumberOfBytesWritten=0x10c89c54*=0x37e, lpOverlapped=0x10c89c58) returned 1 [0052.962] GetFileType (hFile=0x19c) returned 0x1 [0052.962] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.962] GetFileType (hFile=0x19c) returned 0x1 [0052.962] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.962] WriteFile (in: hFile=0x19c, lpBuffer=0x110c5800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c5800*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.963] GetFileType (hFile=0x19c) returned 0x1 [0052.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.963] GetFileType (hFile=0x19c) returned 0x1 [0052.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.963] WriteFile (in: hFile=0x19c, lpBuffer=0x110c5a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c5a00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.963] GetFileType (hFile=0x19c) returned 0x1 [0052.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.963] GetFileType (hFile=0x19c) returned 0x1 [0052.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.963] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.963] GetFileType (hFile=0x19c) returned 0x1 [0052.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.963] CloseHandle (hObject=0x19c) returned 1 [0052.964] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.trapget"), dwFlags=0x1) returned 1 [0052.964] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfb778 | out: lpFileInformation=0x10cfb778*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0052.965] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.965] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.965] GetFileType (hFile=0x19c) returned 0x1 [0052.965] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.965] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f010 | out: pbBuffer=0x10c6f010) returned 1 [0052.965] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f020 | out: pbBuffer=0x10c6f020) returned 1 [0052.965] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c5b01 | out: pbBuffer=0x110c5b01) returned 1 [0052.965] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c5d01 | out: pbBuffer=0x110c5d01) returned 1 [0052.966] ReadFile (in: hFile=0x19c, lpBuffer=0x11095b00, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11095b00*, lpNumberOfBytesRead=0x10c89c54*=0x47e, lpOverlapped=0x0) returned 1 [0052.970] GetFileType (hFile=0x19c) returned 0x1 [0052.970] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.970] WriteFile (in: hFile=0x19c, lpBuffer=0x11114000*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11114000*, lpNumberOfBytesWritten=0x10c89c54*=0x47e, lpOverlapped=0x10c89c58) returned 1 [0052.970] GetFileType (hFile=0x19c) returned 0x1 [0052.970] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.970] GetFileType (hFile=0x19c) returned 0x1 [0052.970] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.970] WriteFile (in: hFile=0x19c, lpBuffer=0x110c5c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c5c00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.970] GetFileType (hFile=0x19c) returned 0x1 [0052.970] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.970] GetFileType (hFile=0x19c) returned 0x1 [0052.970] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.970] WriteFile (in: hFile=0x19c, lpBuffer=0x110c5e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110c5e00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.970] GetFileType (hFile=0x19c) returned 0x1 [0052.970] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.970] GetFileType (hFile=0x19c) returned 0x1 [0052.970] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.971] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.971] GetFileType (hFile=0x19c) returned 0x1 [0052.971] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.971] CloseHandle (hObject=0x19c) returned 1 [0052.972] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.trapget"), dwFlags=0x1) returned 1 [0052.972] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfb8b8 | out: lpFileInformation=0x10cfb8b8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0052.972] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.972] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.972] GetFileType (hFile=0x19c) returned 0x1 [0052.972] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.972] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f0f0 | out: pbBuffer=0x10c6f0f0) returned 1 [0052.972] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f100 | out: pbBuffer=0x10c6f100) returned 1 [0052.973] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110c5f01 | out: pbBuffer=0x110c5f01) returned 1 [0052.973] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111a101 | out: pbBuffer=0x1111a101) returned 1 [0052.973] ReadFile (in: hFile=0x19c, lpBuffer=0x11124000, nNumberOfBytesToRead=0x8f66, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11124000*, lpNumberOfBytesRead=0x10c89c54*=0x8f66, lpOverlapped=0x0) returned 1 [0052.978] GetFileType (hFile=0x19c) returned 0x1 [0052.978] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.978] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x8f66, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89c54*=0x8f66, lpOverlapped=0x10c89c58) returned 1 [0052.978] GetFileType (hFile=0x19c) returned 0x1 [0052.978] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x8f66, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.978] GetFileType (hFile=0x19c) returned 0x1 [0052.978] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.978] WriteFile (in: hFile=0x19c, lpBuffer=0x1111a000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1111a000*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.978] GetFileType (hFile=0x19c) returned 0x1 [0052.978] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x8f66, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.978] GetFileType (hFile=0x19c) returned 0x1 [0052.978] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.978] WriteFile (in: hFile=0x19c, lpBuffer=0x1111a200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1111a200*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.978] GetFileType (hFile=0x19c) returned 0x1 [0052.978] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x8f66, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.979] GetFileType (hFile=0x19c) returned 0x1 [0052.979] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.979] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.979] GetFileType (hFile=0x19c) returned 0x1 [0052.979] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x8f66, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.979] CloseHandle (hObject=0x19c) returned 1 [0052.980] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.trapget"), dwFlags=0x1) returned 1 [0052.981] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfb9f8 | out: lpFileInformation=0x10cfb9f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0052.981] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.981] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.981] GetFileType (hFile=0x19c) returned 0x1 [0052.981] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.981] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f1e0 | out: pbBuffer=0x10c6f1e0) returned 1 [0052.981] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f1f0 | out: pbBuffer=0x10c6f1f0) returned 1 [0052.981] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111a301 | out: pbBuffer=0x1111a301) returned 1 [0052.981] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111a501 | out: pbBuffer=0x1111a501) returned 1 [0052.982] ReadFile (in: hFile=0x19c, lpBuffer=0x11114480, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11114480*, lpNumberOfBytesRead=0x10c89c54*=0x47e, lpOverlapped=0x0) returned 1 [0052.984] GetFileType (hFile=0x19c) returned 0x1 [0052.984] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.984] WriteFile (in: hFile=0x19c, lpBuffer=0x11114900*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11114900*, lpNumberOfBytesWritten=0x10c89c54*=0x47e, lpOverlapped=0x10c89c58) returned 1 [0052.986] GetFileType (hFile=0x19c) returned 0x1 [0052.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.986] GetFileType (hFile=0x19c) returned 0x1 [0052.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.986] WriteFile (in: hFile=0x19c, lpBuffer=0x1111a400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1111a400*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.986] GetFileType (hFile=0x19c) returned 0x1 [0052.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.986] GetFileType (hFile=0x19c) returned 0x1 [0052.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.986] WriteFile (in: hFile=0x19c, lpBuffer=0x1111a600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1111a600*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.986] GetFileType (hFile=0x19c) returned 0x1 [0052.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.986] GetFileType (hFile=0x19c) returned 0x1 [0052.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.986] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.987] GetFileType (hFile=0x19c) returned 0x1 [0052.987] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.987] CloseHandle (hObject=0x19c) returned 1 [0052.988] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.trapget"), dwFlags=0x1) returned 1 [0052.988] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfbb38 | out: lpFileInformation=0x10cfbb38*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0052.989] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.989] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.989] GetFileType (hFile=0x19c) returned 0x1 [0052.989] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.989] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f2d0 | out: pbBuffer=0x10c6f2d0) returned 1 [0052.989] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f2e0 | out: pbBuffer=0x10c6f2e0) returned 1 [0052.989] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111a701 | out: pbBuffer=0x1111a701) returned 1 [0052.989] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111a901 | out: pbBuffer=0x1111a901) returned 1 [0052.990] ReadFile (in: hFile=0x19c, lpBuffer=0x11114d80, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11114d80*, lpNumberOfBytesRead=0x10c89c54*=0x47e, lpOverlapped=0x0) returned 1 [0052.993] GetFileType (hFile=0x19c) returned 0x1 [0052.993] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.993] WriteFile (in: hFile=0x19c, lpBuffer=0x11115200*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11115200*, lpNumberOfBytesWritten=0x10c89c54*=0x47e, lpOverlapped=0x10c89c58) returned 1 [0052.993] GetFileType (hFile=0x19c) returned 0x1 [0052.993] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.993] GetFileType (hFile=0x19c) returned 0x1 [0052.993] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.993] WriteFile (in: hFile=0x19c, lpBuffer=0x1111a800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1111a800*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.994] GetFileType (hFile=0x19c) returned 0x1 [0052.994] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.994] GetFileType (hFile=0x19c) returned 0x1 [0052.994] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.994] WriteFile (in: hFile=0x19c, lpBuffer=0x1111aa00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1111aa00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0052.994] GetFileType (hFile=0x19c) returned 0x1 [0052.994] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.994] GetFileType (hFile=0x19c) returned 0x1 [0052.994] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.994] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0052.994] GetFileType (hFile=0x19c) returned 0x1 [0052.994] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0052.994] CloseHandle (hObject=0x19c) returned 1 [0052.996] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.trapget"), dwFlags=0x1) returned 1 [0052.997] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfbc78 | out: lpFileInformation=0x10cfbc78*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0052.997] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0052.997] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0052.997] GetFileType (hFile=0x19c) returned 0x1 [0052.997] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0052.997] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f3c0 | out: pbBuffer=0x10c6f3c0) returned 1 [0052.997] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f3d0 | out: pbBuffer=0x10c6f3d0) returned 1 [0052.997] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111ab01 | out: pbBuffer=0x1111ab01) returned 1 [0052.998] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111ad01 | out: pbBuffer=0x1111ad01) returned 1 [0052.998] ReadFile (in: hFile=0x19c, lpBuffer=0x11020000, nNumberOfBytesToRead=0x2796, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11020000*, lpNumberOfBytesRead=0x10c89c54*=0x2796, lpOverlapped=0x0) returned 1 [0053.002] GetFileType (hFile=0x19c) returned 0x1 [0053.002] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.002] WriteFile (in: hFile=0x19c, lpBuffer=0x11022800*, nNumberOfBytesToWrite=0x2796, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11022800*, lpNumberOfBytesWritten=0x10c89c54*=0x2796, lpOverlapped=0x10c89c58) returned 1 [0053.002] GetFileType (hFile=0x19c) returned 0x1 [0053.002] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2796, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.002] GetFileType (hFile=0x19c) returned 0x1 [0053.002] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.002] WriteFile (in: hFile=0x19c, lpBuffer=0x1111ac00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1111ac00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0053.003] GetFileType (hFile=0x19c) returned 0x1 [0053.003] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2796, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.003] GetFileType (hFile=0x19c) returned 0x1 [0053.003] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.003] WriteFile (in: hFile=0x19c, lpBuffer=0x1111ae00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1111ae00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0053.003] GetFileType (hFile=0x19c) returned 0x1 [0053.003] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2796, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.003] GetFileType (hFile=0x19c) returned 0x1 [0053.003] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.003] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0053.003] GetFileType (hFile=0x19c) returned 0x1 [0053.003] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2796, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.003] CloseHandle (hObject=0x19c) returned 1 [0053.004] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.trapget"), dwFlags=0x1) returned 1 [0053.005] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x10cfbdb8 | out: lpFileInformation=0x10cfbdb8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0053.005] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.005] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0053.005] GetFileType (hFile=0x19c) returned 0x1 [0053.005] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0053.005] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f4a0 | out: pbBuffer=0x10c6f4a0) returned 1 [0053.005] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f4b0 | out: pbBuffer=0x10c6f4b0) returned 1 [0053.006] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111af01 | out: pbBuffer=0x1111af01) returned 1 [0053.006] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111b101 | out: pbBuffer=0x1111b101) returned 1 [0053.006] ReadFile (in: hFile=0x19c, lpBuffer=0x11025000, nNumberOfBytesToRead=0x2796, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11025000*, lpNumberOfBytesRead=0x10c89c54*=0x2796, lpOverlapped=0x0) returned 1 [0053.010] GetFileType (hFile=0x19c) returned 0x1 [0053.010] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.010] WriteFile (in: hFile=0x19c, lpBuffer=0x11027800*, nNumberOfBytesToWrite=0x2796, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11027800*, lpNumberOfBytesWritten=0x10c89c54*=0x2796, lpOverlapped=0x10c89c58) returned 1 [0053.010] GetFileType (hFile=0x19c) returned 0x1 [0053.010] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2796, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.010] GetFileType (hFile=0x19c) returned 0x1 [0053.011] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.011] WriteFile (in: hFile=0x19c, lpBuffer=0x1111b000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1111b000*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0053.011] GetFileType (hFile=0x19c) returned 0x1 [0053.011] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2796, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.011] GetFileType (hFile=0x19c) returned 0x1 [0053.011] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.011] WriteFile (in: hFile=0x19c, lpBuffer=0x1111b300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1111b300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0053.011] GetFileType (hFile=0x19c) returned 0x1 [0053.011] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2796, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.011] GetFileType (hFile=0x19c) returned 0x1 [0053.011] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.011] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0053.011] GetFileType (hFile=0x19c) returned 0x1 [0053.011] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2796, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0053.011] CloseHandle (hObject=0x19c) returned 1 [0053.012] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.trapget"), dwFlags=0x1) returned 1 [0053.013] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cfbef8 | out: lpFileInformation=0x10cfbef8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae)) returned 1 [0053.026] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.027] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0053.027] GetFileType (hFile=0x19c) returned 0x1 [0053.027] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0053.027] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f590 | out: pbBuffer=0x10c6f590) returned 1 [0053.028] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f5a0 | out: pbBuffer=0x10c6f5a0) returned 1 [0053.028] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111b401 | out: pbBuffer=0x1111b401) returned 1 [0053.028] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111b601 | out: pbBuffer=0x1111b601) returned 1 [0053.028] ReadFile (in: hFile=0x19c, lpBuffer=0x1103c000, nNumberOfBytesToRead=0x426ae, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x1103c000*, lpNumberOfBytesRead=0x10c89cb8*=0x426ae, lpOverlapped=0x0) returned 1 [0053.036] GetFileType (hFile=0x19c) returned 0x1 [0053.036] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.036] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x426ae, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x426ae, lpOverlapped=0x10c89cbc) returned 1 [0053.037] GetFileType (hFile=0x19c) returned 0x1 [0053.037] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x426ae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.037] GetFileType (hFile=0x19c) returned 0x1 [0053.037] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.037] WriteFile (in: hFile=0x19c, lpBuffer=0x1111b500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1111b500*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.037] GetFileType (hFile=0x19c) returned 0x1 [0053.037] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x426ae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.037] GetFileType (hFile=0x19c) returned 0x1 [0053.037] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.038] WriteFile (in: hFile=0x19c, lpBuffer=0x1111b700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1111b700*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.038] GetFileType (hFile=0x19c) returned 0x1 [0053.038] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x426ae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.038] GetFileType (hFile=0x19c) returned 0x1 [0053.038] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.039] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0053.039] GetFileType (hFile=0x19c) returned 0x1 [0053.039] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x426ae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.039] CloseHandle (hObject=0x19c) returned 1 [0053.044] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.trapget"), dwFlags=0x1) returned 1 [0053.045] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x10cd20f8 | out: lpFileInformation=0x10cd20f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1 [0053.047] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.047] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0053.047] GetFileType (hFile=0x19c) returned 0x1 [0053.047] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0053.047] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f680 | out: pbBuffer=0x10c6f680) returned 1 [0053.047] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f690 | out: pbBuffer=0x10c6f690) returned 1 [0053.047] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111b801 | out: pbBuffer=0x1111b801) returned 1 [0053.048] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111ba01 | out: pbBuffer=0x1111ba01) returned 1 [0053.048] ReadFile (in: hFile=0x19c, lpBuffer=0x10d44000, nNumberOfBytesToRead=0x2d200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10d44000*, lpNumberOfBytesRead=0x10c89cb8*=0x2d200, lpOverlapped=0x0) returned 1 [0053.063] GetFileType (hFile=0x19c) returned 0x1 [0053.063] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.063] WriteFile (in: hFile=0x19c, lpBuffer=0x10e64000*, nNumberOfBytesToWrite=0x2d200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e64000*, lpNumberOfBytesWritten=0x10c89cb8*=0x2d200, lpOverlapped=0x10c89cbc) returned 1 [0053.064] GetFileType (hFile=0x19c) returned 0x1 [0053.064] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2d200, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.064] GetFileType (hFile=0x19c) returned 0x1 [0053.064] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.064] WriteFile (in: hFile=0x19c, lpBuffer=0x1111b900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1111b900*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.064] GetFileType (hFile=0x19c) returned 0x1 [0053.064] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2d200, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.064] GetFileType (hFile=0x19c) returned 0x1 [0053.064] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.064] WriteFile (in: hFile=0x19c, lpBuffer=0x1111bb00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1111bb00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.064] GetFileType (hFile=0x19c) returned 0x1 [0053.064] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2d200, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.064] GetFileType (hFile=0x19c) returned 0x1 [0053.064] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.065] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0053.065] GetFileType (hFile=0x19c) returned 0x1 [0053.065] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2d200, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.065] CloseHandle (hObject=0x19c) returned 1 [0053.068] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.trapget"), dwFlags=0x1) returned 1 [0053.068] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x10cd2238 | out: lpFileInformation=0x10cd2238*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1 [0053.068] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.069] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0053.069] GetFileType (hFile=0x19c) returned 0x1 [0053.069] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0053.069] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f770 | out: pbBuffer=0x10c6f770) returned 1 [0053.069] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f780 | out: pbBuffer=0x10c6f780) returned 1 [0053.069] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111bc01 | out: pbBuffer=0x1111bc01) returned 1 [0053.069] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1111be01 | out: pbBuffer=0x1111be01) returned 1 [0053.069] ReadFile (in: hFile=0x19c, lpBuffer=0x10e92000, nNumberOfBytesToRead=0x17200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10e92000*, lpNumberOfBytesRead=0x10c89cb8*=0x17200, lpOverlapped=0x0) returned 1 [0053.085] GetFileType (hFile=0x19c) returned 0x1 [0053.085] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.085] WriteFile (in: hFile=0x19c, lpBuffer=0x10eaa000*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10eaa000*, lpNumberOfBytesWritten=0x10c89cb8*=0x17200, lpOverlapped=0x10c89cbc) returned 1 [0053.086] GetFileType (hFile=0x19c) returned 0x1 [0053.086] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17200, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.086] GetFileType (hFile=0x19c) returned 0x1 [0053.086] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.086] WriteFile (in: hFile=0x19c, lpBuffer=0x1111bd00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1111bd00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.086] GetFileType (hFile=0x19c) returned 0x1 [0053.086] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17200, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.086] GetFileType (hFile=0x19c) returned 0x1 [0053.086] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.086] WriteFile (in: hFile=0x19c, lpBuffer=0x1111bf00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1111bf00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.086] GetFileType (hFile=0x19c) returned 0x1 [0053.086] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17200, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.087] GetFileType (hFile=0x19c) returned 0x1 [0053.087] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.087] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0053.087] GetFileType (hFile=0x19c) returned 0x1 [0053.087] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17200, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.087] CloseHandle (hObject=0x19c) returned 1 [0053.089] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.trapget"), dwFlags=0x1) returned 1 [0053.089] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x10cd2378 | out: lpFileInformation=0x10cd2378*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0053.090] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cd23c8 | out: lpFileInformation=0x10cd23c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158)) returned 1 [0053.090] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cd2418 | out: lpFileInformation=0x10cd2418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150)) returned 1 [0053.090] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x10cd2468 | out: lpFileInformation=0x10cd2468*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1 [0053.090] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.090] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0053.090] GetFileType (hFile=0x19c) returned 0x1 [0053.090] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0053.090] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f850 | out: pbBuffer=0x10c6f850) returned 1 [0053.090] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f860 | out: pbBuffer=0x10c6f860) returned 1 [0053.090] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d7c001 | out: pbBuffer=0x10d7c001) returned 1 [0053.091] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d7c201 | out: pbBuffer=0x10d7c201) returned 1 [0053.091] ReadFile (in: hFile=0x19c, lpBuffer=0x10ec2000, nNumberOfBytesToRead=0x75a8, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10ec2000*, lpNumberOfBytesRead=0x10c89cb8*=0x75a8, lpOverlapped=0x0) returned 1 [0053.094] GetFileType (hFile=0x19c) returned 0x1 [0053.094] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.094] WriteFile (in: hFile=0x19c, lpBuffer=0x10eca000*, nNumberOfBytesToWrite=0x75a8, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10eca000*, lpNumberOfBytesWritten=0x10c89cb8*=0x75a8, lpOverlapped=0x10c89cbc) returned 1 [0053.094] GetFileType (hFile=0x19c) returned 0x1 [0053.094] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x75a8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.094] GetFileType (hFile=0x19c) returned 0x1 [0053.094] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.094] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7c100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d7c100*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.094] GetFileType (hFile=0x19c) returned 0x1 [0053.094] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x75a8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.094] GetFileType (hFile=0x19c) returned 0x1 [0053.094] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.094] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7c300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d7c300*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.094] GetFileType (hFile=0x19c) returned 0x1 [0053.094] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x75a8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.094] GetFileType (hFile=0x19c) returned 0x1 [0053.094] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.094] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0053.095] GetFileType (hFile=0x19c) returned 0x1 [0053.095] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x75a8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.095] CloseHandle (hObject=0x19c) returned 1 [0053.096] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), lpNewFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.trapget"), dwFlags=0x1) returned 1 [0053.096] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x10cd25a8 | out: lpFileInformation=0x10cd25a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0053.097] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x10cd25f8 | out: lpFileInformation=0x10cd25f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1 [0053.097] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.097] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0053.097] GetFileType (hFile=0x19c) returned 0x1 [0053.097] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0053.097] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f940 | out: pbBuffer=0x10c6f940) returned 1 [0053.097] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f950 | out: pbBuffer=0x10c6f950) returned 1 [0053.097] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d7c401 | out: pbBuffer=0x10d7c401) returned 1 [0053.098] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d7c601 | out: pbBuffer=0x10d7c601) returned 1 [0053.098] ReadFile (in: hFile=0x19c, lpBuffer=0x10edc000, nNumberOfBytesToRead=0xa078, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10edc000*, lpNumberOfBytesRead=0x10c89cb8*=0xa078, lpOverlapped=0x0) returned 1 [0053.102] GetFileType (hFile=0x19c) returned 0x1 [0053.102] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.102] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee8000*, nNumberOfBytesToWrite=0xa078, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ee8000*, lpNumberOfBytesWritten=0x10c89cb8*=0xa078, lpOverlapped=0x10c89cbc) returned 1 [0053.103] GetFileType (hFile=0x19c) returned 0x1 [0053.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa078, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.103] GetFileType (hFile=0x19c) returned 0x1 [0053.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.103] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7c500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d7c500*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.103] GetFileType (hFile=0x19c) returned 0x1 [0053.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa078, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.103] GetFileType (hFile=0x19c) returned 0x1 [0053.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.103] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7c700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d7c700*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.103] GetFileType (hFile=0x19c) returned 0x1 [0053.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa078, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.103] GetFileType (hFile=0x19c) returned 0x1 [0053.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.103] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0053.103] GetFileType (hFile=0x19c) returned 0x1 [0053.104] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa078, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.104] CloseHandle (hObject=0x19c) returned 1 [0053.105] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.trapget"), dwFlags=0x1) returned 1 [0053.106] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cd2738 | out: lpFileInformation=0x10cd2738*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1 [0053.106] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.106] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0053.106] GetFileType (hFile=0x19c) returned 0x1 [0053.106] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0053.106] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fa30 | out: pbBuffer=0x10c6fa30) returned 1 [0053.106] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fa40 | out: pbBuffer=0x10c6fa40) returned 1 [0053.106] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d7c801 | out: pbBuffer=0x10d7c801) returned 1 [0053.110] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d7ca01 | out: pbBuffer=0x10d7ca01) returned 1 [0053.111] ReadFile (in: hFile=0x19c, lpBuffer=0x10efc000, nNumberOfBytesToRead=0x3704, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10efc000*, lpNumberOfBytesRead=0x10c89cb8*=0x3704, lpOverlapped=0x0) returned 1 [0053.114] GetFileType (hFile=0x19c) returned 0x1 [0053.114] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.114] WriteFile (in: hFile=0x19c, lpBuffer=0x10eff800*, nNumberOfBytesToWrite=0x3704, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10eff800*, lpNumberOfBytesWritten=0x10c89cb8*=0x3704, lpOverlapped=0x10c89cbc) returned 1 [0053.115] GetFileType (hFile=0x19c) returned 0x1 [0053.115] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3704, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.115] GetFileType (hFile=0x19c) returned 0x1 [0053.115] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.115] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7c900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d7c900*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.115] GetFileType (hFile=0x19c) returned 0x1 [0053.115] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3704, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.115] GetFileType (hFile=0x19c) returned 0x1 [0053.115] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.115] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7cb00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d7cb00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.115] GetFileType (hFile=0x19c) returned 0x1 [0053.115] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3704, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.115] GetFileType (hFile=0x19c) returned 0x1 [0053.115] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.115] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0053.115] GetFileType (hFile=0x19c) returned 0x1 [0053.115] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3704, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.115] CloseHandle (hObject=0x19c) returned 1 [0053.116] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Strings.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\strings.xml.trapget"), dwFlags=0x1) returned 1 [0053.117] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x10cd2878 | out: lpFileInformation=0x10cd2878*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1 [0053.117] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.117] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0053.117] GetFileType (hFile=0x19c) returned 0x1 [0053.117] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0053.117] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fb20 | out: pbBuffer=0x10c6fb20) returned 1 [0053.117] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fb30 | out: pbBuffer=0x10c6fb30) returned 1 [0053.118] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d7cc01 | out: pbBuffer=0x10d7cc01) returned 1 [0053.118] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d7ce01 | out: pbBuffer=0x10d7ce01) returned 1 [0053.118] ReadFile (in: hFile=0x19c, lpBuffer=0x10f12000, nNumberOfBytesToRead=0x97f2, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10f12000*, lpNumberOfBytesRead=0x10c89cb8*=0x97f2, lpOverlapped=0x0) returned 1 [0053.121] GetFileType (hFile=0x19c) returned 0x1 [0053.121] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.121] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x97f2, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x97f2, lpOverlapped=0x10c89cbc) returned 1 [0053.122] GetFileType (hFile=0x19c) returned 0x1 [0053.122] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x97f2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.122] GetFileType (hFile=0x19c) returned 0x1 [0053.122] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.122] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7cd00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d7cd00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.122] GetFileType (hFile=0x19c) returned 0x1 [0053.122] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x97f2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.122] GetFileType (hFile=0x19c) returned 0x1 [0053.122] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.122] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7cf00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d7cf00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.122] GetFileType (hFile=0x19c) returned 0x1 [0053.122] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x97f2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.122] GetFileType (hFile=0x19c) returned 0x1 [0053.122] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.122] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0053.122] GetFileType (hFile=0x19c) returned 0x1 [0053.122] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x97f2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.122] CloseHandle (hObject=0x19c) returned 1 [0053.124] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\UiInfo.xml.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.trapget"), dwFlags=0x1) returned 1 [0053.124] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x10cd29b8 | out: lpFileInformation=0x10cd29b8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1 [0053.125] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.125] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0053.125] GetFileType (hFile=0x19c) returned 0x1 [0053.125] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0053.125] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fc00 | out: pbBuffer=0x10c6fc00) returned 1 [0053.125] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fc10 | out: pbBuffer=0x10c6fc10) returned 1 [0053.125] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d7d001 | out: pbBuffer=0x10d7d001) returned 1 [0053.126] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d7d201 | out: pbBuffer=0x10d7d201) returned 1 [0053.126] SetEvent (hEvent=0x170) returned 1 [0053.126] GetFileType (hFile=0x19c) returned 0x1 [0053.126] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.126] ReadFile (in: hFile=0x19c, lpBuffer=0x10f30000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f30000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.133] GetFileType (hFile=0x19c) returned 0x1 [0053.133] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.141] GetFileType (hFile=0x19c) returned 0x1 [0053.141] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.141] WriteFile (in: hFile=0x19c, lpBuffer=0x10f8a000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f8a000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.142] GetFileType (hFile=0x19c) returned 0x1 [0053.142] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.142] VirtualAlloc (lpAddress=0x11160000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x11160000 [0053.143] VirtualAlloc (lpAddress=0xfb3a000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xfb3a000 [0053.144] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x316e0000 [0053.144] GetFileType (hFile=0x19c) returned 0x1 [0053.144] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.144] ReadFile (in: hFile=0x19c, lpBuffer=0x11160000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11160000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.149] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0053.154] GetFileType (hFile=0x19c) returned 0x1 [0053.154] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.158] GetFileType (hFile=0x19c) returned 0x1 [0053.158] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.158] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.158] GetFileType (hFile=0x19c) returned 0x1 [0053.158] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.159] GetFileType (hFile=0x19c) returned 0x1 [0053.159] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.159] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.175] GetFileType (hFile=0x19c) returned 0x1 [0053.175] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.179] GetFileType (hFile=0x19c) returned 0x1 [0053.179] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.179] WriteFile (in: hFile=0x19c, lpBuffer=0x110be000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110be000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.180] GetFileType (hFile=0x19c) returned 0x1 [0053.180] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.180] GetFileType (hFile=0x19c) returned 0x1 [0053.180] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.180] ReadFile (in: hFile=0x19c, lpBuffer=0x1110e000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1110e000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.199] GetFileType (hFile=0x19c) returned 0x1 [0053.199] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.206] GetFileType (hFile=0x19c) returned 0x1 [0053.206] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.206] WriteFile (in: hFile=0x19c, lpBuffer=0x111b0000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111b0000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.207] GetFileType (hFile=0x19c) returned 0x1 [0053.207] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.208] GetFileType (hFile=0x19c) returned 0x1 [0053.208] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.208] ReadFile (in: hFile=0x19c, lpBuffer=0x11200000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11200000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.211] GetFileType (hFile=0x19c) returned 0x1 [0053.211] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.223] GetFileType (hFile=0x19c) returned 0x1 [0053.223] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.223] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.224] GetFileType (hFile=0x19c) returned 0x1 [0053.224] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.224] GetFileType (hFile=0x19c) returned 0x1 [0053.224] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.224] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.243] GetFileType (hFile=0x19c) returned 0x1 [0053.243] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.247] GetFileType (hFile=0x19c) returned 0x1 [0053.247] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.247] WriteFile (in: hFile=0x19c, lpBuffer=0x10e5c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e5c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.248] GetFileType (hFile=0x19c) returned 0x1 [0053.248] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.248] SetEvent (hEvent=0x170) returned 1 [0053.248] GetFileType (hFile=0x19c) returned 0x1 [0053.248] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.248] ReadFile (in: hFile=0x19c, lpBuffer=0x10eac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10eac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.249] GetFileType (hFile=0x19c) returned 0x1 [0053.249] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.249] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0053.262] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0053.262] SetEvent (hEvent=0x170) returned 1 [0053.262] SetEvent (hEvent=0x158) returned 1 [0053.262] SetEvent (hEvent=0x138) returned 1 [0053.262] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0053.280] SetEvent (hEvent=0x168) returned 1 [0053.280] SetEvent (hEvent=0x138) returned 1 [0053.284] GetFileType (hFile=0x19c) returned 0x1 [0053.284] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.284] WriteFile (in: hFile=0x19c, lpBuffer=0x10efc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10efc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.285] GetFileType (hFile=0x19c) returned 0x1 [0053.285] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.285] GetFileType (hFile=0x19c) returned 0x1 [0053.285] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.285] ReadFile (in: hFile=0x19c, lpBuffer=0x10f8a000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f8a000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.285] GetFileType (hFile=0x19c) returned 0x1 [0053.285] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.290] GetFileType (hFile=0x19c) returned 0x1 [0053.290] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.290] WriteFile (in: hFile=0x19c, lpBuffer=0x10e5c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e5c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.290] GetFileType (hFile=0x19c) returned 0x1 [0053.290] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.290] GetFileType (hFile=0x19c) returned 0x1 [0053.290] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.291] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7d100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d7d100*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.291] GetFileType (hFile=0x19c) returned 0x1 [0053.294] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.294] GetFileType (hFile=0x19c) returned 0x1 [0053.294] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.294] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7d300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d7d300*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.294] GetFileType (hFile=0x19c) returned 0x1 [0053.294] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.294] GetFileType (hFile=0x19c) returned 0x1 [0053.294] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.294] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0053.295] GetFileType (hFile=0x19c) returned 0x1 [0053.295] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.295] CloseHandle (hObject=0x19c) returned 1 [0053.393] SetEvent (hEvent=0x168) returned 1 [0053.393] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.trapget"), dwFlags=0x1) returned 1 [0053.394] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x10cfa008 | out: lpFileInformation=0x10cfa008*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1 [0053.395] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.395] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0053.395] GetFileType (hFile=0x19c) returned 0x1 [0053.395] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0053.395] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e040 | out: pbBuffer=0x1108e040) returned 1 [0053.395] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e050 | out: pbBuffer=0x1108e050) returned 1 [0053.395] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d7c101 | out: pbBuffer=0x10d7c101) returned 1 [0053.396] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d7c301 | out: pbBuffer=0x10d7c301) returned 1 [0053.396] GetFileType (hFile=0x19c) returned 0x1 [0053.396] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.396] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.404] GetFileType (hFile=0x19c) returned 0x1 [0053.404] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.410] GetFileType (hFile=0x19c) returned 0x1 [0053.410] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.410] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.411] GetFileType (hFile=0x19c) returned 0x1 [0053.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.411] GetFileType (hFile=0x19c) returned 0x1 [0053.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.411] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.413] GetFileType (hFile=0x19c) returned 0x1 [0053.413] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.416] GetFileType (hFile=0x19c) returned 0x1 [0053.416] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.416] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.417] GetFileType (hFile=0x19c) returned 0x1 [0053.417] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.417] GetFileType (hFile=0x19c) returned 0x1 [0053.417] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.417] ReadFile (in: hFile=0x19c, lpBuffer=0x110be000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110be000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.431] GetFileType (hFile=0x19c) returned 0x1 [0053.431] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.434] GetFileType (hFile=0x19c) returned 0x1 [0053.434] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.434] WriteFile (in: hFile=0x19c, lpBuffer=0x1110e000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1110e000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.435] GetFileType (hFile=0x19c) returned 0x1 [0053.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.435] GetFileType (hFile=0x19c) returned 0x1 [0053.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.435] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7c200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d7c200*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.441] GetFileType (hFile=0x19c) returned 0x1 [0053.442] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.442] GetFileType (hFile=0x19c) returned 0x1 [0053.442] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.442] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7c400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d7c400*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0053.442] GetFileType (hFile=0x19c) returned 0x1 [0053.442] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.442] GetFileType (hFile=0x19c) returned 0x1 [0053.442] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.442] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0053.442] GetFileType (hFile=0x19c) returned 0x1 [0053.442] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.442] CloseHandle (hObject=0x19c) returned 1 [0053.514] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.trapget"), dwFlags=0x1) returned 1 [0053.515] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1 [0053.515] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.515] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0053.515] GetFileType (hFile=0x19c) returned 0x1 [0053.515] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0053.515] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e030 | out: pbBuffer=0x10c6e030) returned 1 [0053.515] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0053.515] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cde101 | out: pbBuffer=0x10cde101) returned 1 [0053.516] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cde301 | out: pbBuffer=0x10cde301) returned 1 [0053.516] GetFileType (hFile=0x19c) returned 0x1 [0053.516] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.516] ReadFile (in: hFile=0x19c, lpBuffer=0x1115e000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1115e000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.525] GetFileType (hFile=0x19c) returned 0x1 [0053.525] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.525] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x31720000 [0053.525] SetEvent (hEvent=0x158) returned 1 [0053.531] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0053.532] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0053.533] SetEvent (hEvent=0x158) returned 1 [0053.533] SetEvent (hEvent=0x138) returned 1 [0053.533] SetEvent (hEvent=0x170) returned 1 [0053.533] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0053.535] SetEvent (hEvent=0x168) returned 1 [0053.535] SetEvent (hEvent=0x170) returned 1 [0053.539] GetFileType (hFile=0x19c) returned 0x1 [0053.539] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.539] WriteFile (in: hFile=0x19c, lpBuffer=0x111ae000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x111ae000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.540] GetFileType (hFile=0x19c) returned 0x1 [0053.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.540] GetFileType (hFile=0x19c) returned 0x1 [0053.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.540] ReadFile (in: hFile=0x19c, lpBuffer=0x10eac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10eac000*, lpNumberOfBytesRead=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.542] GetFileType (hFile=0x19c) returned 0x1 [0053.542] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.545] GetFileType (hFile=0x19c) returned 0x1 [0053.545] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.545] WriteFile (in: hFile=0x19c, lpBuffer=0x10e5c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e5c000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.546] GetFileType (hFile=0x19c) returned 0x1 [0053.547] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.547] GetFileType (hFile=0x19c) returned 0x1 [0053.547] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.547] ReadFile (in: hFile=0x19c, lpBuffer=0x111fe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x111fe000*, lpNumberOfBytesRead=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.562] GetFileType (hFile=0x19c) returned 0x1 [0053.562] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.566] GetFileType (hFile=0x19c) returned 0x1 [0053.566] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.566] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.567] GetFileType (hFile=0x19c) returned 0x1 [0053.567] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.567] GetFileType (hFile=0x19c) returned 0x1 [0053.567] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.567] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.574] GetFileType (hFile=0x19c) returned 0x1 [0053.575] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.578] GetFileType (hFile=0x19c) returned 0x1 [0053.578] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.578] WriteFile (in: hFile=0x19c, lpBuffer=0x110be000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x110be000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.579] GetFileType (hFile=0x19c) returned 0x1 [0053.579] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.580] GetFileType (hFile=0x19c) returned 0x1 [0053.580] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.580] ReadFile (in: hFile=0x19c, lpBuffer=0x1110e000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1110e000*, lpNumberOfBytesRead=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.580] GetFileType (hFile=0x19c) returned 0x1 [0053.580] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.586] GetFileType (hFile=0x19c) returned 0x1 [0053.586] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.586] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.586] GetFileType (hFile=0x19c) returned 0x1 [0053.586] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.587] GetFileType (hFile=0x19c) returned 0x1 [0053.587] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.587] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.602] GetFileType (hFile=0x19c) returned 0x1 [0053.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.608] GetFileType (hFile=0x19c) returned 0x1 [0053.608] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.608] WriteFile (in: hFile=0x19c, lpBuffer=0x10efc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10efc000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.609] GetFileType (hFile=0x19c) returned 0x1 [0053.609] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.609] SetEvent (hEvent=0x138) returned 1 [0053.609] GetFileType (hFile=0x19c) returned 0x1 [0053.609] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.609] ReadFile (in: hFile=0x19c, lpBuffer=0x10f4c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10f4c000*, lpNumberOfBytesRead=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.610] GetFileType (hFile=0x19c) returned 0x1 [0053.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.612] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x0 [0053.613] SetEvent (hEvent=0x138) returned 1 [0053.613] SetEvent (hEvent=0x170) returned 1 [0053.613] SetEvent (hEvent=0x158) returned 1 [0053.613] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0053.614] SetEvent (hEvent=0x168) returned 1 [0053.614] SetEvent (hEvent=0x158) returned 1 [0053.617] GetFileType (hFile=0x19c) returned 0x1 [0053.617] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.617] WriteFile (in: hFile=0x19c, lpBuffer=0x1115e000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1115e000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.618] GetFileType (hFile=0x19c) returned 0x1 [0053.618] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.618] GetFileType (hFile=0x19c) returned 0x1 [0053.618] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.618] WriteFile (in: hFile=0x19c, lpBuffer=0x10cde200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10cde200*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0053.649] GetFileType (hFile=0x19c) returned 0x1 [0053.649] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.649] GetFileType (hFile=0x19c) returned 0x1 [0053.649] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.649] WriteFile (in: hFile=0x19c, lpBuffer=0x10cde400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10cde400*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0053.649] GetFileType (hFile=0x19c) returned 0x1 [0053.649] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.649] GetFileType (hFile=0x19c) returned 0x1 [0053.649] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.649] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0053.650] GetFileType (hFile=0x19c) returned 0x1 [0053.650] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.650] CloseHandle (hObject=0x19c) returned 1 [0053.764] SetEvent (hEvent=0x168) returned 1 [0053.764] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.trapget"), dwFlags=0x1) returned 1 [0053.765] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x10cd20a8 | out: lpFileInformation=0x10cd20a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1 [0053.766] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.766] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0053.766] GetFileType (hFile=0x19c) returned 0x1 [0053.766] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0053.766] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e060 | out: pbBuffer=0x10c6e060) returned 1 [0053.766] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e070 | out: pbBuffer=0x10c6e070) returned 1 [0053.766] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cde101 | out: pbBuffer=0x10cde101) returned 1 [0053.767] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cde501 | out: pbBuffer=0x10cde501) returned 1 [0053.767] GetFileType (hFile=0x19c) returned 0x1 [0053.767] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.767] ReadFile (in: hFile=0x19c, lpBuffer=0x10f9c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10f9c000*, lpNumberOfBytesRead=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.775] GetFileType (hFile=0x19c) returned 0x1 [0053.775] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.784] GetFileType (hFile=0x19c) returned 0x1 [0053.784] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.785] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.785] GetFileType (hFile=0x19c) returned 0x1 [0053.786] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.786] GetFileType (hFile=0x19c) returned 0x1 [0053.786] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.786] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.790] GetFileType (hFile=0x19c) returned 0x1 [0053.790] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.794] GetFileType (hFile=0x19c) returned 0x1 [0053.794] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.794] WriteFile (in: hFile=0x19c, lpBuffer=0x110be000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x110be000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.795] GetFileType (hFile=0x19c) returned 0x1 [0053.795] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.795] GetFileType (hFile=0x19c) returned 0x1 [0053.795] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.795] ReadFile (in: hFile=0x19c, lpBuffer=0x1110e000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1110e000*, lpNumberOfBytesRead=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.814] GetFileType (hFile=0x19c) returned 0x1 [0053.814] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.818] GetFileType (hFile=0x19c) returned 0x1 [0053.818] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.818] WriteFile (in: hFile=0x19c, lpBuffer=0x111ae000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x111ae000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.819] GetFileType (hFile=0x19c) returned 0x1 [0053.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.819] GetFileType (hFile=0x19c) returned 0x1 [0053.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.820] WriteFile (in: hFile=0x19c, lpBuffer=0x10cde300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10cde300*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0053.826] GetFileType (hFile=0x19c) returned 0x1 [0053.826] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.826] GetFileType (hFile=0x19c) returned 0x1 [0053.826] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.826] WriteFile (in: hFile=0x19c, lpBuffer=0x10cde600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10cde600*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0053.826] GetFileType (hFile=0x19c) returned 0x1 [0053.826] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.826] GetFileType (hFile=0x19c) returned 0x1 [0053.826] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.826] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0053.827] GetFileType (hFile=0x19c) returned 0x1 [0053.827] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.827] CloseHandle (hObject=0x19c) returned 1 [0053.889] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.trapget"), dwFlags=0x1) returned 1 [0053.890] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x10cfa008 | out: lpFileInformation=0x10cfa008*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0053.890] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.890] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0053.890] GetFileType (hFile=0x19c) returned 0x1 [0053.890] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0053.890] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e020 | out: pbBuffer=0x1108e020) returned 1 [0053.890] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e030 | out: pbBuffer=0x1108e030) returned 1 [0053.891] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6101 | out: pbBuffer=0x10cb6101) returned 1 [0053.891] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6301 | out: pbBuffer=0x10cb6301) returned 1 [0053.891] ReadFile (in: hFile=0x19c, lpBuffer=0x10ff4000, nNumberOfBytesToRead=0xe2c, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10ff4000*, lpNumberOfBytesRead=0x10c8fcb8*=0xe2c, lpOverlapped=0x0) returned 1 [0053.894] GetFileType (hFile=0x19c) returned 0x1 [0053.894] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.894] WriteFile (in: hFile=0x19c, lpBuffer=0x10ff5000*, nNumberOfBytesToWrite=0xe2c, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10ff5000*, lpNumberOfBytesWritten=0x10c8fcb8*=0xe2c, lpOverlapped=0x10c8fcbc) returned 1 [0053.895] GetFileType (hFile=0x19c) returned 0x1 [0053.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe2c, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.895] GetFileType (hFile=0x19c) returned 0x1 [0053.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.895] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10cb6200*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0053.895] GetFileType (hFile=0x19c) returned 0x1 [0053.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe2c, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.895] GetFileType (hFile=0x19c) returned 0x1 [0053.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.895] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10cb6400*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0053.895] GetFileType (hFile=0x19c) returned 0x1 [0053.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe2c, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.895] GetFileType (hFile=0x19c) returned 0x1 [0053.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.895] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0053.895] GetFileType (hFile=0x19c) returned 0x1 [0053.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe2c, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.895] CloseHandle (hObject=0x19c) returned 1 [0053.896] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\header.bmp.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\header.bmp.trapget"), dwFlags=0x1) returned 1 [0053.897] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x10cfa148 | out: lpFileInformation=0x10cfa148*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1 [0053.899] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0053.899] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0053.899] GetFileType (hFile=0x19c) returned 0x1 [0053.899] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0053.899] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e100 | out: pbBuffer=0x1108e100) returned 1 [0053.899] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e110 | out: pbBuffer=0x1108e110) returned 1 [0053.899] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6501 | out: pbBuffer=0x10cb6501) returned 1 [0053.900] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6701 | out: pbBuffer=0x10cb6701) returned 1 [0053.900] GetFileType (hFile=0x19c) returned 0x1 [0053.900] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.900] ReadFile (in: hFile=0x19c, lpBuffer=0x111fe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x111fe000*, lpNumberOfBytesRead=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.914] GetFileType (hFile=0x19c) returned 0x1 [0053.914] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.918] GetFileType (hFile=0x19c) returned 0x1 [0053.918] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.918] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.932] GetFileType (hFile=0x19c) returned 0x1 [0053.932] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.932] GetFileType (hFile=0x19c) returned 0x1 [0053.932] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.932] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c8fcb8*=0x4e200, lpOverlapped=0x10c8fcbc) returned 1 [0053.933] GetFileType (hFile=0x19c) returned 0x1 [0053.934] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0053.934] SetEvent (hEvent=0x170) returned 1 [0053.934] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x0 [0053.935] SetEvent (hEvent=0x170) returned 1 [0053.935] SetEvent (hEvent=0x158) returned 1 [0053.935] SetEvent (hEvent=0x138) returned 1 [0053.936] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0053.940] SetEvent (hEvent=0x168) returned 1 [0053.940] SetEvent (hEvent=0x138) returned 1 [0053.943] GetFileType (hFile=0x19c) returned 0x1 [0053.943] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.943] WriteFile (in: hFile=0x19c, lpBuffer=0x10e5c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e5c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.944] GetFileType (hFile=0x19c) returned 0x1 [0053.944] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.944] GetFileType (hFile=0x19c) returned 0x1 [0053.944] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.944] ReadFile (in: hFile=0x19c, lpBuffer=0x10eac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10eac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.957] GetFileType (hFile=0x19c) returned 0x1 [0053.958] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.961] GetFileType (hFile=0x19c) returned 0x1 [0053.961] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.961] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.962] GetFileType (hFile=0x19c) returned 0x1 [0053.962] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.962] GetFileType (hFile=0x19c) returned 0x1 [0053.962] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.962] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.971] GetFileType (hFile=0x19c) returned 0x1 [0053.971] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.974] GetFileType (hFile=0x19c) returned 0x1 [0053.974] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.974] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.976] GetFileType (hFile=0x19c) returned 0x1 [0053.976] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.976] GetFileType (hFile=0x19c) returned 0x1 [0053.976] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.976] ReadFile (in: hFile=0x19c, lpBuffer=0x10efc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10efc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.977] GetFileType (hFile=0x19c) returned 0x1 [0053.977] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.987] GetFileType (hFile=0x19c) returned 0x1 [0053.987] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.987] WriteFile (in: hFile=0x19c, lpBuffer=0x10f4c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f4c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.987] GetFileType (hFile=0x19c) returned 0x1 [0053.988] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.988] GetFileType (hFile=0x19c) returned 0x1 [0053.988] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0053.988] ReadFile (in: hFile=0x19c, lpBuffer=0x10f9c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f9c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0053.997] GetFileType (hFile=0x19c) returned 0x1 [0053.997] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.001] GetFileType (hFile=0x19c) returned 0x1 [0054.001] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.001] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.002] GetFileType (hFile=0x19c) returned 0x1 [0054.002] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.003] GetFileType (hFile=0x19c) returned 0x1 [0054.003] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.003] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.003] GetFileType (hFile=0x19c) returned 0x1 [0054.004] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.010] GetFileType (hFile=0x19c) returned 0x1 [0054.010] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.010] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.011] GetFileType (hFile=0x19c) returned 0x1 [0054.011] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.011] SetEvent (hEvent=0x158) returned 1 [0054.011] GetFileType (hFile=0x19c) returned 0x1 [0054.011] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.011] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.014] GetFileType (hFile=0x19c) returned 0x1 [0054.014] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.015] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0054.018] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0054.018] SetEvent (hEvent=0x158) returned 1 [0054.018] SetEvent (hEvent=0x138) returned 1 [0054.018] SetEvent (hEvent=0x170) returned 1 [0054.018] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0054.021] SetEvent (hEvent=0x168) returned 1 [0054.021] SetEvent (hEvent=0x170) returned 1 [0054.024] GetFileType (hFile=0x19c) returned 0x1 [0054.024] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.024] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.025] GetFileType (hFile=0x19c) returned 0x1 [0054.025] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.025] GetFileType (hFile=0x19c) returned 0x1 [0054.025] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.025] ReadFile (in: hFile=0x19c, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.038] GetFileType (hFile=0x19c) returned 0x1 [0054.038] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.042] GetFileType (hFile=0x19c) returned 0x1 [0054.042] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.042] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.043] GetFileType (hFile=0x19c) returned 0x1 [0054.043] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.043] GetFileType (hFile=0x19c) returned 0x1 [0054.043] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.043] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.044] GetFileType (hFile=0x19c) returned 0x1 [0054.044] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.051] GetFileType (hFile=0x19c) returned 0x1 [0054.051] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.051] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.052] GetFileType (hFile=0x19c) returned 0x1 [0054.052] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.052] GetFileType (hFile=0x19c) returned 0x1 [0054.052] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.052] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.061] GetFileType (hFile=0x19c) returned 0x1 [0054.061] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.067] GetFileType (hFile=0x19c) returned 0x1 [0054.067] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.067] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.127] GetFileType (hFile=0x19c) returned 0x1 [0054.127] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.127] GetFileType (hFile=0x19c) returned 0x1 [0054.127] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.127] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.132] GetFileType (hFile=0x19c) returned 0x1 [0054.132] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.256] GetFileType (hFile=0x19c) returned 0x1 [0054.256] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.256] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.258] GetFileType (hFile=0x19c) returned 0x1 [0054.258] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.258] GetFileType (hFile=0x19c) returned 0x1 [0054.258] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.258] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.259] GetFileType (hFile=0x19c) returned 0x1 [0054.259] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.263] GetFileType (hFile=0x19c) returned 0x1 [0054.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.263] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.263] GetFileType (hFile=0x19c) returned 0x1 [0054.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.264] SetEvent (hEvent=0x138) returned 1 [0054.264] GetFileType (hFile=0x19c) returned 0x1 [0054.264] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.264] ReadFile (in: hFile=0x19c, lpBuffer=0x10f1c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.331] SetEvent (hEvent=0x168) returned 1 [0054.331] GetFileType (hFile=0x19c) returned 0x1 [0054.331] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.335] GetFileType (hFile=0x19c) returned 0x1 [0054.335] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.335] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.336] GetFileType (hFile=0x19c) returned 0x1 [0054.336] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.336] GetFileType (hFile=0x19c) returned 0x1 [0054.336] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.336] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.337] GetFileType (hFile=0x19c) returned 0x1 [0054.337] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.345] GetFileType (hFile=0x19c) returned 0x1 [0054.345] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.345] WriteFile (in: hFile=0x19c, lpBuffer=0x10f6c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.346] GetFileType (hFile=0x19c) returned 0x1 [0054.346] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.346] GetFileType (hFile=0x19c) returned 0x1 [0054.346] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.346] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.364] GetFileType (hFile=0x19c) returned 0x1 [0054.364] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.368] GetFileType (hFile=0x19c) returned 0x1 [0054.368] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.368] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.369] GetFileType (hFile=0x19c) returned 0x1 [0054.369] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.369] GetFileType (hFile=0x19c) returned 0x1 [0054.369] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.369] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.398] GetFileType (hFile=0x19c) returned 0x1 [0054.398] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.404] GetFileType (hFile=0x19c) returned 0x1 [0054.404] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.404] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.405] GetFileType (hFile=0x19c) returned 0x1 [0054.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.405] GetFileType (hFile=0x19c) returned 0x1 [0054.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.405] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.409] GetFileType (hFile=0x19c) returned 0x1 [0054.409] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.412] GetFileType (hFile=0x19c) returned 0x1 [0054.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.412] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.413] GetFileType (hFile=0x19c) returned 0x1 [0054.413] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.413] GetFileType (hFile=0x19c) returned 0x1 [0054.413] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.413] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.428] GetFileType (hFile=0x19c) returned 0x1 [0054.428] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.444] GetFileType (hFile=0x19c) returned 0x1 [0054.444] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.444] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.445] GetFileType (hFile=0x19c) returned 0x1 [0054.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.445] SetEvent (hEvent=0x160) returned 1 [0054.445] GetFileType (hFile=0x19c) returned 0x1 [0054.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.445] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.446] GetFileType (hFile=0x19c) returned 0x1 [0054.446] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.446] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0054.452] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0054.452] SetEvent (hEvent=0x160) returned 1 [0054.452] SetEvent (hEvent=0x138) returned 1 [0054.453] SetEvent (hEvent=0x158) returned 1 [0054.453] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0054.465] SetEvent (hEvent=0x168) returned 1 [0054.465] SetEvent (hEvent=0x158) returned 1 [0054.468] GetFileType (hFile=0x19c) returned 0x1 [0054.468] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.469] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.469] GetFileType (hFile=0x19c) returned 0x1 [0054.469] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.469] GetFileType (hFile=0x19c) returned 0x1 [0054.469] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.469] ReadFile (in: hFile=0x19c, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.481] GetFileType (hFile=0x19c) returned 0x1 [0054.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.488] GetFileType (hFile=0x19c) returned 0x1 [0054.488] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.488] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.489] GetFileType (hFile=0x19c) returned 0x1 [0054.489] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.489] GetFileType (hFile=0x19c) returned 0x1 [0054.489] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.489] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.514] GetFileType (hFile=0x19c) returned 0x1 [0054.514] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.518] GetFileType (hFile=0x19c) returned 0x1 [0054.518] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.518] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.519] GetFileType (hFile=0x19c) returned 0x1 [0054.519] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.520] GetFileType (hFile=0x19c) returned 0x1 [0054.520] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.520] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.520] GetFileType (hFile=0x19c) returned 0x1 [0054.520] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.525] GetFileType (hFile=0x19c) returned 0x1 [0054.526] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.526] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.526] GetFileType (hFile=0x19c) returned 0x1 [0054.526] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.526] GetFileType (hFile=0x19c) returned 0x1 [0054.526] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.527] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.534] GetFileType (hFile=0x19c) returned 0x1 [0054.534] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.538] GetFileType (hFile=0x19c) returned 0x1 [0054.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.538] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.539] GetFileType (hFile=0x19c) returned 0x1 [0054.539] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.539] GetFileType (hFile=0x19c) returned 0x1 [0054.539] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.539] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.540] GetFileType (hFile=0x19c) returned 0x1 [0054.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.545] GetFileType (hFile=0x19c) returned 0x1 [0054.545] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.545] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.546] GetFileType (hFile=0x19c) returned 0x1 [0054.546] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.546] SetEvent (hEvent=0x138) returned 1 [0054.546] GetFileType (hFile=0x19c) returned 0x1 [0054.546] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.546] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.565] GetFileType (hFile=0x19c) returned 0x1 [0054.565] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.571] GetFileType (hFile=0x19c) returned 0x1 [0054.571] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.572] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.572] GetFileType (hFile=0x19c) returned 0x1 [0054.572] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.572] VirtualAlloc (lpAddress=0x11260000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x11260000 [0054.574] VirtualAlloc (lpAddress=0xfb2a000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xfb2a000 [0054.577] GetFileType (hFile=0x19c) returned 0x1 [0054.577] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.577] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.589] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0054.616] GetFileType (hFile=0x19c) returned 0x1 [0054.616] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.620] GetFileType (hFile=0x19c) returned 0x1 [0054.620] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.620] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.622] GetFileType (hFile=0x19c) returned 0x1 [0054.622] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.622] GetFileType (hFile=0x19c) returned 0x1 [0054.622] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.622] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.622] GetFileType (hFile=0x19c) returned 0x1 [0054.623] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.631] GetFileType (hFile=0x19c) returned 0x1 [0054.631] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.631] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.632] GetFileType (hFile=0x19c) returned 0x1 [0054.632] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.742] GetFileType (hFile=0x19c) returned 0x1 [0054.742] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.742] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.755] GetFileType (hFile=0x19c) returned 0x1 [0054.755] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.759] GetFileType (hFile=0x19c) returned 0x1 [0054.759] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.759] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.760] GetFileType (hFile=0x19c) returned 0x1 [0054.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.760] GetFileType (hFile=0x19c) returned 0x1 [0054.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.760] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.770] GetFileType (hFile=0x19c) returned 0x1 [0054.770] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.773] GetFileType (hFile=0x19c) returned 0x1 [0054.773] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.773] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.775] GetFileType (hFile=0x19c) returned 0x1 [0054.775] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.775] GetFileType (hFile=0x19c) returned 0x1 [0054.775] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.775] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.776] GetFileType (hFile=0x19c) returned 0x1 [0054.776] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.787] GetFileType (hFile=0x19c) returned 0x1 [0054.788] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.788] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.788] GetFileType (hFile=0x19c) returned 0x1 [0054.788] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.789] SetEvent (hEvent=0x138) returned 1 [0054.789] GetFileType (hFile=0x19c) returned 0x1 [0054.789] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.789] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.803] GetFileType (hFile=0x19c) returned 0x1 [0054.803] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.807] GetFileType (hFile=0x19c) returned 0x1 [0054.807] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.807] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.808] GetFileType (hFile=0x19c) returned 0x1 [0054.808] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.808] GetFileType (hFile=0x19c) returned 0x1 [0054.808] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.808] ReadFile (in: hFile=0x19c, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.809] GetFileType (hFile=0x19c) returned 0x1 [0054.809] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.814] GetFileType (hFile=0x19c) returned 0x1 [0054.814] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.814] WriteFile (in: hFile=0x19c, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.815] GetFileType (hFile=0x19c) returned 0x1 [0054.815] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.815] GetFileType (hFile=0x19c) returned 0x1 [0054.815] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.815] ReadFile (in: hFile=0x19c, lpBuffer=0x111ec000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.824] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0054.841] GetFileType (hFile=0x19c) returned 0x1 [0054.841] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.844] GetFileType (hFile=0x19c) returned 0x1 [0054.844] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.844] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.845] GetFileType (hFile=0x19c) returned 0x1 [0054.845] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.845] GetFileType (hFile=0x19c) returned 0x1 [0054.845] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.845] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.881] GetFileType (hFile=0x19c) returned 0x1 [0054.881] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.884] GetFileType (hFile=0x19c) returned 0x1 [0054.885] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.885] WriteFile (in: hFile=0x19c, lpBuffer=0x1123c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.886] GetFileType (hFile=0x19c) returned 0x1 [0054.886] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.886] GetFileType (hFile=0x19c) returned 0x1 [0054.886] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.886] ReadFile (in: hFile=0x19c, lpBuffer=0x1128c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.891] GetFileType (hFile=0x19c) returned 0x1 [0054.891] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.894] GetFileType (hFile=0x19c) returned 0x1 [0054.894] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.894] WriteFile (in: hFile=0x19c, lpBuffer=0x112dc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.895] GetFileType (hFile=0x19c) returned 0x1 [0054.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.895] GetFileType (hFile=0x19c) returned 0x1 [0054.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.895] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.904] GetFileType (hFile=0x19c) returned 0x1 [0054.904] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.908] GetFileType (hFile=0x19c) returned 0x1 [0054.908] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.908] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.909] GetFileType (hFile=0x19c) returned 0x1 [0054.909] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.910] SetEvent (hEvent=0x138) returned 1 [0054.910] GetFileType (hFile=0x19c) returned 0x1 [0054.910] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.910] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.910] GetFileType (hFile=0x19c) returned 0x1 [0054.910] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.911] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0054.914] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0054.914] SetEvent (hEvent=0x138) returned 1 [0054.914] SetEvent (hEvent=0x158) returned 1 [0054.914] SetEvent (hEvent=0x160) returned 1 [0054.914] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0054.916] SetEvent (hEvent=0x168) returned 1 [0054.916] SetEvent (hEvent=0x160) returned 1 [0054.920] GetFileType (hFile=0x19c) returned 0x1 [0054.920] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.920] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.921] GetFileType (hFile=0x19c) returned 0x1 [0054.921] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.921] GetFileType (hFile=0x19c) returned 0x1 [0054.921] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.921] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.931] GetFileType (hFile=0x19c) returned 0x1 [0054.931] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.935] GetFileType (hFile=0x19c) returned 0x1 [0054.935] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.935] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.936] GetFileType (hFile=0x19c) returned 0x1 [0054.936] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.936] GetFileType (hFile=0x19c) returned 0x1 [0054.936] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.936] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.943] GetFileType (hFile=0x19c) returned 0x1 [0054.943] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.947] GetFileType (hFile=0x19c) returned 0x1 [0054.947] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.947] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.948] GetFileType (hFile=0x19c) returned 0x1 [0054.948] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.948] GetFileType (hFile=0x19c) returned 0x1 [0054.948] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.948] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.949] GetFileType (hFile=0x19c) returned 0x1 [0054.949] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.954] GetFileType (hFile=0x19c) returned 0x1 [0054.954] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.954] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.955] GetFileType (hFile=0x19c) returned 0x1 [0054.955] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.955] GetFileType (hFile=0x19c) returned 0x1 [0054.955] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.955] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.963] GetFileType (hFile=0x19c) returned 0x1 [0054.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.966] GetFileType (hFile=0x19c) returned 0x1 [0054.966] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.966] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.967] GetFileType (hFile=0x19c) returned 0x1 [0054.967] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.967] GetFileType (hFile=0x19c) returned 0x1 [0054.967] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.967] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.968] GetFileType (hFile=0x19c) returned 0x1 [0054.968] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.974] GetFileType (hFile=0x19c) returned 0x1 [0054.974] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.974] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.975] GetFileType (hFile=0x19c) returned 0x1 [0054.975] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.975] SetEvent (hEvent=0x158) returned 1 [0054.975] GetFileType (hFile=0x19c) returned 0x1 [0054.975] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.975] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.983] GetFileType (hFile=0x19c) returned 0x1 [0054.983] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.986] GetFileType (hFile=0x19c) returned 0x1 [0054.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.986] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.987] GetFileType (hFile=0x19c) returned 0x1 [0054.987] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.987] GetFileType (hFile=0x19c) returned 0x1 [0054.987] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0054.987] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0054.995] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0055.001] GetFileType (hFile=0x19c) returned 0x1 [0055.001] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.005] GetFileType (hFile=0x19c) returned 0x1 [0055.005] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.005] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.007] GetFileType (hFile=0x19c) returned 0x1 [0055.007] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.007] GetFileType (hFile=0x19c) returned 0x1 [0055.007] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.007] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.008] GetFileType (hFile=0x19c) returned 0x1 [0055.008] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.014] GetFileType (hFile=0x19c) returned 0x1 [0055.014] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.014] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.015] GetFileType (hFile=0x19c) returned 0x1 [0055.015] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.015] GetFileType (hFile=0x19c) returned 0x1 [0055.015] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.015] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.024] GetFileType (hFile=0x19c) returned 0x1 [0055.024] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.027] GetFileType (hFile=0x19c) returned 0x1 [0055.027] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.028] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.028] GetFileType (hFile=0x19c) returned 0x1 [0055.028] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.028] GetFileType (hFile=0x19c) returned 0x1 [0055.028] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.029] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.032] GetFileType (hFile=0x19c) returned 0x1 [0055.032] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.037] GetFileType (hFile=0x19c) returned 0x1 [0055.037] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.037] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.038] GetFileType (hFile=0x19c) returned 0x1 [0055.038] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.038] GetFileType (hFile=0x19c) returned 0x1 [0055.039] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.039] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.042] GetFileType (hFile=0x19c) returned 0x1 [0055.042] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.046] GetFileType (hFile=0x19c) returned 0x1 [0055.046] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.046] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.046] GetFileType (hFile=0x19c) returned 0x1 [0055.047] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.047] SetEvent (hEvent=0x158) returned 1 [0055.047] GetFileType (hFile=0x19c) returned 0x1 [0055.047] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.047] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.058] GetFileType (hFile=0x19c) returned 0x1 [0055.059] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.062] GetFileType (hFile=0x19c) returned 0x1 [0055.062] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.062] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.063] GetFileType (hFile=0x19c) returned 0x1 [0055.063] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.064] GetFileType (hFile=0x19c) returned 0x1 [0055.064] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.064] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.064] GetFileType (hFile=0x19c) returned 0x1 [0055.064] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.070] GetFileType (hFile=0x19c) returned 0x1 [0055.070] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.070] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.071] GetFileType (hFile=0x19c) returned 0x1 [0055.071] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.071] GetFileType (hFile=0x19c) returned 0x1 [0055.071] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.071] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.081] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0055.086] GetFileType (hFile=0x19c) returned 0x1 [0055.086] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.090] GetFileType (hFile=0x19c) returned 0x1 [0055.090] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.090] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.091] GetFileType (hFile=0x19c) returned 0x1 [0055.091] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.091] GetFileType (hFile=0x19c) returned 0x1 [0055.091] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.091] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.099] GetFileType (hFile=0x19c) returned 0x1 [0055.099] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.102] GetFileType (hFile=0x19c) returned 0x1 [0055.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.103] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.104] GetFileType (hFile=0x19c) returned 0x1 [0055.104] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.104] GetFileType (hFile=0x19c) returned 0x1 [0055.105] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.105] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.105] GetFileType (hFile=0x19c) returned 0x1 [0055.105] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.111] GetFileType (hFile=0x19c) returned 0x1 [0055.111] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.111] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.112] GetFileType (hFile=0x19c) returned 0x1 [0055.112] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.112] GetFileType (hFile=0x19c) returned 0x1 [0055.112] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.112] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.121] GetFileType (hFile=0x19c) returned 0x1 [0055.121] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.125] GetFileType (hFile=0x19c) returned 0x1 [0055.125] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.125] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.127] GetFileType (hFile=0x19c) returned 0x1 [0055.127] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.127] SetEvent (hEvent=0x158) returned 1 [0055.127] GetFileType (hFile=0x19c) returned 0x1 [0055.127] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.127] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.128] GetFileType (hFile=0x19c) returned 0x1 [0055.128] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.130] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0055.145] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0055.145] SetEvent (hEvent=0x158) returned 1 [0055.145] SetEvent (hEvent=0x160) returned 1 [0055.145] SetEvent (hEvent=0x138) returned 1 [0055.145] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0055.146] SetEvent (hEvent=0x168) returned 1 [0055.146] SetEvent (hEvent=0x138) returned 1 [0055.149] GetFileType (hFile=0x19c) returned 0x1 [0055.149] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.149] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.150] GetFileType (hFile=0x19c) returned 0x1 [0055.150] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.150] GetFileType (hFile=0x19c) returned 0x1 [0055.150] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.150] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.160] GetFileType (hFile=0x19c) returned 0x1 [0055.160] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.163] GetFileType (hFile=0x19c) returned 0x1 [0055.163] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.164] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.164] GetFileType (hFile=0x19c) returned 0x1 [0055.164] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.164] GetFileType (hFile=0x19c) returned 0x1 [0055.164] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.165] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.171] GetFileType (hFile=0x19c) returned 0x1 [0055.171] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.175] GetFileType (hFile=0x19c) returned 0x1 [0055.175] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.175] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.177] GetFileType (hFile=0x19c) returned 0x1 [0055.177] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.177] GetFileType (hFile=0x19c) returned 0x1 [0055.177] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.177] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.178] GetFileType (hFile=0x19c) returned 0x1 [0055.178] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.184] GetFileType (hFile=0x19c) returned 0x1 [0055.184] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.184] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.185] GetFileType (hFile=0x19c) returned 0x1 [0055.185] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.185] GetFileType (hFile=0x19c) returned 0x1 [0055.185] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.185] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.197] GetFileType (hFile=0x19c) returned 0x1 [0055.197] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.200] GetFileType (hFile=0x19c) returned 0x1 [0055.200] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.200] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.201] GetFileType (hFile=0x19c) returned 0x1 [0055.201] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.201] GetFileType (hFile=0x19c) returned 0x1 [0055.201] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.201] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.202] GetFileType (hFile=0x19c) returned 0x1 [0055.202] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.209] GetFileType (hFile=0x19c) returned 0x1 [0055.209] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.209] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.210] GetFileType (hFile=0x19c) returned 0x1 [0055.210] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.210] SetEvent (hEvent=0x160) returned 1 [0055.210] GetFileType (hFile=0x19c) returned 0x1 [0055.210] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.210] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.223] GetFileType (hFile=0x19c) returned 0x1 [0055.223] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.227] GetFileType (hFile=0x19c) returned 0x1 [0055.227] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.227] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.228] GetFileType (hFile=0x19c) returned 0x1 [0055.228] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.228] GetFileType (hFile=0x19c) returned 0x1 [0055.228] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.228] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.237] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0055.243] GetFileType (hFile=0x19c) returned 0x1 [0055.243] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.247] GetFileType (hFile=0x19c) returned 0x1 [0055.247] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.247] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.258] GetFileType (hFile=0x19c) returned 0x1 [0055.258] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.258] GetFileType (hFile=0x19c) returned 0x1 [0055.258] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.258] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.259] GetFileType (hFile=0x19c) returned 0x1 [0055.259] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.264] GetFileType (hFile=0x19c) returned 0x1 [0055.264] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.264] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.265] GetFileType (hFile=0x19c) returned 0x1 [0055.265] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.265] GetFileType (hFile=0x19c) returned 0x1 [0055.265] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.265] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.277] GetFileType (hFile=0x19c) returned 0x1 [0055.277] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.280] GetFileType (hFile=0x19c) returned 0x1 [0055.281] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.281] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.281] GetFileType (hFile=0x19c) returned 0x1 [0055.281] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.281] GetFileType (hFile=0x19c) returned 0x1 [0055.281] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.282] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.282] GetFileType (hFile=0x19c) returned 0x1 [0055.282] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.291] GetFileType (hFile=0x19c) returned 0x1 [0055.291] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.291] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.292] GetFileType (hFile=0x19c) returned 0x1 [0055.292] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.292] GetFileType (hFile=0x19c) returned 0x1 [0055.292] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.292] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.292] GetFileType (hFile=0x19c) returned 0x1 [0055.292] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.298] GetFileType (hFile=0x19c) returned 0x1 [0055.298] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.298] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.299] GetFileType (hFile=0x19c) returned 0x1 [0055.299] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.299] SetEvent (hEvent=0x160) returned 1 [0055.299] GetFileType (hFile=0x19c) returned 0x1 [0055.299] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.299] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.318] GetFileType (hFile=0x19c) returned 0x1 [0055.318] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.322] GetFileType (hFile=0x19c) returned 0x1 [0055.322] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.322] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.323] GetFileType (hFile=0x19c) returned 0x1 [0055.323] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.324] GetFileType (hFile=0x19c) returned 0x1 [0055.324] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.324] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.324] GetFileType (hFile=0x19c) returned 0x1 [0055.324] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.330] GetFileType (hFile=0x19c) returned 0x1 [0055.330] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.330] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.330] GetFileType (hFile=0x19c) returned 0x1 [0055.330] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.331] GetFileType (hFile=0x19c) returned 0x1 [0055.331] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.331] ReadFile (in: hFile=0x19c, lpBuffer=0x10f1c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.348] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0055.356] GetFileType (hFile=0x19c) returned 0x1 [0055.356] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.360] GetFileType (hFile=0x19c) returned 0x1 [0055.360] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.360] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.361] GetFileType (hFile=0x19c) returned 0x1 [0055.361] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.361] GetFileType (hFile=0x19c) returned 0x1 [0055.361] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.361] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.369] GetFileType (hFile=0x19c) returned 0x1 [0055.369] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.376] GetFileType (hFile=0x19c) returned 0x1 [0055.376] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.376] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.378] GetFileType (hFile=0x19c) returned 0x1 [0055.378] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.378] GetFileType (hFile=0x19c) returned 0x1 [0055.378] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.378] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.379] GetFileType (hFile=0x19c) returned 0x1 [0055.379] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.385] GetFileType (hFile=0x19c) returned 0x1 [0055.385] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.385] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.386] GetFileType (hFile=0x19c) returned 0x1 [0055.386] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.386] GetFileType (hFile=0x19c) returned 0x1 [0055.386] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.386] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.396] GetFileType (hFile=0x19c) returned 0x1 [0055.396] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.400] GetFileType (hFile=0x19c) returned 0x1 [0055.400] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.400] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.401] GetFileType (hFile=0x19c) returned 0x1 [0055.401] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.401] SetEvent (hEvent=0x160) returned 1 [0055.401] GetFileType (hFile=0x19c) returned 0x1 [0055.401] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.401] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.402] GetFileType (hFile=0x19c) returned 0x1 [0055.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.402] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0055.405] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0055.405] SetEvent (hEvent=0x160) returned 1 [0055.405] SetEvent (hEvent=0x138) returned 1 [0055.405] SetEvent (hEvent=0x158) returned 1 [0055.405] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0055.413] SetEvent (hEvent=0x168) returned 1 [0055.413] SetEvent (hEvent=0x158) returned 1 [0055.416] GetFileType (hFile=0x19c) returned 0x1 [0055.416] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.416] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.417] GetFileType (hFile=0x19c) returned 0x1 [0055.417] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.417] GetFileType (hFile=0x19c) returned 0x1 [0055.417] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.417] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.425] GetFileType (hFile=0x19c) returned 0x1 [0055.426] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.429] GetFileType (hFile=0x19c) returned 0x1 [0055.429] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.429] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.430] GetFileType (hFile=0x19c) returned 0x1 [0055.430] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.430] GetFileType (hFile=0x19c) returned 0x1 [0055.430] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.430] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.437] GetFileType (hFile=0x19c) returned 0x1 [0055.437] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.441] GetFileType (hFile=0x19c) returned 0x1 [0055.441] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.441] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.442] GetFileType (hFile=0x19c) returned 0x1 [0055.442] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.442] GetFileType (hFile=0x19c) returned 0x1 [0055.442] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.442] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.445] GetFileType (hFile=0x19c) returned 0x1 [0055.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.449] GetFileType (hFile=0x19c) returned 0x1 [0055.449] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.449] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.450] GetFileType (hFile=0x19c) returned 0x1 [0055.450] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.450] GetFileType (hFile=0x19c) returned 0x1 [0055.450] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.450] ReadFile (in: hFile=0x19c, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.688] GetFileType (hFile=0x19c) returned 0x1 [0055.688] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.692] GetFileType (hFile=0x19c) returned 0x1 [0055.692] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.692] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.693] GetFileType (hFile=0x19c) returned 0x1 [0055.693] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.693] GetFileType (hFile=0x19c) returned 0x1 [0055.693] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.693] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.694] GetFileType (hFile=0x19c) returned 0x1 [0055.694] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.700] GetFileType (hFile=0x19c) returned 0x1 [0055.700] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.700] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.701] GetFileType (hFile=0x19c) returned 0x1 [0055.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.701] SetEvent (hEvent=0x138) returned 1 [0055.701] GetFileType (hFile=0x19c) returned 0x1 [0055.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.701] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.711] GetFileType (hFile=0x19c) returned 0x1 [0055.711] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.714] GetFileType (hFile=0x19c) returned 0x1 [0055.715] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.715] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.715] GetFileType (hFile=0x19c) returned 0x1 [0055.715] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.715] GetFileType (hFile=0x19c) returned 0x1 [0055.715] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.716] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.726] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0055.729] GetFileType (hFile=0x19c) returned 0x1 [0055.729] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.733] GetFileType (hFile=0x19c) returned 0x1 [0055.733] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.733] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.734] GetFileType (hFile=0x19c) returned 0x1 [0055.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.734] GetFileType (hFile=0x19c) returned 0x1 [0055.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.734] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.738] GetFileType (hFile=0x19c) returned 0x1 [0055.738] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.743] GetFileType (hFile=0x19c) returned 0x1 [0055.743] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.743] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.744] GetFileType (hFile=0x19c) returned 0x1 [0055.744] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.744] GetFileType (hFile=0x19c) returned 0x1 [0055.744] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.744] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.758] GetFileType (hFile=0x19c) returned 0x1 [0055.758] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.762] GetFileType (hFile=0x19c) returned 0x1 [0055.762] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.762] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.763] GetFileType (hFile=0x19c) returned 0x1 [0055.763] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.763] GetFileType (hFile=0x19c) returned 0x1 [0055.763] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.763] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.764] GetFileType (hFile=0x19c) returned 0x1 [0055.764] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.770] GetFileType (hFile=0x19c) returned 0x1 [0055.770] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.770] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.771] GetFileType (hFile=0x19c) returned 0x1 [0055.771] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.771] GetFileType (hFile=0x19c) returned 0x1 [0055.771] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.771] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.774] GetFileType (hFile=0x19c) returned 0x1 [0055.774] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.777] GetFileType (hFile=0x19c) returned 0x1 [0055.777] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.777] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.785] GetFileType (hFile=0x19c) returned 0x1 [0055.785] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.785] SetEvent (hEvent=0x138) returned 1 [0055.785] GetFileType (hFile=0x19c) returned 0x1 [0055.785] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.785] ReadFile (in: hFile=0x19c, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.797] GetFileType (hFile=0x19c) returned 0x1 [0055.797] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.801] GetFileType (hFile=0x19c) returned 0x1 [0055.801] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.801] WriteFile (in: hFile=0x19c, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.802] GetFileType (hFile=0x19c) returned 0x1 [0055.802] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.802] GetFileType (hFile=0x19c) returned 0x1 [0055.803] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.803] ReadFile (in: hFile=0x19c, lpBuffer=0x111ec000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.803] GetFileType (hFile=0x19c) returned 0x1 [0055.805] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.809] GetFileType (hFile=0x19c) returned 0x1 [0055.809] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.809] WriteFile (in: hFile=0x19c, lpBuffer=0x1123c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.810] GetFileType (hFile=0x19c) returned 0x1 [0055.810] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.810] GetFileType (hFile=0x19c) returned 0x1 [0055.810] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.810] ReadFile (in: hFile=0x19c, lpBuffer=0x1128c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.819] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0055.821] GetFileType (hFile=0x19c) returned 0x1 [0055.821] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.824] GetFileType (hFile=0x19c) returned 0x1 [0055.824] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.825] WriteFile (in: hFile=0x19c, lpBuffer=0x112dc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.826] GetFileType (hFile=0x19c) returned 0x1 [0055.826] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.826] GetFileType (hFile=0x19c) returned 0x1 [0055.826] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.826] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.834] GetFileType (hFile=0x19c) returned 0x1 [0055.834] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.837] GetFileType (hFile=0x19c) returned 0x1 [0055.837] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.837] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.839] GetFileType (hFile=0x19c) returned 0x1 [0055.839] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.839] GetFileType (hFile=0x19c) returned 0x1 [0055.839] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.839] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.840] GetFileType (hFile=0x19c) returned 0x1 [0055.840] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.845] GetFileType (hFile=0x19c) returned 0x1 [0055.845] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.845] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.846] GetFileType (hFile=0x19c) returned 0x1 [0055.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.846] GetFileType (hFile=0x19c) returned 0x1 [0055.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.846] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.855] GetFileType (hFile=0x19c) returned 0x1 [0055.855] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.858] GetFileType (hFile=0x19c) returned 0x1 [0055.858] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.859] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.860] GetFileType (hFile=0x19c) returned 0x1 [0055.860] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.860] SetEvent (hEvent=0x138) returned 1 [0055.860] GetFileType (hFile=0x19c) returned 0x1 [0055.860] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.860] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.865] GetFileType (hFile=0x19c) returned 0x1 [0055.865] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.869] GetFileType (hFile=0x19c) returned 0x1 [0055.869] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.869] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.869] GetFileType (hFile=0x19c) returned 0x1 [0055.870] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.870] GetFileType (hFile=0x19c) returned 0x1 [0055.870] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.870] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.883] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0055.889] GetFileType (hFile=0x19c) returned 0x1 [0055.889] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.892] GetFileType (hFile=0x19c) returned 0x1 [0055.892] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.892] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.893] GetFileType (hFile=0x19c) returned 0x1 [0055.893] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.893] GetFileType (hFile=0x19c) returned 0x1 [0055.893] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.893] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.901] GetFileType (hFile=0x19c) returned 0x1 [0055.901] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.904] GetFileType (hFile=0x19c) returned 0x1 [0055.904] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.904] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.906] GetFileType (hFile=0x19c) returned 0x1 [0055.906] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.906] GetFileType (hFile=0x19c) returned 0x1 [0055.906] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.906] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.926] GetFileType (hFile=0x19c) returned 0x1 [0055.926] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.976] GetFileType (hFile=0x19c) returned 0x1 [0055.977] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.977] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.980] GetFileType (hFile=0x19c) returned 0x1 [0055.980] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.980] GetFileType (hFile=0x19c) returned 0x1 [0055.980] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.980] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.991] GetFileType (hFile=0x19c) returned 0x1 [0055.991] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.995] GetFileType (hFile=0x19c) returned 0x1 [0055.995] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.995] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.996] GetFileType (hFile=0x19c) returned 0x1 [0055.996] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.996] GetFileType (hFile=0x19c) returned 0x1 [0055.996] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0055.996] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0055.997] GetFileType (hFile=0x19c) returned 0x1 [0055.997] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.003] GetFileType (hFile=0x19c) returned 0x1 [0056.003] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.003] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.004] GetFileType (hFile=0x19c) returned 0x1 [0056.004] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.004] SetEvent (hEvent=0x138) returned 1 [0056.004] GetFileType (hFile=0x19c) returned 0x1 [0056.004] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.004] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.015] GetFileType (hFile=0x19c) returned 0x1 [0056.015] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.020] GetFileType (hFile=0x19c) returned 0x1 [0056.020] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.020] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.021] GetFileType (hFile=0x19c) returned 0x1 [0056.021] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.021] GetFileType (hFile=0x19c) returned 0x1 [0056.021] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.021] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.035] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.040] GetFileType (hFile=0x19c) returned 0x1 [0056.040] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.044] GetFileType (hFile=0x19c) returned 0x1 [0056.044] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.044] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.045] GetFileType (hFile=0x19c) returned 0x1 [0056.045] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.045] GetFileType (hFile=0x19c) returned 0x1 [0056.045] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.045] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.046] GetFileType (hFile=0x19c) returned 0x1 [0056.046] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.051] GetFileType (hFile=0x19c) returned 0x1 [0056.051] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.052] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.052] GetFileType (hFile=0x19c) returned 0x1 [0056.052] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.052] GetFileType (hFile=0x19c) returned 0x1 [0056.052] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.053] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.069] GetFileType (hFile=0x19c) returned 0x1 [0056.069] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.075] GetFileType (hFile=0x19c) returned 0x1 [0056.075] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.075] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.076] GetFileType (hFile=0x19c) returned 0x1 [0056.076] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.077] GetFileType (hFile=0x19c) returned 0x1 [0056.077] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.077] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.078] GetFileType (hFile=0x19c) returned 0x1 [0056.078] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.084] GetFileType (hFile=0x19c) returned 0x1 [0056.084] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.084] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.085] GetFileType (hFile=0x19c) returned 0x1 [0056.085] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.085] GetFileType (hFile=0x19c) returned 0x1 [0056.085] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.085] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.086] GetFileType (hFile=0x19c) returned 0x1 [0056.086] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.093] GetFileType (hFile=0x19c) returned 0x1 [0056.093] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.093] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.093] GetFileType (hFile=0x19c) returned 0x1 [0056.093] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.094] SetEvent (hEvent=0x138) returned 1 [0056.094] GetFileType (hFile=0x19c) returned 0x1 [0056.094] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.094] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.106] GetFileType (hFile=0x19c) returned 0x1 [0056.106] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.112] GetFileType (hFile=0x19c) returned 0x1 [0056.112] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.112] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.114] GetFileType (hFile=0x19c) returned 0x1 [0056.114] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.114] GetFileType (hFile=0x19c) returned 0x1 [0056.114] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.114] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.117] GetFileType (hFile=0x19c) returned 0x1 [0056.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.122] GetFileType (hFile=0x19c) returned 0x1 [0056.122] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.122] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.123] GetFileType (hFile=0x19c) returned 0x1 [0056.123] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.123] GetFileType (hFile=0x19c) returned 0x1 [0056.123] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.123] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.135] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.142] GetFileType (hFile=0x19c) returned 0x1 [0056.142] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.146] GetFileType (hFile=0x19c) returned 0x1 [0056.146] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.146] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.146] GetFileType (hFile=0x19c) returned 0x1 [0056.146] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.147] GetFileType (hFile=0x19c) returned 0x1 [0056.147] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.147] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.156] GetFileType (hFile=0x19c) returned 0x1 [0056.156] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.159] GetFileType (hFile=0x19c) returned 0x1 [0056.159] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.159] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.161] GetFileType (hFile=0x19c) returned 0x1 [0056.161] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.161] GetFileType (hFile=0x19c) returned 0x1 [0056.161] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.161] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.164] GetFileType (hFile=0x19c) returned 0x1 [0056.164] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.168] GetFileType (hFile=0x19c) returned 0x1 [0056.168] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.168] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.168] GetFileType (hFile=0x19c) returned 0x1 [0056.168] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.169] GetFileType (hFile=0x19c) returned 0x1 [0056.169] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.169] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.178] GetFileType (hFile=0x19c) returned 0x1 [0056.178] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.181] GetFileType (hFile=0x19c) returned 0x1 [0056.181] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.182] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.183] GetFileType (hFile=0x19c) returned 0x1 [0056.183] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.183] SetEvent (hEvent=0x138) returned 1 [0056.183] GetFileType (hFile=0x19c) returned 0x1 [0056.183] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.183] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.186] GetFileType (hFile=0x19c) returned 0x1 [0056.186] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.186] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0056.188] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.188] SetEvent (hEvent=0x138) returned 1 [0056.188] SetEvent (hEvent=0x170) returned 1 [0056.188] SetEvent (hEvent=0x160) returned 1 [0056.188] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.203] SetEvent (hEvent=0x168) returned 1 [0056.203] SetEvent (hEvent=0x160) returned 1 [0056.207] GetFileType (hFile=0x19c) returned 0x1 [0056.207] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.207] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.208] GetFileType (hFile=0x19c) returned 0x1 [0056.208] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.208] GetFileType (hFile=0x19c) returned 0x1 [0056.208] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.208] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.219] GetFileType (hFile=0x19c) returned 0x1 [0056.219] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.222] GetFileType (hFile=0x19c) returned 0x1 [0056.222] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.222] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.223] GetFileType (hFile=0x19c) returned 0x1 [0056.223] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.223] GetFileType (hFile=0x19c) returned 0x1 [0056.223] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.223] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.259] GetFileType (hFile=0x19c) returned 0x1 [0056.260] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.265] GetFileType (hFile=0x19c) returned 0x1 [0056.265] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.265] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.267] GetFileType (hFile=0x19c) returned 0x1 [0056.267] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.267] GetFileType (hFile=0x19c) returned 0x1 [0056.267] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.267] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.268] GetFileType (hFile=0x19c) returned 0x1 [0056.268] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.273] GetFileType (hFile=0x19c) returned 0x1 [0056.273] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.274] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.274] GetFileType (hFile=0x19c) returned 0x1 [0056.274] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.275] GetFileType (hFile=0x19c) returned 0x1 [0056.275] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.275] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.283] GetFileType (hFile=0x19c) returned 0x1 [0056.283] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.287] GetFileType (hFile=0x19c) returned 0x1 [0056.287] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.287] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.288] GetFileType (hFile=0x19c) returned 0x1 [0056.288] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.288] GetFileType (hFile=0x19c) returned 0x1 [0056.288] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.289] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.292] GetFileType (hFile=0x19c) returned 0x1 [0056.292] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.295] GetFileType (hFile=0x19c) returned 0x1 [0056.295] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.296] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.296] GetFileType (hFile=0x19c) returned 0x1 [0056.296] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.296] SetEvent (hEvent=0x170) returned 1 [0056.296] GetFileType (hFile=0x19c) returned 0x1 [0056.296] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.296] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.305] GetFileType (hFile=0x19c) returned 0x1 [0056.305] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.309] GetFileType (hFile=0x19c) returned 0x1 [0056.309] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.309] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.310] GetFileType (hFile=0x19c) returned 0x1 [0056.310] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.310] GetFileType (hFile=0x19c) returned 0x1 [0056.310] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.310] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.318] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.322] GetFileType (hFile=0x19c) returned 0x1 [0056.322] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.325] GetFileType (hFile=0x19c) returned 0x1 [0056.325] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.325] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.327] GetFileType (hFile=0x19c) returned 0x1 [0056.327] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.327] GetFileType (hFile=0x19c) returned 0x1 [0056.327] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.327] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.328] GetFileType (hFile=0x19c) returned 0x1 [0056.328] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.335] GetFileType (hFile=0x19c) returned 0x1 [0056.335] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.335] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.336] GetFileType (hFile=0x19c) returned 0x1 [0056.336] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.336] GetFileType (hFile=0x19c) returned 0x1 [0056.336] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.336] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.344] GetFileType (hFile=0x19c) returned 0x1 [0056.344] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.347] GetFileType (hFile=0x19c) returned 0x1 [0056.347] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.347] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.348] GetFileType (hFile=0x19c) returned 0x1 [0056.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.348] GetFileType (hFile=0x19c) returned 0x1 [0056.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.348] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.351] GetFileType (hFile=0x19c) returned 0x1 [0056.351] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.355] GetFileType (hFile=0x19c) returned 0x1 [0056.355] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.355] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.356] GetFileType (hFile=0x19c) returned 0x1 [0056.356] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.356] GetFileType (hFile=0x19c) returned 0x1 [0056.356] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.356] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.364] GetFileType (hFile=0x19c) returned 0x1 [0056.364] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.368] GetFileType (hFile=0x19c) returned 0x1 [0056.368] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.368] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.368] GetFileType (hFile=0x19c) returned 0x1 [0056.368] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.369] SetEvent (hEvent=0x170) returned 1 [0056.369] GetFileType (hFile=0x19c) returned 0x1 [0056.369] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.369] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.377] GetFileType (hFile=0x19c) returned 0x1 [0056.377] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.379] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.382] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.438] SetEvent (hEvent=0x170) returned 1 [0056.438] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.443] SetEvent (hEvent=0x170) returned 1 [0056.443] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.446] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.523] SetEvent (hEvent=0x138) returned 1 [0056.523] SetEvent (hEvent=0x158) returned 1 [0056.523] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.538] SetEvent (hEvent=0x138) returned 1 [0056.538] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.548] SetEvent (hEvent=0x170) returned 1 [0056.548] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.603] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.664] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.712] SetEvent (hEvent=0x138) returned 1 [0056.712] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.717] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.821] SetEvent (hEvent=0x158) returned 1 [0056.821] SetEvent (hEvent=0x170) returned 1 [0056.821] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0056.900] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.208] SetEvent (hEvent=0x158) returned 1 [0057.208] SetEvent (hEvent=0x160) returned 1 [0057.208] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.225] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.305] SetEvent (hEvent=0x138) returned 1 [0057.305] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.324] SetEvent (hEvent=0x170) returned 1 [0057.325] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.406] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.407] SetEvent (hEvent=0x170) returned 1 [0057.407] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.408] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.624] SetEvent (hEvent=0x158) returned 1 [0057.624] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.626] SetEvent (hEvent=0x158) returned 1 [0057.626] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.746] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.747] SetEvent (hEvent=0x158) returned 1 [0057.747] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.747] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.890] SetEvent (hEvent=0x160) returned 1 [0057.890] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.891] SetEvent (hEvent=0x160) returned 1 [0057.891] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.980] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.981] SetEvent (hEvent=0x160) returned 1 [0057.981] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0057.982] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.120] SetEvent (hEvent=0x138) returned 1 [0058.120] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.121] SetEvent (hEvent=0x138) returned 1 [0058.121] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.181] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.186] SetEvent (hEvent=0x138) returned 1 [0058.186] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.213] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.331] SetEvent (hEvent=0x138) returned 1 [0058.331] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.342] SetEvent (hEvent=0x160) returned 1 [0058.342] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.436] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.438] SetEvent (hEvent=0x160) returned 1 [0058.438] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.438] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.515] SetEvent (hEvent=0x160) returned 1 [0058.516] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.517] SetEvent (hEvent=0x160) returned 1 [0058.517] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.565] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.583] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.630] SetEvent (hEvent=0x170) returned 1 [0058.630] SetEvent (hEvent=0x160) returned 1 [0058.631] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0058.701] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.701] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0058.703] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.703] SetEvent (hEvent=0x170) returned 1 [0058.703] SetEvent (hEvent=0x160) returned 1 [0058.703] SetEvent (hEvent=0x158) returned 1 [0058.703] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.705] SetEvent (hEvent=0x168) returned 1 [0058.705] SetEvent (hEvent=0x158) returned 1 [0058.705] SetEvent (hEvent=0x138) returned 1 [0058.705] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.709] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.744] SetEvent (hEvent=0x158) returned 1 [0058.744] SetEvent (hEvent=0x160) returned 1 [0058.744] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0058.753] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.753] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x0 [0058.755] SetEvent (hEvent=0x158) returned 1 [0058.755] SetEvent (hEvent=0x138) returned 1 [0058.755] SetEvent (hEvent=0x160) returned 1 [0058.755] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.757] SetEvent (hEvent=0x168) returned 1 [0058.757] SetEvent (hEvent=0x160) returned 1 [0058.760] GetFileType (hFile=0x19c) returned 0x1 [0058.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.760] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.761] GetFileType (hFile=0x19c) returned 0x1 [0058.761] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.761] GetFileType (hFile=0x19c) returned 0x1 [0058.761] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.761] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.773] GetFileType (hFile=0x19c) returned 0x1 [0058.773] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.776] GetFileType (hFile=0x19c) returned 0x1 [0058.776] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.776] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.784] GetFileType (hFile=0x19c) returned 0x1 [0058.784] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.784] GetFileType (hFile=0x19c) returned 0x1 [0058.784] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.784] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.785] GetFileType (hFile=0x19c) returned 0x1 [0058.785] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.790] GetFileType (hFile=0x19c) returned 0x1 [0058.790] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.790] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.791] GetFileType (hFile=0x19c) returned 0x1 [0058.791] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.791] GetFileType (hFile=0x19c) returned 0x1 [0058.791] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.791] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.799] GetFileType (hFile=0x19c) returned 0x1 [0058.799] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.803] GetFileType (hFile=0x19c) returned 0x1 [0058.803] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.803] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.803] GetFileType (hFile=0x19c) returned 0x1 [0058.803] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.803] GetFileType (hFile=0x19c) returned 0x1 [0058.803] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.804] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.811] GetFileType (hFile=0x19c) returned 0x1 [0058.811] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.815] GetFileType (hFile=0x19c) returned 0x1 [0058.815] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.815] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.816] GetFileType (hFile=0x19c) returned 0x1 [0058.816] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.816] SetEvent (hEvent=0x138) returned 1 [0058.816] GetFileType (hFile=0x19c) returned 0x1 [0058.816] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.816] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.817] GetFileType (hFile=0x19c) returned 0x1 [0058.817] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.819] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0058.820] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.820] SetEvent (hEvent=0x138) returned 1 [0058.820] SetEvent (hEvent=0x160) returned 1 [0058.820] SetEvent (hEvent=0x158) returned 1 [0058.820] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.821] SetEvent (hEvent=0x168) returned 1 [0058.821] SetEvent (hEvent=0x158) returned 1 [0058.825] GetFileType (hFile=0x19c) returned 0x1 [0058.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.825] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.825] GetFileType (hFile=0x19c) returned 0x1 [0058.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.825] GetFileType (hFile=0x19c) returned 0x1 [0058.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.825] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.833] GetFileType (hFile=0x19c) returned 0x1 [0058.833] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.836] GetFileType (hFile=0x19c) returned 0x1 [0058.836] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.836] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.837] GetFileType (hFile=0x19c) returned 0x1 [0058.837] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.837] GetFileType (hFile=0x19c) returned 0x1 [0058.837] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.837] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.838] GetFileType (hFile=0x19c) returned 0x1 [0058.838] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.843] GetFileType (hFile=0x19c) returned 0x1 [0058.843] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.844] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.844] GetFileType (hFile=0x19c) returned 0x1 [0058.844] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.844] GetFileType (hFile=0x19c) returned 0x1 [0058.844] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.844] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.854] GetFileType (hFile=0x19c) returned 0x1 [0058.854] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.858] GetFileType (hFile=0x19c) returned 0x1 [0058.858] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.858] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.859] GetFileType (hFile=0x19c) returned 0x1 [0058.859] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.859] GetFileType (hFile=0x19c) returned 0x1 [0058.859] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.859] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.866] GetFileType (hFile=0x19c) returned 0x1 [0058.866] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.870] GetFileType (hFile=0x19c) returned 0x1 [0058.870] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.870] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.871] GetFileType (hFile=0x19c) returned 0x1 [0058.871] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.871] GetFileType (hFile=0x19c) returned 0x1 [0058.871] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.871] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.872] GetFileType (hFile=0x19c) returned 0x1 [0058.872] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.877] GetFileType (hFile=0x19c) returned 0x1 [0058.877] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.877] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.878] GetFileType (hFile=0x19c) returned 0x1 [0058.878] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.878] SetEvent (hEvent=0x160) returned 1 [0058.878] GetFileType (hFile=0x19c) returned 0x1 [0058.878] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.878] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.887] GetFileType (hFile=0x19c) returned 0x1 [0058.887] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.891] GetFileType (hFile=0x19c) returned 0x1 [0058.891] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.891] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.891] GetFileType (hFile=0x19c) returned 0x1 [0058.891] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.892] GetFileType (hFile=0x19c) returned 0x1 [0058.892] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.892] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.892] GetFileType (hFile=0x19c) returned 0x1 [0058.892] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.897] GetFileType (hFile=0x19c) returned 0x1 [0058.898] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.898] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.898] GetFileType (hFile=0x19c) returned 0x1 [0058.898] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.898] GetFileType (hFile=0x19c) returned 0x1 [0058.898] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.898] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.899] GetFileType (hFile=0x19c) returned 0x1 [0058.899] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.904] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.907] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0058.944] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.061] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.177] SetEvent (hEvent=0x160) returned 1 [0059.178] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.178] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.301] SetEvent (hEvent=0x138) returned 1 [0059.301] SetEvent (hEvent=0x158) returned 1 [0059.301] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.309] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.376] SetEvent (hEvent=0x160) returned 1 [0059.376] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.399] SetEvent (hEvent=0x170) returned 1 [0059.399] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.448] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.482] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.622] SetEvent (hEvent=0x138) returned 1 [0059.622] SetEvent (hEvent=0x170) returned 1 [0059.622] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0059.643] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.643] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x0 [0059.644] SetEvent (hEvent=0x138) returned 1 [0059.644] SetEvent (hEvent=0x170) returned 1 [0059.644] SetEvent (hEvent=0x158) returned 1 [0059.644] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.645] SetEvent (hEvent=0x168) returned 1 [0059.645] SetEvent (hEvent=0x158) returned 1 [0059.645] SetEvent (hEvent=0x160) returned 1 [0059.645] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.659] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.717] SetEvent (hEvent=0x160) returned 1 [0059.717] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.720] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.792] SetEvent (hEvent=0x160) returned 1 [0059.792] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.806] SetEvent (hEvent=0x170) returned 1 [0059.806] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.881] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.882] SetEvent (hEvent=0x170) returned 1 [0059.882] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0059.883] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0060.169] SetEvent (hEvent=0x158) returned 1 [0060.169] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0060.170] SetEvent (hEvent=0x158) returned 1 [0060.170] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0060.227] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0060.300] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0060.319] SetEvent (hEvent=0x160) returned 1 [0060.319] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0060.320] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0060.646] SetEvent (hEvent=0x160) returned 1 [0060.646] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0060.651] SetEvent (hEvent=0x158) returned 1 [0060.651] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0064.524] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0064.572] SetEvent (hEvent=0x158) returned 1 [0064.572] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0064.620] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0068.472] SetEvent (hEvent=0x138) returned 1 [0068.472] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0068.628] SetEvent (hEvent=0x138) returned 1 [0068.628] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0070.073] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0070.349] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0070.834] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0071.999] SetEvent (hEvent=0x160) returned 1 [0071.999] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0072.036] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0073.134] SetEvent (hEvent=0x170) returned 1 [0073.134] SetEvent (hEvent=0x138) returned 1 [0073.134] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0073.209] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0074.360] SetEvent (hEvent=0x160) returned 1 [0074.360] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0074.380] SetEvent (hEvent=0x158) returned 1 [0074.380] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0074.550] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0074.593] SetEvent (hEvent=0x158) returned 1 [0074.593] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0074.641] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0075.805] SetEvent (hEvent=0x138) returned 1 [0075.805] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0075.815] SetEvent (hEvent=0x138) returned 1 [0075.815] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0075.905] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0075.910] SetEvent (hEvent=0x138) returned 1 [0075.910] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0 [0075.911] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) Thread: id = 7 os_tid = 0x1160 Thread: id = 8 os_tid = 0x1118 [0049.961] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x30d6ff58, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x30d6ff58*=0x130) returned 1 [0049.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0049.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0049.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0049.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0049.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0049.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0049.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.000] SetEvent (hEvent=0x160) returned 1 [0050.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.008] timeEndPeriod (uPeriod=0x1) returned 0x0 [0050.008] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x168 [0050.008] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0050.052] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0050.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.267] SetEvent (hEvent=0x158) returned 1 [0050.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.316] SetEvent (hEvent=0x158) returned 1 [0050.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.382] timeEndPeriod (uPeriod=0x1) returned 0x0 [0050.382] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0050.761] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0050.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0050.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0051.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.726] timeEndPeriod (uPeriod=0x1) returned 0x0 [0052.727] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0052.743] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0052.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0052.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.151] timeEndPeriod (uPeriod=0x1) returned 0x0 [0053.151] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0053.154] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0053.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.275] timeEndPeriod (uPeriod=0x1) returned 0x0 [0053.275] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0053.307] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0053.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.345] SetEvent (hEvent=0x158) returned 1 [0053.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.393] timeEndPeriod (uPeriod=0x1) returned 0x0 [0053.393] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0053.399] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0053.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.496] SetEvent (hEvent=0x158) returned 1 [0053.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.533] timeEndPeriod (uPeriod=0x1) returned 0x0 [0053.533] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0053.541] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0053.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.614] timeEndPeriod (uPeriod=0x1) returned 0x0 [0053.614] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0053.619] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0053.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.724] SetEvent (hEvent=0x170) returned 1 [0053.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.764] timeEndPeriod (uPeriod=0x1) returned 0x0 [0053.764] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0053.768] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0053.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.872] SetEvent (hEvent=0x170) returned 1 [0053.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.937] timeEndPeriod (uPeriod=0x1) returned 0x0 [0053.937] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0053.955] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0053.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0053.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.018] timeEndPeriod (uPeriod=0x1) returned 0x0 [0054.019] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0054.037] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0054.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.277] timeEndPeriod (uPeriod=0x1) returned 0x0 [0054.277] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0054.291] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0054.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.293] timeEndPeriod (uPeriod=0x1) returned 0x0 [0054.293] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0054.361] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0054.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.453] timeEndPeriod (uPeriod=0x1) returned 0x0 [0054.453] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0054.480] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0054.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.589] timeEndPeriod (uPeriod=0x1) returned 0x0 [0054.589] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0054.616] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0054.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.824] timeEndPeriod (uPeriod=0x1) returned 0x0 [0054.825] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0054.840] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0054.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.914] timeEndPeriod (uPeriod=0x1) returned 0x0 [0054.914] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0054.930] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0054.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0054.997] timeEndPeriod (uPeriod=0x1) returned 0x0 [0054.997] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0055.000] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0055.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.081] timeEndPeriod (uPeriod=0x1) returned 0x0 [0055.081] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0055.085] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0055.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.145] timeEndPeriod (uPeriod=0x1) returned 0x0 [0055.145] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0055.158] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0055.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.240] timeEndPeriod (uPeriod=0x1) returned 0x0 [0055.240] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0055.243] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0055.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.349] timeEndPeriod (uPeriod=0x1) returned 0x0 [0055.350] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0055.356] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0055.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.405] timeEndPeriod (uPeriod=0x1) returned 0x0 [0055.405] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0055.425] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0055.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.727] timeEndPeriod (uPeriod=0x1) returned 0x0 [0055.727] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0055.729] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0055.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.818] timeEndPeriod (uPeriod=0x1) returned 0x0 [0055.818] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0055.820] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0055.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.885] timeEndPeriod (uPeriod=0x1) returned 0x0 [0055.886] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0055.888] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0055.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0055.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.034] timeEndPeriod (uPeriod=0x1) returned 0x0 [0056.035] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0056.040] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0056.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.137] timeEndPeriod (uPeriod=0x1) returned 0x0 [0056.137] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0056.141] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0056.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.203] timeEndPeriod (uPeriod=0x1) returned 0x0 [0056.203] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0056.213] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0056.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.320] timeEndPeriod (uPeriod=0x1) returned 0x0 [0056.320] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0056.321] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0056.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.379] timeEndPeriod (uPeriod=0x1) returned 0x0 [0056.379] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0056.431] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0056.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.438] timeEndPeriod (uPeriod=0x1) returned 0x0 [0056.438] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0056.443] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0056.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.445] timeEndPeriod (uPeriod=0x1) returned 0x0 [0056.445] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0056.459] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0056.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.524] timeEndPeriod (uPeriod=0x1) returned 0x0 [0056.525] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0056.548] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0056.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.603] timeEndPeriod (uPeriod=0x1) returned 0x0 [0056.603] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0056.634] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0056.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.718] timeEndPeriod (uPeriod=0x1) returned 0x0 [0056.718] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0056.736] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0056.736] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0056.821] timeEndPeriod (uPeriod=0x1) returned 0x0 [0056.822] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0057.056] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0057.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.212] timeEndPeriod (uPeriod=0x1) returned 0x0 [0057.212] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0057.226] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0057.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.305] timeEndPeriod (uPeriod=0x1) returned 0x0 [0057.305] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0057.324] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0057.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.407] timeEndPeriod (uPeriod=0x1) returned 0x0 [0057.407] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0057.410] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0057.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.486] timeEndPeriod (uPeriod=0x1) returned 0x0 [0057.486] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0057.502] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0057.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.546] timeEndPeriod (uPeriod=0x1) returned 0x0 [0057.546] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0057.558] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0057.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.622] timeEndPeriod (uPeriod=0x1) returned 0x0 [0057.622] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0057.625] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0057.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.746] timeEndPeriod (uPeriod=0x1) returned 0x0 [0057.746] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0057.748] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0057.748] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.799] timeEndPeriod (uPeriod=0x1) returned 0x0 [0057.799] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0057.812] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0057.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.886] timeEndPeriod (uPeriod=0x1) returned 0x0 [0057.886] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0057.891] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0057.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.919] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.981] timeEndPeriod (uPeriod=0x1) returned 0x0 [0057.982] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0057.983] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0057.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0057.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.035] timeEndPeriod (uPeriod=0x1) returned 0x0 [0058.035] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0058.043] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0058.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.119] timeEndPeriod (uPeriod=0x1) returned 0x0 [0058.119] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0058.121] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0058.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.181] timeEndPeriod (uPeriod=0x1) returned 0x0 [0058.182] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0058.260] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0058.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.331] timeEndPeriod (uPeriod=0x1) returned 0x0 [0058.331] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0058.342] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0058.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.438] timeEndPeriod (uPeriod=0x1) returned 0x0 [0058.438] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0058.439] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0058.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.515] timeEndPeriod (uPeriod=0x1) returned 0x0 [0058.515] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0058.517] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0058.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.565] timeEndPeriod (uPeriod=0x1) returned 0x0 [0058.565] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0058.580] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0058.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.703] timeEndPeriod (uPeriod=0x1) returned 0x0 [0058.703] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0058.706] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0058.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.753] timeEndPeriod (uPeriod=0x1) returned 0x0 [0058.754] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0058.772] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0058.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.821] timeEndPeriod (uPeriod=0x1) returned 0x0 [0058.821] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0058.832] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0058.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.904] timeEndPeriod (uPeriod=0x1) returned 0x0 [0058.904] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0058.922] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0058.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0058.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.026] SetEvent (hEvent=0x12c) returned 1 [0059.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.061] timeEndPeriod (uPeriod=0x1) returned 0x0 [0059.061] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0059.175] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0059.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.178] timeEndPeriod (uPeriod=0x1) returned 0x0 [0059.178] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0059.182] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0059.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.222] SetEvent (hEvent=0x138) returned 1 [0059.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.261] SetEvent (hEvent=0x138) returned 1 [0059.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.302] timeEndPeriod (uPeriod=0x1) returned 0x0 [0059.302] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0059.309] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0059.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.376] timeEndPeriod (uPeriod=0x1) returned 0x0 [0059.376] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0059.398] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0059.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.448] timeEndPeriod (uPeriod=0x1) returned 0x0 [0059.448] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0059.462] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0059.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.643] timeEndPeriod (uPeriod=0x1) returned 0x0 [0059.643] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0059.647] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0059.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.720] timeEndPeriod (uPeriod=0x1) returned 0x0 [0059.720] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0059.744] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0059.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.805] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.861] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.882] timeEndPeriod (uPeriod=0x1) returned 0x0 [0059.883] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0059.887] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0059.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.927] timeEndPeriod (uPeriod=0x1) returned 0x0 [0059.927] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0059.941] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0059.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0059.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.010] timeEndPeriod (uPeriod=0x1) returned 0x0 [0060.010] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0060.026] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0060.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.168] timeEndPeriod (uPeriod=0x1) returned 0x0 [0060.169] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0060.170] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0060.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.227] timeEndPeriod (uPeriod=0x1) returned 0x0 [0060.227] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0060.260] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0060.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.320] timeEndPeriod (uPeriod=0x1) returned 0x0 [0060.320] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0060.352] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0060.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.374] SetEvent (hEvent=0x138) returned 1 [0060.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.389] timeEndPeriod (uPeriod=0x1) returned 0x0 [0060.389] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0060.549] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0060.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.646] timeEndPeriod (uPeriod=0x1) returned 0x0 [0060.646] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0060.650] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0060.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.927] SetEvent (hEvent=0x158) returned 1 [0060.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0060.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.023] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.255] SetEvent (hEvent=0x158) returned 1 [0061.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.430] SetEvent (hEvent=0x158) returned 1 [0061.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.617] SetEvent (hEvent=0x158) returned 1 [0061.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0061.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.159] SetEvent (hEvent=0x158) returned 1 [0062.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.563] SetEvent (hEvent=0x158) returned 1 [0062.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.713] SetEvent (hEvent=0x158) returned 1 [0062.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.861] timeEndPeriod (uPeriod=0x1) returned 0x0 [0062.861] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0062.909] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0062.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.946] SetEvent (hEvent=0x158) returned 1 [0062.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0062.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0063.019] SetEvent (hEvent=0x158) returned 1 [0063.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0063.061] timeEndPeriod (uPeriod=0x1) returned 0x0 [0063.061] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0063.562] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0063.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0063.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0063.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0063.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0063.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0063.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0063.999] SetEvent (hEvent=0x158) returned 1 [0063.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0064.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0064.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0064.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0064.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0064.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0064.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0064.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0064.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0064.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0064.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0064.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0064.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0064.524] timeEndPeriod (uPeriod=0x1) returned 0x0 [0064.525] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0064.716] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0064.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0065.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0065.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0065.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0065.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0065.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0065.606] timeEndPeriod (uPeriod=0x1) returned 0x0 [0065.606] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0066.182] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0066.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0066.233] SetEvent (hEvent=0x170) returned 1 [0066.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0066.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0066.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0066.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0066.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0066.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0066.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0066.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0066.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0066.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0066.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0066.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0067.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0067.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0067.115] timeEndPeriod (uPeriod=0x1) returned 0x0 [0067.115] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0067.221] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0067.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0067.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0067.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0067.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0067.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0067.455] SetEvent (hEvent=0x138) returned 1 [0067.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0067.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0067.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0067.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0067.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0068.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0068.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0068.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0068.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0068.377] timeEndPeriod (uPeriod=0x1) returned 0x0 [0068.377] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0068.628] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0068.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0068.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0068.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0068.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0068.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0069.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0069.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0069.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0069.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0069.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0069.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0069.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0069.854] SetEvent (hEvent=0x138) returned 1 [0069.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0069.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0070.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0070.041] timeEndPeriod (uPeriod=0x1) returned 0x0 [0070.041] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0070.278] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0070.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0070.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0070.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0070.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0070.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0070.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0070.728] SetEvent (hEvent=0x12c) returned 1 [0070.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0070.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0070.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0070.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0070.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.919] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0071.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.036] timeEndPeriod (uPeriod=0x1) returned 0x0 [0072.036] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0072.132] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0072.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.508] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0072.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0073.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0073.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0073.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0073.172] timeEndPeriod (uPeriod=0x1) returned 0x0 [0073.172] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0073.345] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0073.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0073.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0073.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0073.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0073.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0073.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0073.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0073.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0073.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0073.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.135] SetEvent (hEvent=0x170) returned 1 [0074.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.335] timeEndPeriod (uPeriod=0x1) returned 0x0 [0074.336] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0074.380] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0074.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.593] timeEndPeriod (uPeriod=0x1) returned 0x0 [0074.594] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0074.754] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0074.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.861] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0074.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.073] timeEndPeriod (uPeriod=0x1) returned 0x0 [0075.073] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0075.154] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0075.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.707] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.793] timeEndPeriod (uPeriod=0x1) returned 0x0 [0075.793] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0075.815] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0075.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.846] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.908] timeEndPeriod (uPeriod=0x1) returned 0x0 [0075.909] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0075.918] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0075.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0075.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.416] timeEndPeriod (uPeriod=0x1) returned 0x0 [0076.417] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0076.426] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0076.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.888] timeEndPeriod (uPeriod=0x1) returned 0x0 [0076.888] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0076.943] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0076.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0076.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.254] timeEndPeriod (uPeriod=0x1) returned 0x0 [0077.255] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0077.272] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0077.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.284] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.441] timeEndPeriod (uPeriod=0x1) returned 0x0 [0077.442] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0077.467] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0077.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.684] timeEndPeriod (uPeriod=0x1) returned 0x0 [0077.684] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0077.724] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0077.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0077.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.686] timeEndPeriod (uPeriod=0x1) returned 0x0 [0078.686] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0078.708] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0078.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0078.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.378] timeEndPeriod (uPeriod=0x1) returned 0x0 [0079.378] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0079.396] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0079.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.572] timeEndPeriod (uPeriod=0x1) returned 0x0 [0079.573] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0xea60) returned 0x0 [0079.602] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0079.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0079.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0080.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0080.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0080.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0080.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0080.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0080.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0080.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0080.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0080.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0080.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0080.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0080.251] SetEvent (hEvent=0x158) returned 1 [0080.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) returned 0x102 [0080.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x30d6fedc) Thread: id = 9 os_tid = 0x1100 [0049.965] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x30eaff58, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x30eaff58*=0x134) returned 1 [0049.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x100000, lpStartAddress=0x4491f0, lpParameter=0x10c9c000, dwCreationFlags=0x10000, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138 [0049.965] CloseHandle (hObject=0x138) returned 1 [0049.965] SetEvent (hEvent=0x12c) returned 1 [0049.965] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x138 [0049.965] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0052.041] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0052.042] SetEvent (hEvent=0x158) returned 1 [0052.042] SetEvent (hEvent=0x12c) returned 1 [0052.042] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0052.045] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0052.046] SetEvent (hEvent=0x158) returned 1 [0052.046] SetEvent (hEvent=0x12c) returned 1 [0052.046] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0052.057] SetEvent (hEvent=0x158) returned 1 [0052.057] SetEvent (hEvent=0x160) returned 1 [0052.058] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0052.060] SetEvent (hEvent=0x158) returned 1 [0052.060] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0052.063] SetEvent (hEvent=0x158) returned 1 [0052.063] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0052.726] SetEvent (hEvent=0x170) returned 1 [0052.726] SetEvent (hEvent=0x158) returned 1 [0052.726] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0052.737] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0053.149] SetEvent (hEvent=0x170) returned 1 [0053.149] SetEvent (hEvent=0x160) returned 1 [0053.149] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0053.151] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0053.275] SetEvent (hEvent=0x12c) returned 1 [0053.275] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0053.309] SetEvent (hEvent=0x158) returned 1 [0053.309] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0053.534] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0053.547] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0053.612] SetEvent (hEvent=0x12c) returned 1 [0053.612] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0053.613] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0053.937] SetEvent (hEvent=0x12c) returned 1 [0053.937] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0053.956] SetEvent (hEvent=0x158) returned 1 [0053.956] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.020] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.060] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.268] SetEvent (hEvent=0x170) returned 1 [0054.268] SetEvent (hEvent=0x158) returned 1 [0054.268] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0054.273] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.273] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0054.277] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.277] SetEvent (hEvent=0x170) returned 1 [0054.277] SetEvent (hEvent=0x158) returned 1 [0054.277] SetEvent (hEvent=0x160) returned 1 [0054.277] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.287] SetEvent (hEvent=0x168) returned 1 [0054.287] SetEvent (hEvent=0x160) returned 1 [0054.288] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.462] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.486] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.564] SetEvent (hEvent=0x158) returned 1 [0054.564] SetEvent (hEvent=0x160) returned 1 [0054.564] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0054.589] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.589] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x0 [0054.600] SetEvent (hEvent=0x158) returned 1 [0054.608] SetEvent (hEvent=0x160) returned 1 [0054.608] SetEvent (hEvent=0x170) returned 1 [0054.608] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.614] SetEvent (hEvent=0x168) returned 1 [0054.614] SetEvent (hEvent=0x170) returned 1 [0054.614] SetEvent (hEvent=0x12c) returned 1 [0054.614] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.731] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.803] SetEvent (hEvent=0x170) returned 1 [0054.803] SetEvent (hEvent=0x160) returned 1 [0054.803] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0054.823] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.823] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x0 [0054.825] SetEvent (hEvent=0x170) returned 1 [0054.825] SetEvent (hEvent=0x160) returned 1 [0054.825] SetEvent (hEvent=0x158) returned 1 [0054.825] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.838] SetEvent (hEvent=0x168) returned 1 [0054.838] SetEvent (hEvent=0x158) returned 1 [0054.838] SetEvent (hEvent=0x12c) returned 1 [0054.838] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.880] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.913] SetEvent (hEvent=0x12c) returned 1 [0054.913] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.914] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.995] SetEvent (hEvent=0x158) returned 1 [0054.995] SetEvent (hEvent=0x160) returned 1 [0054.995] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0054.997] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.080] SetEvent (hEvent=0x158) returned 1 [0055.080] SetEvent (hEvent=0x170) returned 1 [0055.081] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.084] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.145] SetEvent (hEvent=0x12c) returned 1 [0055.145] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.159] SetEvent (hEvent=0x160) returned 1 [0055.160] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.236] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.240] SetEvent (hEvent=0x160) returned 1 [0055.240] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.242] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.354] SetEvent (hEvent=0x160) returned 1 [0055.354] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.356] SetEvent (hEvent=0x160) returned 1 [0055.356] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.405] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.437] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.710] SetEvent (hEvent=0x158) returned 1 [0055.711] SetEvent (hEvent=0x160) returned 1 [0055.711] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0055.726] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.726] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0055.727] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.727] SetEvent (hEvent=0x158) returned 1 [0055.727] SetEvent (hEvent=0x160) returned 1 [0055.727] SetEvent (hEvent=0x170) returned 1 [0055.727] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.728] SetEvent (hEvent=0x168) returned 1 [0055.728] SetEvent (hEvent=0x170) returned 1 [0055.728] SetEvent (hEvent=0x12c) returned 1 [0055.728] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.758] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.797] SetEvent (hEvent=0x170) returned 1 [0055.797] SetEvent (hEvent=0x160) returned 1 [0055.797] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0055.818] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.818] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x0 [0055.819] SetEvent (hEvent=0x170) returned 1 [0055.819] SetEvent (hEvent=0x160) returned 1 [0055.819] SetEvent (hEvent=0x158) returned 1 [0055.819] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.820] SetEvent (hEvent=0x168) returned 1 [0055.820] SetEvent (hEvent=0x158) returned 1 [0055.820] SetEvent (hEvent=0x12c) returned 1 [0055.820] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.833] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.864] SetEvent (hEvent=0x158) returned 1 [0055.865] SetEvent (hEvent=0x160) returned 1 [0055.865] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0055.883] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.883] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x0 [0055.885] SetEvent (hEvent=0x158) returned 1 [0055.885] SetEvent (hEvent=0x160) returned 1 [0055.885] SetEvent (hEvent=0x170) returned 1 [0055.885] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.887] SetEvent (hEvent=0x168) returned 1 [0055.887] SetEvent (hEvent=0x170) returned 1 [0055.887] SetEvent (hEvent=0x12c) returned 1 [0055.887] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0055.900] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.014] SetEvent (hEvent=0x170) returned 1 [0056.015] SetEvent (hEvent=0x160) returned 1 [0056.015] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0056.034] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.034] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x0 [0056.037] SetEvent (hEvent=0x170) returned 1 [0056.037] SetEvent (hEvent=0x160) returned 1 [0056.037] SetEvent (hEvent=0x158) returned 1 [0056.037] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.039] SetEvent (hEvent=0x168) returned 1 [0056.039] SetEvent (hEvent=0x158) returned 1 [0056.039] SetEvent (hEvent=0x12c) returned 1 [0056.039] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.068] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.105] SetEvent (hEvent=0x158) returned 1 [0056.105] SetEvent (hEvent=0x160) returned 1 [0056.105] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0056.135] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.135] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0056.137] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.137] SetEvent (hEvent=0x158) returned 1 [0056.137] SetEvent (hEvent=0x160) returned 1 [0056.137] SetEvent (hEvent=0x170) returned 1 [0056.137] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.140] SetEvent (hEvent=0x168) returned 1 [0056.140] SetEvent (hEvent=0x170) returned 1 [0056.140] SetEvent (hEvent=0x12c) returned 1 [0056.140] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.155] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.188] SetEvent (hEvent=0x12c) returned 1 [0056.188] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.202] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.318] SetEvent (hEvent=0x170) returned 1 [0056.318] SetEvent (hEvent=0x160) returned 1 [0056.318] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.320] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.378] SetEvent (hEvent=0x170) returned 1 [0056.378] SetEvent (hEvent=0x158) returned 1 [0056.378] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.382] SetEvent (hEvent=0x170) returned 1 [0056.382] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.431] SetEvent (hEvent=0x12c) returned 1 [0056.431] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.446] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.471] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.517] SetEvent (hEvent=0x158) returned 1 [0056.517] SetEvent (hEvent=0x12c) returned 1 [0056.517] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0056.523] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.523] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0056.524] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.524] SetEvent (hEvent=0x158) returned 1 [0056.524] SetEvent (hEvent=0x170) returned 1 [0056.524] SetEvent (hEvent=0x12c) returned 1 [0056.524] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.539] SetEvent (hEvent=0x168) returned 1 [0056.539] SetEvent (hEvent=0x12c) returned 1 [0056.540] GetFileType (hFile=0x19c) returned 0x1 [0056.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.540] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.541] GetFileType (hFile=0x19c) returned 0x1 [0056.541] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.541] GetFileType (hFile=0x19c) returned 0x1 [0056.541] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.541] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.548] GetFileType (hFile=0x19c) returned 0x1 [0056.549] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.552] GetFileType (hFile=0x19c) returned 0x1 [0056.552] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.552] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.553] GetFileType (hFile=0x19c) returned 0x1 [0056.553] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.553] GetFileType (hFile=0x19c) returned 0x1 [0056.553] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.554] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.554] GetFileType (hFile=0x19c) returned 0x1 [0056.554] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.560] GetFileType (hFile=0x19c) returned 0x1 [0056.560] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.560] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.561] GetFileType (hFile=0x19c) returned 0x1 [0056.561] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.561] GetFileType (hFile=0x19c) returned 0x1 [0056.561] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.561] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.569] GetFileType (hFile=0x19c) returned 0x1 [0056.569] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.572] GetFileType (hFile=0x19c) returned 0x1 [0056.572] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.572] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.573] GetFileType (hFile=0x19c) returned 0x1 [0056.573] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.573] GetFileType (hFile=0x19c) returned 0x1 [0056.573] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.573] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.574] GetFileType (hFile=0x19c) returned 0x1 [0056.574] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.579] GetFileType (hFile=0x19c) returned 0x1 [0056.580] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.580] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.580] GetFileType (hFile=0x19c) returned 0x1 [0056.580] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.580] GetFileType (hFile=0x19c) returned 0x1 [0056.580] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.580] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.589] GetFileType (hFile=0x19c) returned 0x1 [0056.589] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.592] GetFileType (hFile=0x19c) returned 0x1 [0056.592] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.592] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.593] GetFileType (hFile=0x19c) returned 0x1 [0056.593] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.593] SetEvent (hEvent=0x170) returned 1 [0056.593] GetFileType (hFile=0x19c) returned 0x1 [0056.593] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.593] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.600] GetFileType (hFile=0x19c) returned 0x1 [0056.600] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.601] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0056.602] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.602] SetEvent (hEvent=0x170) returned 1 [0056.602] SetEvent (hEvent=0x12c) returned 1 [0056.602] SetEvent (hEvent=0x158) returned 1 [0056.602] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.611] SetEvent (hEvent=0x168) returned 1 [0056.611] SetEvent (hEvent=0x158) returned 1 [0056.615] GetFileType (hFile=0x19c) returned 0x1 [0056.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.615] WriteFile (in: hFile=0x19c, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.616] GetFileType (hFile=0x19c) returned 0x1 [0056.616] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.616] GetFileType (hFile=0x19c) returned 0x1 [0056.616] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.616] ReadFile (in: hFile=0x19c, lpBuffer=0x111ec000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.620] GetFileType (hFile=0x19c) returned 0x1 [0056.620] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.623] GetFileType (hFile=0x19c) returned 0x1 [0056.623] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.623] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.624] GetFileType (hFile=0x19c) returned 0x1 [0056.624] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.624] GetFileType (hFile=0x19c) returned 0x1 [0056.624] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.624] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.635] GetFileType (hFile=0x19c) returned 0x1 [0056.635] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.662] GetFileType (hFile=0x19c) returned 0x1 [0056.662] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.663] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.665] GetFileType (hFile=0x19c) returned 0x1 [0056.665] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.665] GetFileType (hFile=0x19c) returned 0x1 [0056.665] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.665] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.670] GetFileType (hFile=0x19c) returned 0x1 [0056.670] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.673] GetFileType (hFile=0x19c) returned 0x1 [0056.674] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.674] WriteFile (in: hFile=0x19c, lpBuffer=0x1123c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.674] GetFileType (hFile=0x19c) returned 0x1 [0056.674] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.674] GetFileType (hFile=0x19c) returned 0x1 [0056.674] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.674] ReadFile (in: hFile=0x19c, lpBuffer=0x1128c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.675] GetFileType (hFile=0x19c) returned 0x1 [0056.676] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.681] GetFileType (hFile=0x19c) returned 0x1 [0056.681] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.681] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.681] GetFileType (hFile=0x19c) returned 0x1 [0056.681] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.682] GetFileType (hFile=0x19c) returned 0x1 [0056.682] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.682] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.701] GetFileType (hFile=0x19c) returned 0x1 [0056.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.704] GetFileType (hFile=0x19c) returned 0x1 [0056.704] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.704] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.705] GetFileType (hFile=0x19c) returned 0x1 [0056.705] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.706] SetEvent (hEvent=0x12c) returned 1 [0056.706] GetFileType (hFile=0x19c) returned 0x1 [0056.706] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.706] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.706] GetFileType (hFile=0x19c) returned 0x1 [0056.706] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.707] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0056.712] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.712] SetEvent (hEvent=0x12c) returned 1 [0056.712] SetEvent (hEvent=0x158) returned 1 [0056.712] SetEvent (hEvent=0x170) returned 1 [0056.712] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0056.719] SetEvent (hEvent=0x168) returned 1 [0056.719] SetEvent (hEvent=0x170) returned 1 [0056.722] GetFileType (hFile=0x19c) returned 0x1 [0056.722] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.722] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.723] GetFileType (hFile=0x19c) returned 0x1 [0056.723] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.723] GetFileType (hFile=0x19c) returned 0x1 [0056.723] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.723] ReadFile (in: hFile=0x19c, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.737] GetFileType (hFile=0x19c) returned 0x1 [0056.737] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.740] GetFileType (hFile=0x19c) returned 0x1 [0056.740] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.740] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.741] GetFileType (hFile=0x19c) returned 0x1 [0056.741] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.741] GetFileType (hFile=0x19c) returned 0x1 [0056.741] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.741] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.749] GetFileType (hFile=0x19c) returned 0x1 [0056.749] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.753] GetFileType (hFile=0x19c) returned 0x1 [0056.753] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.753] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.755] GetFileType (hFile=0x19c) returned 0x1 [0056.755] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.755] GetFileType (hFile=0x19c) returned 0x1 [0056.755] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.755] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.756] GetFileType (hFile=0x19c) returned 0x1 [0056.756] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.761] GetFileType (hFile=0x19c) returned 0x1 [0056.761] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.761] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.762] GetFileType (hFile=0x19c) returned 0x1 [0056.762] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.762] GetFileType (hFile=0x19c) returned 0x1 [0056.762] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.762] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.772] GetFileType (hFile=0x19c) returned 0x1 [0056.772] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.775] GetFileType (hFile=0x19c) returned 0x1 [0056.775] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.775] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.776] GetFileType (hFile=0x19c) returned 0x1 [0056.776] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.776] GetFileType (hFile=0x19c) returned 0x1 [0056.776] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.776] ReadFile (in: hFile=0x19c, lpBuffer=0x10f1c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.777] GetFileType (hFile=0x19c) returned 0x1 [0056.777] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.795] GetFileType (hFile=0x19c) returned 0x1 [0056.795] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.795] WriteFile (in: hFile=0x19c, lpBuffer=0x10f6c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.796] GetFileType (hFile=0x19c) returned 0x1 [0056.796] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.796] SetEvent (hEvent=0x158) returned 1 [0056.796] GetFileType (hFile=0x19c) returned 0x1 [0056.796] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.796] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.810] GetFileType (hFile=0x19c) returned 0x1 [0056.810] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.813] GetFileType (hFile=0x19c) returned 0x1 [0056.814] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.814] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.814] GetFileType (hFile=0x19c) returned 0x1 [0056.814] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.814] GetFileType (hFile=0x19c) returned 0x1 [0056.814] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.814] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.870] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.057] GetFileType (hFile=0x19c) returned 0x1 [0057.057] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.070] GetFileType (hFile=0x19c) returned 0x1 [0057.070] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.070] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.071] GetFileType (hFile=0x19c) returned 0x1 [0057.071] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.071] GetFileType (hFile=0x19c) returned 0x1 [0057.071] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.071] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.072] GetFileType (hFile=0x19c) returned 0x1 [0057.072] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.078] GetFileType (hFile=0x19c) returned 0x1 [0057.078] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.078] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.079] GetFileType (hFile=0x19c) returned 0x1 [0057.079] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.079] GetFileType (hFile=0x19c) returned 0x1 [0057.079] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.079] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.093] GetFileType (hFile=0x19c) returned 0x1 [0057.093] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.096] GetFileType (hFile=0x19c) returned 0x1 [0057.096] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.096] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.097] GetFileType (hFile=0x19c) returned 0x1 [0057.098] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.098] GetFileType (hFile=0x19c) returned 0x1 [0057.098] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.098] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.098] GetFileType (hFile=0x19c) returned 0x1 [0057.099] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.104] GetFileType (hFile=0x19c) returned 0x1 [0057.104] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.105] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.105] GetFileType (hFile=0x19c) returned 0x1 [0057.105] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.105] GetFileType (hFile=0x19c) returned 0x1 [0057.105] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.105] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.115] GetFileType (hFile=0x19c) returned 0x1 [0057.115] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.179] GetFileType (hFile=0x19c) returned 0x1 [0057.180] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.180] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.180] GetFileType (hFile=0x19c) returned 0x1 [0057.181] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.181] SetEvent (hEvent=0x158) returned 1 [0057.181] GetFileType (hFile=0x19c) returned 0x1 [0057.181] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.181] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.188] GetFileType (hFile=0x19c) returned 0x1 [0057.188] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.192] GetFileType (hFile=0x19c) returned 0x1 [0057.192] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.192] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.193] GetFileType (hFile=0x19c) returned 0x1 [0057.193] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.193] GetFileType (hFile=0x19c) returned 0x1 [0057.193] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.193] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.194] GetFileType (hFile=0x19c) returned 0x1 [0057.194] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.199] GetFileType (hFile=0x19c) returned 0x1 [0057.199] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.199] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.200] GetFileType (hFile=0x19c) returned 0x1 [0057.200] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.200] GetFileType (hFile=0x19c) returned 0x1 [0057.200] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.200] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.208] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.238] GetFileType (hFile=0x19c) returned 0x1 [0057.239] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.256] GetFileType (hFile=0x19c) returned 0x1 [0057.256] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.256] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.256] GetFileType (hFile=0x19c) returned 0x1 [0057.256] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.257] GetFileType (hFile=0x19c) returned 0x1 [0057.257] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.257] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.257] GetFileType (hFile=0x19c) returned 0x1 [0057.257] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.271] GetFileType (hFile=0x19c) returned 0x1 [0057.271] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.271] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.271] GetFileType (hFile=0x19c) returned 0x1 [0057.271] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.272] GetFileType (hFile=0x19c) returned 0x1 [0057.272] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.272] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.272] GetFileType (hFile=0x19c) returned 0x1 [0057.272] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.278] GetFileType (hFile=0x19c) returned 0x1 [0057.278] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.278] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.279] GetFileType (hFile=0x19c) returned 0x1 [0057.279] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.279] GetFileType (hFile=0x19c) returned 0x1 [0057.279] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.279] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.292] GetFileType (hFile=0x19c) returned 0x1 [0057.292] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.296] GetFileType (hFile=0x19c) returned 0x1 [0057.296] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.296] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.297] GetFileType (hFile=0x19c) returned 0x1 [0057.297] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.297] SetEvent (hEvent=0x158) returned 1 [0057.297] GetFileType (hFile=0x19c) returned 0x1 [0057.297] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.297] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.298] GetFileType (hFile=0x19c) returned 0x1 [0057.298] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.300] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0057.302] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.303] SetEvent (hEvent=0x158) returned 1 [0057.303] SetEvent (hEvent=0x170) returned 1 [0057.303] SetEvent (hEvent=0x12c) returned 1 [0057.303] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.306] SetEvent (hEvent=0x168) returned 1 [0057.307] SetEvent (hEvent=0x12c) returned 1 [0057.310] GetFileType (hFile=0x19c) returned 0x1 [0057.310] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.310] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.311] GetFileType (hFile=0x19c) returned 0x1 [0057.311] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.311] GetFileType (hFile=0x19c) returned 0x1 [0057.311] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.311] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.325] GetFileType (hFile=0x19c) returned 0x1 [0057.325] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.336] GetFileType (hFile=0x19c) returned 0x1 [0057.336] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.336] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.338] GetFileType (hFile=0x19c) returned 0x1 [0057.338] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.338] GetFileType (hFile=0x19c) returned 0x1 [0057.338] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.338] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.346] GetFileType (hFile=0x19c) returned 0x1 [0057.346] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.349] GetFileType (hFile=0x19c) returned 0x1 [0057.349] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.349] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.351] GetFileType (hFile=0x19c) returned 0x1 [0057.351] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.351] GetFileType (hFile=0x19c) returned 0x1 [0057.351] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.351] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.357] GetFileType (hFile=0x19c) returned 0x1 [0057.357] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.361] GetFileType (hFile=0x19c) returned 0x1 [0057.361] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.361] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.361] GetFileType (hFile=0x19c) returned 0x1 [0057.361] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.362] GetFileType (hFile=0x19c) returned 0x1 [0057.362] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.362] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.373] GetFileType (hFile=0x19c) returned 0x1 [0057.373] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.376] GetFileType (hFile=0x19c) returned 0x1 [0057.377] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.377] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.378] GetFileType (hFile=0x19c) returned 0x1 [0057.378] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.378] GetFileType (hFile=0x19c) returned 0x1 [0057.378] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.378] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.379] GetFileType (hFile=0x19c) returned 0x1 [0057.381] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.385] GetFileType (hFile=0x19c) returned 0x1 [0057.385] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.385] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.386] GetFileType (hFile=0x19c) returned 0x1 [0057.386] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.386] SetEvent (hEvent=0x170) returned 1 [0057.386] GetFileType (hFile=0x19c) returned 0x1 [0057.386] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.386] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.395] GetFileType (hFile=0x19c) returned 0x1 [0057.395] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.399] GetFileType (hFile=0x19c) returned 0x1 [0057.399] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.399] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.399] GetFileType (hFile=0x19c) returned 0x1 [0057.399] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.400] GetFileType (hFile=0x19c) returned 0x1 [0057.400] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.400] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.407] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.411] GetFileType (hFile=0x19c) returned 0x1 [0057.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.414] GetFileType (hFile=0x19c) returned 0x1 [0057.414] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.414] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.415] GetFileType (hFile=0x19c) returned 0x1 [0057.415] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.416] GetFileType (hFile=0x19c) returned 0x1 [0057.416] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.416] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.416] GetFileType (hFile=0x19c) returned 0x1 [0057.416] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.422] GetFileType (hFile=0x19c) returned 0x1 [0057.422] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.422] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.423] GetFileType (hFile=0x19c) returned 0x1 [0057.423] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.423] GetFileType (hFile=0x19c) returned 0x1 [0057.423] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.423] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.432] GetFileType (hFile=0x19c) returned 0x1 [0057.432] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.436] GetFileType (hFile=0x19c) returned 0x1 [0057.436] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.436] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.437] GetFileType (hFile=0x19c) returned 0x1 [0057.437] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.437] GetFileType (hFile=0x19c) returned 0x1 [0057.437] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.437] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.438] GetFileType (hFile=0x19c) returned 0x1 [0057.438] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.443] GetFileType (hFile=0x19c) returned 0x1 [0057.443] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.444] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.444] GetFileType (hFile=0x19c) returned 0x1 [0057.444] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.444] GetFileType (hFile=0x19c) returned 0x1 [0057.444] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.444] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.456] GetFileType (hFile=0x19c) returned 0x1 [0057.456] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.459] GetFileType (hFile=0x19c) returned 0x1 [0057.459] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.459] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.460] GetFileType (hFile=0x19c) returned 0x1 [0057.460] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.460] SetEvent (hEvent=0x170) returned 1 [0057.460] GetFileType (hFile=0x19c) returned 0x1 [0057.460] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.460] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.471] GetFileType (hFile=0x19c) returned 0x1 [0057.471] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.474] GetFileType (hFile=0x19c) returned 0x1 [0057.475] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.475] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.476] GetFileType (hFile=0x19c) returned 0x1 [0057.476] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.476] GetFileType (hFile=0x19c) returned 0x1 [0057.476] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.476] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.477] GetFileType (hFile=0x19c) returned 0x1 [0057.477] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.486] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.490] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.534] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.544] SetEvent (hEvent=0x170) returned 1 [0057.544] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.545] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.621] SetEvent (hEvent=0x158) returned 1 [0057.621] SetEvent (hEvent=0x160) returned 1 [0057.621] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.624] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.746] SetEvent (hEvent=0x158) returned 1 [0057.746] SetEvent (hEvent=0x12c) returned 1 [0057.746] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.747] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.799] SetEvent (hEvent=0x170) returned 1 [0057.799] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.812] SetEvent (hEvent=0x160) returned 1 [0057.812] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.880] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.886] SetEvent (hEvent=0x160) returned 1 [0057.886] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.890] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.982] SetEvent (hEvent=0x160) returned 1 [0057.982] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0057.983] SetEvent (hEvent=0x160) returned 1 [0057.983] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.034] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.079] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.103] SetEvent (hEvent=0x158) returned 1 [0058.103] SetEvent (hEvent=0x160) returned 1 [0058.103] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0058.116] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.116] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x0 [0058.119] SetEvent (hEvent=0x158) returned 1 [0058.119] SetEvent (hEvent=0x160) returned 1 [0058.119] SetEvent (hEvent=0x12c) returned 1 [0058.119] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.120] SetEvent (hEvent=0x168) returned 1 [0058.120] SetEvent (hEvent=0x12c) returned 1 [0058.120] SetEvent (hEvent=0x170) returned 1 [0058.120] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.135] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.175] SetEvent (hEvent=0x12c) returned 1 [0058.175] SetEvent (hEvent=0x160) returned 1 [0058.175] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0058.181] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.181] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x0 [0058.191] SetEvent (hEvent=0x12c) returned 1 [0058.191] SetEvent (hEvent=0x170) returned 1 [0058.191] SetEvent (hEvent=0x160) returned 1 [0058.191] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.236] SetEvent (hEvent=0x168) returned 1 [0058.236] SetEvent (hEvent=0x160) returned 1 [0058.236] GetFileType (hFile=0x19c) returned 0x1 [0058.236] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.236] WriteFile (in: hFile=0x19c, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.237] GetFileType (hFile=0x19c) returned 0x1 [0058.237] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.237] GetFileType (hFile=0x19c) returned 0x1 [0058.237] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.237] ReadFile (in: hFile=0x19c, lpBuffer=0x111ec000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.238] GetFileType (hFile=0x19c) returned 0x1 [0058.238] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.243] GetFileType (hFile=0x19c) returned 0x1 [0058.243] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.243] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.244] GetFileType (hFile=0x19c) returned 0x1 [0058.244] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.244] GetFileType (hFile=0x19c) returned 0x1 [0058.244] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.244] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.266] GetFileType (hFile=0x19c) returned 0x1 [0058.266] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.273] GetFileType (hFile=0x19c) returned 0x1 [0058.273] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.273] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.274] GetFileType (hFile=0x19c) returned 0x1 [0058.274] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.274] GetFileType (hFile=0x19c) returned 0x1 [0058.274] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.275] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.275] GetFileType (hFile=0x19c) returned 0x1 [0058.275] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.281] GetFileType (hFile=0x19c) returned 0x1 [0058.281] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.281] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.281] GetFileType (hFile=0x19c) returned 0x1 [0058.281] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.282] GetFileType (hFile=0x19c) returned 0x1 [0058.282] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.282] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.289] GetFileType (hFile=0x19c) returned 0x1 [0058.289] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.293] GetFileType (hFile=0x19c) returned 0x1 [0058.293] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.293] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.313] GetFileType (hFile=0x19c) returned 0x1 [0058.313] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.313] GetFileType (hFile=0x19c) returned 0x1 [0058.313] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.313] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.320] GetFileType (hFile=0x19c) returned 0x1 [0058.320] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.324] GetFileType (hFile=0x19c) returned 0x1 [0058.324] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.324] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.325] GetFileType (hFile=0x19c) returned 0x1 [0058.325] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.325] SetEvent (hEvent=0x170) returned 1 [0058.325] GetFileType (hFile=0x19c) returned 0x1 [0058.326] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.326] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.326] GetFileType (hFile=0x19c) returned 0x1 [0058.326] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.326] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0058.330] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.330] SetEvent (hEvent=0x170) returned 1 [0058.330] SetEvent (hEvent=0x160) returned 1 [0058.330] SetEvent (hEvent=0x12c) returned 1 [0058.330] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.331] SetEvent (hEvent=0x168) returned 1 [0058.331] SetEvent (hEvent=0x12c) returned 1 [0058.334] GetFileType (hFile=0x19c) returned 0x1 [0058.334] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.335] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.335] GetFileType (hFile=0x19c) returned 0x1 [0058.335] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.335] GetFileType (hFile=0x19c) returned 0x1 [0058.335] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.335] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.343] GetFileType (hFile=0x19c) returned 0x1 [0058.343] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.346] GetFileType (hFile=0x19c) returned 0x1 [0058.347] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.347] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.348] GetFileType (hFile=0x19c) returned 0x1 [0058.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.348] GetFileType (hFile=0x19c) returned 0x1 [0058.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.348] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.348] GetFileType (hFile=0x19c) returned 0x1 [0058.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.354] GetFileType (hFile=0x19c) returned 0x1 [0058.354] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.354] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.355] GetFileType (hFile=0x19c) returned 0x1 [0058.355] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.355] GetFileType (hFile=0x19c) returned 0x1 [0058.355] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.355] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.355] GetFileType (hFile=0x19c) returned 0x1 [0058.355] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.361] GetFileType (hFile=0x19c) returned 0x1 [0058.361] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.361] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.362] GetFileType (hFile=0x19c) returned 0x1 [0058.362] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.362] GetFileType (hFile=0x19c) returned 0x1 [0058.363] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.363] ReadFile (in: hFile=0x19c, lpBuffer=0x111ec000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.374] GetFileType (hFile=0x19c) returned 0x1 [0058.374] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.377] GetFileType (hFile=0x19c) returned 0x1 [0058.377] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.382] WriteFile (in: hFile=0x19c, lpBuffer=0x1123c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.388] GetFileType (hFile=0x19c) returned 0x1 [0058.388] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.388] GetFileType (hFile=0x19c) returned 0x1 [0058.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.405] ReadFile (in: hFile=0x19c, lpBuffer=0x1128c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.405] GetFileType (hFile=0x19c) returned 0x1 [0058.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.411] GetFileType (hFile=0x19c) returned 0x1 [0058.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.411] WriteFile (in: hFile=0x19c, lpBuffer=0x112dc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.412] GetFileType (hFile=0x19c) returned 0x1 [0058.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.412] SetEvent (hEvent=0x160) returned 1 [0058.412] GetFileType (hFile=0x19c) returned 0x1 [0058.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.412] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.422] GetFileType (hFile=0x19c) returned 0x1 [0058.422] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.425] GetFileType (hFile=0x19c) returned 0x1 [0058.425] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.426] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.426] GetFileType (hFile=0x19c) returned 0x1 [0058.426] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.426] GetFileType (hFile=0x19c) returned 0x1 [0058.426] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.427] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.436] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.439] GetFileType (hFile=0x19c) returned 0x1 [0058.439] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.443] GetFileType (hFile=0x19c) returned 0x1 [0058.443] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.443] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.445] GetFileType (hFile=0x19c) returned 0x1 [0058.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.445] GetFileType (hFile=0x19c) returned 0x1 [0058.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.445] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.445] GetFileType (hFile=0x19c) returned 0x1 [0058.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.451] GetFileType (hFile=0x19c) returned 0x1 [0058.451] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.451] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.451] GetFileType (hFile=0x19c) returned 0x1 [0058.451] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.452] GetFileType (hFile=0x19c) returned 0x1 [0058.452] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.452] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.460] GetFileType (hFile=0x19c) returned 0x1 [0058.460] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.463] GetFileType (hFile=0x19c) returned 0x1 [0058.464] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.464] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.465] GetFileType (hFile=0x19c) returned 0x1 [0058.465] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.465] GetFileType (hFile=0x19c) returned 0x1 [0058.465] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.465] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.465] GetFileType (hFile=0x19c) returned 0x1 [0058.465] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.471] GetFileType (hFile=0x19c) returned 0x1 [0058.471] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.471] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.471] GetFileType (hFile=0x19c) returned 0x1 [0058.471] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.472] GetFileType (hFile=0x19c) returned 0x1 [0058.472] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.472] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.479] GetFileType (hFile=0x19c) returned 0x1 [0058.479] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.482] GetFileType (hFile=0x19c) returned 0x1 [0058.482] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.482] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.483] GetFileType (hFile=0x19c) returned 0x1 [0058.483] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.483] SetEvent (hEvent=0x160) returned 1 [0058.483] GetFileType (hFile=0x19c) returned 0x1 [0058.483] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.483] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.491] GetFileType (hFile=0x19c) returned 0x1 [0058.491] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.494] GetFileType (hFile=0x19c) returned 0x1 [0058.494] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.494] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.496] GetFileType (hFile=0x19c) returned 0x1 [0058.496] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.496] GetFileType (hFile=0x19c) returned 0x1 [0058.496] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.496] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.496] GetFileType (hFile=0x19c) returned 0x1 [0058.496] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.502] GetFileType (hFile=0x19c) returned 0x1 [0058.502] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.502] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.503] GetFileType (hFile=0x19c) returned 0x1 [0058.503] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.503] GetFileType (hFile=0x19c) returned 0x1 [0058.503] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.503] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.514] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.517] GetFileType (hFile=0x19c) returned 0x1 [0058.517] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.521] GetFileType (hFile=0x19c) returned 0x1 [0058.521] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.521] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.522] GetFileType (hFile=0x19c) returned 0x1 [0058.522] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.522] GetFileType (hFile=0x19c) returned 0x1 [0058.522] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.522] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.523] GetFileType (hFile=0x19c) returned 0x1 [0058.523] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.534] GetFileType (hFile=0x19c) returned 0x1 [0058.534] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.534] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.535] GetFileType (hFile=0x19c) returned 0x1 [0058.535] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.535] GetFileType (hFile=0x19c) returned 0x1 [0058.535] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.535] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.544] GetFileType (hFile=0x19c) returned 0x1 [0058.544] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.547] GetFileType (hFile=0x19c) returned 0x1 [0058.547] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.547] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.548] GetFileType (hFile=0x19c) returned 0x1 [0058.548] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.548] GetFileType (hFile=0x19c) returned 0x1 [0058.548] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.548] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.555] GetFileType (hFile=0x19c) returned 0x1 [0058.555] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.559] GetFileType (hFile=0x19c) returned 0x1 [0058.559] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.559] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.560] GetFileType (hFile=0x19c) returned 0x1 [0058.560] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.560] SetEvent (hEvent=0x160) returned 1 [0058.560] GetFileType (hFile=0x19c) returned 0x1 [0058.560] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.560] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.561] GetFileType (hFile=0x19c) returned 0x1 [0058.561] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.563] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x0 [0058.564] SetEvent (hEvent=0x160) returned 1 [0058.564] SetEvent (hEvent=0x12c) returned 1 [0058.564] SetEvent (hEvent=0x170) returned 1 [0058.564] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.568] SetEvent (hEvent=0x168) returned 1 [0058.568] SetEvent (hEvent=0x170) returned 1 [0058.571] GetFileType (hFile=0x19c) returned 0x1 [0058.571] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.572] WriteFile (in: hFile=0x19c, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.572] GetFileType (hFile=0x19c) returned 0x1 [0058.572] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.572] GetFileType (hFile=0x19c) returned 0x1 [0058.572] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.572] ReadFile (in: hFile=0x19c, lpBuffer=0x111ec000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.581] GetFileType (hFile=0x19c) returned 0x1 [0058.581] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.585] GetFileType (hFile=0x19c) returned 0x1 [0058.585] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.585] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.585] GetFileType (hFile=0x19c) returned 0x1 [0058.585] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.586] GetFileType (hFile=0x19c) returned 0x1 [0058.586] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.586] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.586] GetFileType (hFile=0x19c) returned 0x1 [0058.586] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.592] GetFileType (hFile=0x19c) returned 0x1 [0058.592] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.592] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.592] GetFileType (hFile=0x19c) returned 0x1 [0058.592] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.592] GetFileType (hFile=0x19c) returned 0x1 [0058.593] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.593] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.593] GetFileType (hFile=0x19c) returned 0x1 [0058.593] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.598] GetFileType (hFile=0x19c) returned 0x1 [0058.598] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.598] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.599] GetFileType (hFile=0x19c) returned 0x1 [0058.599] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.599] GetFileType (hFile=0x19c) returned 0x1 [0058.599] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.599] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.610] GetFileType (hFile=0x19c) returned 0x1 [0058.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.614] GetFileType (hFile=0x19c) returned 0x1 [0058.614] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.614] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.615] GetFileType (hFile=0x19c) returned 0x1 [0058.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.615] GetFileType (hFile=0x19c) returned 0x1 [0058.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.615] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.616] GetFileType (hFile=0x19c) returned 0x1 [0058.616] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.621] GetFileType (hFile=0x19c) returned 0x1 [0058.621] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.621] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.622] GetFileType (hFile=0x19c) returned 0x1 [0058.622] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.622] SetEvent (hEvent=0x12c) returned 1 [0058.622] GetFileType (hFile=0x19c) returned 0x1 [0058.622] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.622] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.631] GetFileType (hFile=0x19c) returned 0x1 [0058.631] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.634] GetFileType (hFile=0x19c) returned 0x1 [0058.634] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.634] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.635] GetFileType (hFile=0x19c) returned 0x1 [0058.635] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.635] GetFileType (hFile=0x19c) returned 0x1 [0058.635] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.635] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.636] GetFileType (hFile=0x19c) returned 0x1 [0058.636] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.674] GetFileType (hFile=0x19c) returned 0x1 [0058.674] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.674] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.675] GetFileType (hFile=0x19c) returned 0x1 [0058.675] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.675] GetFileType (hFile=0x19c) returned 0x1 [0058.675] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.675] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.676] GetFileType (hFile=0x19c) returned 0x1 [0058.676] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.676] VirtualAlloc (lpAddress=0x11360000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x11360000 [0058.680] VirtualAlloc (lpAddress=0xfb1a000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0xfb1a000 [0058.686] GetFileType (hFile=0x19c) returned 0x1 [0058.686] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.686] WriteFile (in: hFile=0x19c, lpBuffer=0x1132c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1132c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.687] GetFileType (hFile=0x19c) returned 0x1 [0058.687] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.690] GetFileType (hFile=0x19c) returned 0x1 [0058.690] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.690] ReadFile (in: hFile=0x19c, lpBuffer=0x1137c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1137c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.701] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.706] GetFileType (hFile=0x19c) returned 0x1 [0058.706] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.713] GetFileType (hFile=0x19c) returned 0x1 [0058.713] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.713] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.714] GetFileType (hFile=0x19c) returned 0x1 [0058.714] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.714] GetFileType (hFile=0x19c) returned 0x1 [0058.714] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.714] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.714] GetFileType (hFile=0x19c) returned 0x1 [0058.714] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.723] GetFileType (hFile=0x19c) returned 0x1 [0058.723] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.723] WriteFile (in: hFile=0x19c, lpBuffer=0x113cc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x113cc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.724] GetFileType (hFile=0x19c) returned 0x1 [0058.724] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.724] GetFileType (hFile=0x19c) returned 0x1 [0058.724] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.724] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.732] GetFileType (hFile=0x19c) returned 0x1 [0058.732] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.736] GetFileType (hFile=0x19c) returned 0x1 [0058.736] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.736] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.737] GetFileType (hFile=0x19c) returned 0x1 [0058.737] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.737] SetEvent (hEvent=0x12c) returned 1 [0058.737] GetFileType (hFile=0x19c) returned 0x1 [0058.737] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.737] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.744] GetFileType (hFile=0x19c) returned 0x1 [0058.744] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.748] GetFileType (hFile=0x19c) returned 0x1 [0058.748] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.748] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.749] GetFileType (hFile=0x19c) returned 0x1 [0058.750] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.750] GetFileType (hFile=0x19c) returned 0x1 [0058.750] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.750] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.750] GetFileType (hFile=0x19c) returned 0x1 [0058.750] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.754] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.756] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.799] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.820] SetEvent (hEvent=0x12c) returned 1 [0058.820] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.821] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.904] SetEvent (hEvent=0x160) returned 1 [0058.904] SetEvent (hEvent=0x158) returned 1 [0058.904] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.907] SetEvent (hEvent=0x160) returned 1 [0058.907] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0058.923] SetEvent (hEvent=0x12c) returned 1 [0058.923] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.178] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.193] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.245] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.296] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.300] SetEvent (hEvent=0x158) returned 1 [0059.300] SetEvent (hEvent=0x12c) returned 1 [0059.300] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0059.301] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.301] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x0 [0059.307] SetEvent (hEvent=0x158) returned 1 [0059.307] SetEvent (hEvent=0x12c) returned 1 [0059.307] SetEvent (hEvent=0x170) returned 1 [0059.307] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.309] SetEvent (hEvent=0x168) returned 1 [0059.309] SetEvent (hEvent=0x170) returned 1 [0059.309] SetEvent (hEvent=0x160) returned 1 [0059.309] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.315] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.375] SetEvent (hEvent=0x160) returned 1 [0059.375] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.376] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.448] SetEvent (hEvent=0x160) returned 1 [0059.448] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.462] SetEvent (hEvent=0x12c) returned 1 [0059.463] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.643] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.644] SetEvent (hEvent=0x12c) returned 1 [0059.644] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.645] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.883] SetEvent (hEvent=0x170) returned 1 [0059.883] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.887] SetEvent (hEvent=0x170) returned 1 [0059.887] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.927] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0059.960] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0060.009] SetEvent (hEvent=0x160) returned 1 [0060.009] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0060.011] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0060.163] SetEvent (hEvent=0x158) returned 1 [0060.163] SetEvent (hEvent=0x170) returned 1 [0060.164] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0060.169] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0060.227] SetEvent (hEvent=0x160) returned 1 [0060.227] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0060.260] SetEvent (hEvent=0x12c) returned 1 [0060.260] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0060.320] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0060.374] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0060.389] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0060.645] SetEvent (hEvent=0x160) returned 1 [0060.645] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0060.646] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0064.524] SetEvent (hEvent=0x158) returned 1 [0064.524] SetEvent (hEvent=0x12c) returned 1 [0064.524] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0064.620] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0065.997] SetEvent (hEvent=0x160) returned 1 [0065.997] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0066.182] SetEvent (hEvent=0x170) returned 1 [0066.182] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0067.115] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0067.274] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0067.547] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0068.234] SetEvent (hEvent=0x158) returned 1 [0068.234] SetEvent (hEvent=0x170) returned 1 [0068.234] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0068.311] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0068.311] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0068.378] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0068.378] SetEvent (hEvent=0x158) returned 1 [0068.378] SetEvent (hEvent=0x170) returned 1 [0068.378] SetEvent (hEvent=0x12c) returned 1 [0068.378] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0068.539] SetEvent (hEvent=0x168) returned 1 [0068.539] SetEvent (hEvent=0x12c) returned 1 [0068.539] SetEvent (hEvent=0x160) returned 1 [0068.539] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0068.695] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0069.918] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0070.041] SetEvent (hEvent=0x160) returned 1 [0070.041] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0070.072] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0072.036] SetEvent (hEvent=0x160) returned 1 [0072.036] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0072.132] SetEvent (hEvent=0x170) returned 1 [0072.132] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0073.134] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0073.172] SetEvent (hEvent=0x170) returned 1 [0073.172] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0073.208] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0074.641] SetEvent (hEvent=0x158) returned 1 [0074.641] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0074.754] SetEvent (hEvent=0x158) returned 1 [0074.754] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0075.073] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0075.196] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0075.731] SetEvent (hEvent=0x170) returned 1 [0075.731] SetEvent (hEvent=0x158) returned 1 [0075.731] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0075.756] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0075.756] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0075.793] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0075.793] SetEvent (hEvent=0x170) returned 1 [0075.793] SetEvent (hEvent=0x158) returned 1 [0075.793] SetEvent (hEvent=0x12c) returned 1 [0075.793] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0075.814] SetEvent (hEvent=0x168) returned 1 [0075.814] SetEvent (hEvent=0x12c) returned 1 [0075.814] SetEvent (hEvent=0x160) returned 1 [0075.814] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0075.843] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0075.886] SetEvent (hEvent=0x12c) returned 1 [0075.886] SetEvent (hEvent=0x158) returned 1 [0075.886] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0075.905] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0075.905] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x1) returned 0x102 [0075.910] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0075.910] SetEvent (hEvent=0x12c) returned 1 [0075.910] SetEvent (hEvent=0x158) returned 1 [0075.910] SetEvent (hEvent=0x170) returned 1 [0075.910] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0075.914] SetEvent (hEvent=0x168) returned 1 [0075.914] SetEvent (hEvent=0x170) returned 1 [0075.914] SetEvent (hEvent=0x160) returned 1 [0075.914] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0075.964] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0076.412] SetEvent (hEvent=0x160) returned 1 [0076.412] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0076.416] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0076.902] SetEvent (hEvent=0x160) returned 1 [0076.902] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0076.945] SetEvent (hEvent=0x158) returned 1 [0076.945] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0077.258] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0077.284] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0077.440] SetEvent (hEvent=0x160) returned 1 [0077.440] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0077.443] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0077.688] SetEvent (hEvent=0x160) returned 1 [0077.688] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0077.724] SetEvent (hEvent=0x158) returned 1 [0077.725] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0078.695] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0078.728] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0079.363] SetEvent (hEvent=0x160) returned 1 [0079.363] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0079.379] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0079.576] SetEvent (hEvent=0x160) returned 1 [0079.576] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) returned 0x0 [0079.602] SetEvent (hEvent=0x158) returned 1 [0079.603] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xffffffff) Thread: id = 10 os_tid = 0x112c [0049.979] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x30feff58, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x30feff58*=0x154) returned 1 [0049.979] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x158 [0049.979] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0050.060] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0050.207] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0050.290] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0050.380] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0052.040] SetEvent (hEvent=0x138) returned 1 [0052.040] SetEvent (hEvent=0x12c) returned 1 [0052.040] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0052.044] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0052.045] SetEvent (hEvent=0x138) returned 1 [0052.045] SetEvent (hEvent=0x12c) returned 1 [0052.045] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0052.047] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0052.052] SetEvent (hEvent=0x160) returned 1 [0052.052] SetEvent (hEvent=0x138) returned 1 [0052.052] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0052.058] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0052.058] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0052.059] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0052.059] SetEvent (hEvent=0x160) returned 1 [0052.059] SetEvent (hEvent=0x138) returned 1 [0052.059] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0052.061] SetEvent (hEvent=0x138) returned 1 [0052.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x100000, lpStartAddress=0x4491f0, lpParameter=0x10c9c240, dwCreationFlags=0x10000, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164 [0052.061] CloseHandle (hObject=0x164) returned 1 [0052.062] SetEvent (hEvent=0x12c) returned 1 [0052.062] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0052.066] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0052.726] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0052.730] SetEvent (hEvent=0x170) returned 1 [0052.730] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0052.737] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0053.152] SetEvent (hEvent=0x170) returned 1 [0053.152] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0053.154] SetEvent (hEvent=0x170) returned 1 [0053.154] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0053.275] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0053.312] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0053.393] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0053.517] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0053.532] SetEvent (hEvent=0x12c) returned 1 [0053.532] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0053.534] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0053.613] SetEvent (hEvent=0x12c) returned 1 [0053.613] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0053.619] SetEvent (hEvent=0x170) returned 1 [0053.619] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0053.937] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0053.970] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.016] SetEvent (hEvent=0x12c) returned 1 [0054.017] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.020] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.273] SetEvent (hEvent=0x138) returned 1 [0054.273] SetEvent (hEvent=0x170) returned 1 [0054.273] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.287] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.462] SetEvent (hEvent=0x12c) returned 1 [0054.462] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.480] SetEvent (hEvent=0x138) returned 1 [0054.481] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.588] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.596] SetEvent (hEvent=0x138) returned 1 [0054.596] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.614] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.827] SetEvent (hEvent=0x138) returned 1 [0054.827] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.841] SetEvent (hEvent=0x138) returned 1 [0054.841] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.915] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.936] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.982] SetEvent (hEvent=0x160) returned 1 [0054.983] SetEvent (hEvent=0x138) returned 1 [0054.983] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0054.995] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.995] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x0 [0054.996] SetEvent (hEvent=0x160) returned 1 [0054.996] SetEvent (hEvent=0x138) returned 1 [0054.996] SetEvent (hEvent=0x170) returned 1 [0054.996] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0054.999] SetEvent (hEvent=0x168) returned 1 [0054.999] SetEvent (hEvent=0x170) returned 1 [0054.999] SetEvent (hEvent=0x12c) returned 1 [0054.999] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.024] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.058] SetEvent (hEvent=0x170) returned 1 [0055.058] SetEvent (hEvent=0x138) returned 1 [0055.058] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0055.081] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.081] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x0 [0055.083] SetEvent (hEvent=0x170) returned 1 [0055.083] SetEvent (hEvent=0x138) returned 1 [0055.083] SetEvent (hEvent=0x160) returned 1 [0055.083] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.085] SetEvent (hEvent=0x168) returned 1 [0055.085] SetEvent (hEvent=0x160) returned 1 [0055.085] SetEvent (hEvent=0x12c) returned 1 [0055.085] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.099] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.144] SetEvent (hEvent=0x12c) returned 1 [0055.145] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.145] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.236] SetEvent (hEvent=0x160) returned 1 [0055.236] SetEvent (hEvent=0x138) returned 1 [0055.236] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.242] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.348] SetEvent (hEvent=0x160) returned 1 [0055.348] SetEvent (hEvent=0x170) returned 1 [0055.348] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.354] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.406] SetEvent (hEvent=0x12c) returned 1 [0055.406] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.425] SetEvent (hEvent=0x138) returned 1 [0055.425] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.726] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.726] SetEvent (hEvent=0x138) returned 1 [0055.726] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.727] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.820] SetEvent (hEvent=0x138) returned 1 [0055.820] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.821] SetEvent (hEvent=0x138) returned 1 [0055.821] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.882] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.883] SetEvent (hEvent=0x138) returned 1 [0055.883] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0055.886] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.039] SetEvent (hEvent=0x138) returned 1 [0056.039] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.040] SetEvent (hEvent=0x138) returned 1 [0056.040] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.135] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.137] SetEvent (hEvent=0x138) returned 1 [0056.137] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.138] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.320] SetEvent (hEvent=0x170) returned 1 [0056.320] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.322] SetEvent (hEvent=0x170) returned 1 [0056.322] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.378] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.380] SetEvent (hEvent=0x170) returned 1 [0056.380] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.381] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.446] SetEvent (hEvent=0x170) returned 1 [0056.446] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.459] SetEvent (hEvent=0x138) returned 1 [0056.459] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.523] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.524] SetEvent (hEvent=0x138) returned 1 [0056.524] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.538] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.603] SetEvent (hEvent=0x138) returned 1 [0056.603] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.634] SetEvent (hEvent=0x12c) returned 1 [0056.634] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.717] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.749] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.810] SetEvent (hEvent=0x170) returned 1 [0056.810] SetEvent (hEvent=0x12c) returned 1 [0056.810] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0056.821] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.821] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0056.874] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.874] SetEvent (hEvent=0x170) returned 1 [0056.874] SetEvent (hEvent=0x12c) returned 1 [0056.874] SetEvent (hEvent=0x160) returned 1 [0056.874] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0056.949] SetEvent (hEvent=0x168) returned 1 [0056.949] SetEvent (hEvent=0x160) returned 1 [0056.949] SetEvent (hEvent=0x138) returned 1 [0056.949] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.092] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.188] SetEvent (hEvent=0x160) returned 1 [0057.188] SetEvent (hEvent=0x12c) returned 1 [0057.188] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0057.208] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.208] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0057.212] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.213] SetEvent (hEvent=0x160) returned 1 [0057.213] SetEvent (hEvent=0x12c) returned 1 [0057.213] SetEvent (hEvent=0x170) returned 1 [0057.213] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.226] SetEvent (hEvent=0x168) returned 1 [0057.226] SetEvent (hEvent=0x170) returned 1 [0057.226] SetEvent (hEvent=0x138) returned 1 [0057.226] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.269] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.302] SetEvent (hEvent=0x138) returned 1 [0057.302] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.305] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.406] SetEvent (hEvent=0x170) returned 1 [0057.406] SetEvent (hEvent=0x12c) returned 1 [0057.406] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.408] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.485] SetEvent (hEvent=0x170) returned 1 [0057.485] SetEvent (hEvent=0x160) returned 1 [0057.485] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.490] SetEvent (hEvent=0x170) returned 1 [0057.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.502] SetEvent (hEvent=0x138) returned 1 [0057.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.545] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.588] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.609] SetEvent (hEvent=0x160) returned 1 [0057.609] SetEvent (hEvent=0x138) returned 1 [0057.609] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0057.621] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.621] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0057.622] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.622] SetEvent (hEvent=0x160) returned 1 [0057.622] SetEvent (hEvent=0x138) returned 1 [0057.622] SetEvent (hEvent=0x12c) returned 1 [0057.623] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.625] SetEvent (hEvent=0x168) returned 1 [0057.625] SetEvent (hEvent=0x12c) returned 1 [0057.625] SetEvent (hEvent=0x170) returned 1 [0057.625] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.664] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.726] SetEvent (hEvent=0x12c) returned 1 [0057.726] SetEvent (hEvent=0x138) returned 1 [0057.726] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0057.746] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.746] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x0 [0057.747] SetEvent (hEvent=0x12c) returned 1 [0057.747] SetEvent (hEvent=0x138) returned 1 [0057.747] SetEvent (hEvent=0x160) returned 1 [0057.747] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.748] SetEvent (hEvent=0x168) returned 1 [0057.748] SetEvent (hEvent=0x160) returned 1 [0057.748] SetEvent (hEvent=0x170) returned 1 [0057.748] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.767] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.797] SetEvent (hEvent=0x170) returned 1 [0057.797] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.799] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.880] SetEvent (hEvent=0x160) returned 1 [0057.880] SetEvent (hEvent=0x138) returned 1 [0057.880] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.890] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.980] SetEvent (hEvent=0x160) returned 1 [0057.980] SetEvent (hEvent=0x12c) returned 1 [0057.980] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0057.982] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.034] SetEvent (hEvent=0x170) returned 1 [0058.034] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.043] SetEvent (hEvent=0x138) returned 1 [0058.043] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.116] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.117] SetEvent (hEvent=0x138) returned 1 [0058.117] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.120] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.438] SetEvent (hEvent=0x160) returned 1 [0058.438] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.439] SetEvent (hEvent=0x160) returned 1 [0058.439] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.513] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.515] SetEvent (hEvent=0x160) returned 1 [0058.515] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.515] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.704] SetEvent (hEvent=0x12c) returned 1 [0058.704] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.706] SetEvent (hEvent=0x12c) returned 1 [0058.706] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.753] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.755] SetEvent (hEvent=0x12c) returned 1 [0058.755] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.756] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.821] SetEvent (hEvent=0x12c) returned 1 [0058.821] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.833] SetEvent (hEvent=0x160) returned 1 [0058.833] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.904] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.904] SetEvent (hEvent=0x160) returned 1 [0058.904] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0058.907] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.179] SetEvent (hEvent=0x160) returned 1 [0059.179] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.183] SetEvent (hEvent=0x138) returned 1 [0059.183] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.301] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.306] SetEvent (hEvent=0x138) returned 1 [0059.306] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.309] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.645] SetEvent (hEvent=0x12c) returned 1 [0059.645] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.647] SetEvent (hEvent=0x12c) returned 1 [0059.647] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.720] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.764] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.791] SetEvent (hEvent=0x160) returned 1 [0059.791] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.792] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.881] SetEvent (hEvent=0x170) returned 1 [0059.881] SetEvent (hEvent=0x12c) returned 1 [0059.881] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.883] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.927] SetEvent (hEvent=0x160) returned 1 [0059.927] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0059.942] SetEvent (hEvent=0x138) returned 1 [0059.943] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.011] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.072] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.121] SetEvent (hEvent=0x170) returned 1 [0060.121] SetEvent (hEvent=0x138) returned 1 [0060.121] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0060.164] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.164] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0060.169] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.169] SetEvent (hEvent=0x170) returned 1 [0060.169] SetEvent (hEvent=0x138) returned 1 [0060.169] SetEvent (hEvent=0x12c) returned 1 [0060.169] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.169] SetEvent (hEvent=0x168) returned 1 [0060.170] SetEvent (hEvent=0x12c) returned 1 [0060.170] SetEvent (hEvent=0x160) returned 1 [0060.170] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.213] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.226] SetEvent (hEvent=0x160) returned 1 [0060.226] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.227] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.320] SetEvent (hEvent=0x160) returned 1 [0060.320] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.353] SetEvent (hEvent=0x138) returned 1 [0060.353] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.646] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.660] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0060.928] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0061.291] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0061.467] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0061.654] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0062.199] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0062.603] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0062.861] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0062.984] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0063.061] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0064.040] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0064.490] SetEvent (hEvent=0x12c) returned 1 [0064.490] SetEvent (hEvent=0x138) returned 1 [0064.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0064.524] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0064.524] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0064.573] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0064.573] SetEvent (hEvent=0x12c) returned 1 [0064.573] SetEvent (hEvent=0x138) returned 1 [0064.573] SetEvent (hEvent=0x170) returned 1 [0064.573] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0064.666] SetEvent (hEvent=0x168) returned 1 [0064.666] SetEvent (hEvent=0x170) returned 1 [0064.666] SetEvent (hEvent=0x160) returned 1 [0064.666] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0065.084] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0065.605] SetEvent (hEvent=0x160) returned 1 [0065.605] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0065.997] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0067.115] SetEvent (hEvent=0x160) returned 1 [0067.115] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0067.223] SetEvent (hEvent=0x138) returned 1 [0067.223] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0068.291] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0068.378] SetEvent (hEvent=0x138) returned 1 [0068.378] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0068.471] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0073.209] SetEvent (hEvent=0x170) returned 1 [0073.209] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0073.346] SetEvent (hEvent=0x170) returned 1 [0073.346] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0074.360] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0074.389] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0074.511] SetEvent (hEvent=0x12c) returned 1 [0074.514] SetEvent (hEvent=0x170) returned 1 [0074.514] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0074.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0074.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x1) returned 0x102 [0074.594] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0074.594] SetEvent (hEvent=0x12c) returned 1 [0074.594] SetEvent (hEvent=0x170) returned 1 [0074.594] SetEvent (hEvent=0x138) returned 1 [0074.594] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0074.688] SetEvent (hEvent=0x168) returned 1 [0074.688] SetEvent (hEvent=0x138) returned 1 [0074.688] SetEvent (hEvent=0x160) returned 1 [0074.688] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0074.861] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0075.037] SetEvent (hEvent=0x160) returned 1 [0075.037] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0075.073] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0075.756] SetEvent (hEvent=0x138) returned 1 [0075.756] SetEvent (hEvent=0x170) returned 1 [0075.756] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0075.805] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0075.905] SetEvent (hEvent=0x138) returned 1 [0075.905] SetEvent (hEvent=0x12c) returned 1 [0075.905] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0075.911] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0076.416] SetEvent (hEvent=0x160) returned 1 [0076.416] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0076.428] SetEvent (hEvent=0x170) returned 1 [0076.428] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0076.902] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0076.958] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0077.251] SetEvent (hEvent=0x160) returned 1 [0077.251] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0077.258] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0077.443] SetEvent (hEvent=0x160) returned 1 [0077.443] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0077.467] SetEvent (hEvent=0x170) returned 1 [0077.467] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0077.688] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0077.729] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0078.657] SetEvent (hEvent=0x160) returned 1 [0078.657] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0078.695] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0079.379] SetEvent (hEvent=0x160) returned 1 [0079.379] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0079.396] SetEvent (hEvent=0x170) returned 1 [0079.396] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0079.576] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0079.628] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0 [0080.263] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) Thread: id = 11 os_tid = 0x10fc [0049.982] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3112ff58, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3112ff58*=0x15c) returned 1 [0049.982] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x160 [0049.982] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0050.006] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0050.059] SetEvent (hEvent=0x158) returned 1 [0050.059] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0052.040] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0052.042] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0052.045] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0052.047] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0052.057] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0052.059] SetEvent (hEvent=0x158) returned 1 [0052.059] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0052.059] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0052.737] SetEvent (hEvent=0x170) returned 1 [0052.737] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0052.744] SetEvent (hEvent=0x170) returned 1 [0052.744] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0053.149] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0053.150] SetEvent (hEvent=0x170) returned 1 [0053.150] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0053.151] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0054.287] SetEvent (hEvent=0x138) returned 1 [0054.287] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0054.291] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0054.451] SetEvent (hEvent=0x12c) returned 1 [0054.451] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0054.462] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0054.589] SetEvent (hEvent=0x138) returned 1 [0054.589] SetEvent (hEvent=0x158) returned 1 [0054.589] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0054.614] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0054.823] SetEvent (hEvent=0x138) returned 1 [0054.823] SetEvent (hEvent=0x170) returned 1 [0054.823] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0054.827] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0054.915] SetEvent (hEvent=0x12c) returned 1 [0054.915] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0054.931] SetEvent (hEvent=0x158) returned 1 [0054.931] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0054.994] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0054.995] SetEvent (hEvent=0x158) returned 1 [0054.995] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0054.997] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.084] SetEvent (hEvent=0x158) returned 1 [0055.084] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.086] SetEvent (hEvent=0x158) returned 1 [0055.086] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.145] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.171] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.223] SetEvent (hEvent=0x138) returned 1 [0055.223] SetEvent (hEvent=0x158) returned 1 [0055.223] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0055.236] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.236] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0055.240] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.240] SetEvent (hEvent=0x138) returned 1 [0055.240] SetEvent (hEvent=0x158) returned 1 [0055.240] SetEvent (hEvent=0x170) returned 1 [0055.240] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.242] SetEvent (hEvent=0x168) returned 1 [0055.242] SetEvent (hEvent=0x170) returned 1 [0055.242] SetEvent (hEvent=0x12c) returned 1 [0055.242] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.257] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.318] SetEvent (hEvent=0x170) returned 1 [0055.318] SetEvent (hEvent=0x158) returned 1 [0055.318] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0055.348] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.348] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0055.349] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.349] SetEvent (hEvent=0x170) returned 1 [0055.349] SetEvent (hEvent=0x158) returned 1 [0055.349] SetEvent (hEvent=0x138) returned 1 [0055.349] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.355] SetEvent (hEvent=0x168) returned 1 [0055.355] SetEvent (hEvent=0x138) returned 1 [0055.355] SetEvent (hEvent=0x12c) returned 1 [0055.355] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.369] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.405] SetEvent (hEvent=0x12c) returned 1 [0055.405] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.405] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.726] SetEvent (hEvent=0x138) returned 1 [0055.726] SetEvent (hEvent=0x158) returned 1 [0055.726] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.727] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.818] SetEvent (hEvent=0x138) returned 1 [0055.818] SetEvent (hEvent=0x170) returned 1 [0055.818] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.820] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.882] SetEvent (hEvent=0x138) returned 1 [0055.882] SetEvent (hEvent=0x158) returned 1 [0055.883] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0055.886] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0056.034] SetEvent (hEvent=0x138) returned 1 [0056.034] SetEvent (hEvent=0x170) returned 1 [0056.034] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0056.039] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0056.135] SetEvent (hEvent=0x138) returned 1 [0056.135] SetEvent (hEvent=0x158) returned 1 [0056.135] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0056.138] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0056.203] SetEvent (hEvent=0x12c) returned 1 [0056.203] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0056.213] SetEvent (hEvent=0x170) returned 1 [0056.213] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0056.318] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0056.319] SetEvent (hEvent=0x170) returned 1 [0056.320] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0056.320] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0056.900] SetEvent (hEvent=0x158) returned 1 [0056.900] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.057] SetEvent (hEvent=0x158) returned 1 [0057.057] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.208] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.210] SetEvent (hEvent=0x158) returned 1 [0057.210] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.225] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.408] SetEvent (hEvent=0x170) returned 1 [0057.408] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.410] SetEvent (hEvent=0x170) returned 1 [0057.410] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.485] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.489] SetEvent (hEvent=0x170) returned 1 [0057.489] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.490] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.546] SetEvent (hEvent=0x170) returned 1 [0057.546] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.559] SetEvent (hEvent=0x158) returned 1 [0057.559] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.621] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.622] SetEvent (hEvent=0x158) returned 1 [0057.622] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.624] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.747] SetEvent (hEvent=0x158) returned 1 [0057.747] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.748] SetEvent (hEvent=0x158) returned 1 [0057.748] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.799] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.828] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.871] SetEvent (hEvent=0x138) returned 1 [0057.872] SetEvent (hEvent=0x158) returned 1 [0057.872] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0057.880] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.881] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0057.886] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.886] SetEvent (hEvent=0x138) returned 1 [0057.886] SetEvent (hEvent=0x158) returned 1 [0057.886] SetEvent (hEvent=0x12c) returned 1 [0057.886] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.890] SetEvent (hEvent=0x168) returned 1 [0057.890] SetEvent (hEvent=0x12c) returned 1 [0057.890] SetEvent (hEvent=0x170) returned 1 [0057.890] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.919] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.960] SetEvent (hEvent=0x12c) returned 1 [0057.960] SetEvent (hEvent=0x158) returned 1 [0057.960] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0057.980] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.980] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0057.981] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.981] SetEvent (hEvent=0x12c) returned 1 [0057.981] SetEvent (hEvent=0x158) returned 1 [0057.981] SetEvent (hEvent=0x138) returned 1 [0057.981] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.982] SetEvent (hEvent=0x168) returned 1 [0057.982] SetEvent (hEvent=0x138) returned 1 [0057.982] SetEvent (hEvent=0x170) returned 1 [0057.982] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0057.985] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.034] SetEvent (hEvent=0x170) returned 1 [0058.034] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.034] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.116] SetEvent (hEvent=0x138) returned 1 [0058.116] SetEvent (hEvent=0x158) returned 1 [0058.116] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.120] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.181] SetEvent (hEvent=0x138) returned 1 [0058.181] SetEvent (hEvent=0x12c) returned 1 [0058.181] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.218] SetEvent (hEvent=0x138) returned 1 [0058.218] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.262] SetEvent (hEvent=0x170) returned 1 [0058.263] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.330] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.362] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.422] SetEvent (hEvent=0x12c) returned 1 [0058.422] SetEvent (hEvent=0x170) returned 1 [0058.422] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0058.436] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.436] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0 [0058.438] SetEvent (hEvent=0x12c) returned 1 [0058.438] SetEvent (hEvent=0x170) returned 1 [0058.438] SetEvent (hEvent=0x158) returned 1 [0058.438] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.439] SetEvent (hEvent=0x168) returned 1 [0058.439] SetEvent (hEvent=0x158) returned 1 [0058.439] SetEvent (hEvent=0x138) returned 1 [0058.439] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.460] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.490] SetEvent (hEvent=0x158) returned 1 [0058.491] SetEvent (hEvent=0x170) returned 1 [0058.491] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0058.514] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.514] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0058.515] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.515] SetEvent (hEvent=0x158) returned 1 [0058.515] SetEvent (hEvent=0x170) returned 1 [0058.515] SetEvent (hEvent=0x12c) returned 1 [0058.515] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.516] SetEvent (hEvent=0x168) returned 1 [0058.516] SetEvent (hEvent=0x12c) returned 1 [0058.516] SetEvent (hEvent=0x138) returned 1 [0058.516] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.533] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.563] SetEvent (hEvent=0x138) returned 1 [0058.563] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.565] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.701] SetEvent (hEvent=0x12c) returned 1 [0058.701] SetEvent (hEvent=0x170) returned 1 [0058.701] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.704] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.753] SetEvent (hEvent=0x12c) returned 1 [0058.753] SetEvent (hEvent=0x158) returned 1 [0058.753] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.756] SetEvent (hEvent=0x12c) returned 1 [0058.756] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.772] SetEvent (hEvent=0x138) returned 1 [0058.772] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.821] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.853] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.887] SetEvent (hEvent=0x158) returned 1 [0058.887] SetEvent (hEvent=0x138) returned 1 [0058.887] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0058.904] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.904] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0 [0058.906] SetEvent (hEvent=0x158) returned 1 [0058.906] SetEvent (hEvent=0x12c) returned 1 [0058.906] SetEvent (hEvent=0x138) returned 1 [0058.906] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0058.908] SetEvent (hEvent=0x168) returned 1 [0058.908] SetEvent (hEvent=0x138) returned 1 [0058.909] GetFileType (hFile=0x19c) returned 0x1 [0058.909] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.909] WriteFile (in: hFile=0x19c, lpBuffer=0x1132c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1132c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.910] GetFileType (hFile=0x19c) returned 0x1 [0058.910] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.910] GetFileType (hFile=0x19c) returned 0x1 [0058.910] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.910] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.923] GetFileType (hFile=0x19c) returned 0x1 [0058.923] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.926] GetFileType (hFile=0x19c) returned 0x1 [0058.926] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.926] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.928] GetFileType (hFile=0x19c) returned 0x1 [0058.928] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.928] GetFileType (hFile=0x19c) returned 0x1 [0058.928] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.928] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.928] GetFileType (hFile=0x19c) returned 0x1 [0058.928] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.934] GetFileType (hFile=0x19c) returned 0x1 [0058.934] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.934] WriteFile (in: hFile=0x19c, lpBuffer=0x1137c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1137c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.934] GetFileType (hFile=0x19c) returned 0x1 [0058.934] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.934] GetFileType (hFile=0x19c) returned 0x1 [0058.935] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.935] ReadFile (in: hFile=0x19c, lpBuffer=0x113cc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x113cc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.944] GetFileType (hFile=0x19c) returned 0x1 [0058.944] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.948] GetFileType (hFile=0x19c) returned 0x1 [0058.948] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.948] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.949] GetFileType (hFile=0x19c) returned 0x1 [0058.949] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.949] GetFileType (hFile=0x19c) returned 0x1 [0058.949] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.949] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6600*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0058.957] GetFileType (hFile=0x19c) returned 0x1 [0058.957] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.958] GetFileType (hFile=0x19c) returned 0x1 [0058.958] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.958] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6800*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0058.958] GetFileType (hFile=0x19c) returned 0x1 [0058.958] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.958] GetFileType (hFile=0x19c) returned 0x1 [0058.958] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.958] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0058.958] GetFileType (hFile=0x19c) returned 0x1 [0058.958] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.958] CloseHandle (hObject=0x19c) returned 1 [0059.173] SetEvent (hEvent=0x168) returned 1 [0059.173] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.trapget"), dwFlags=0x1) returned 1 [0059.174] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200)) returned 1 [0059.175] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0059.175] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0059.175] GetFileType (hFile=0x19c) returned 0x1 [0059.175] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0059.175] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e080 | out: pbBuffer=0x1108e080) returned 1 [0059.175] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e090 | out: pbBuffer=0x1108e090) returned 1 [0059.175] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6001 | out: pbBuffer=0x10cb6001) returned 1 [0059.176] SetEvent (hEvent=0x12c) returned 1 [0059.176] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0059.178] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0059.178] SetEvent (hEvent=0x12c) returned 1 [0059.178] SetEvent (hEvent=0x138) returned 1 [0059.178] SetEvent (hEvent=0x158) returned 1 [0059.178] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0059.179] SetEvent (hEvent=0x168) returned 1 [0059.179] SetEvent (hEvent=0x158) returned 1 [0059.179] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6101 | out: pbBuffer=0x10cb6101) returned 1 [0059.180] GetFileType (hFile=0x19c) returned 0x1 [0059.180] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.180] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.185] GetFileType (hFile=0x19c) returned 0x1 [0059.185] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.191] GetFileType (hFile=0x19c) returned 0x1 [0059.191] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.191] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.192] GetFileType (hFile=0x19c) returned 0x1 [0059.192] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.192] GetFileType (hFile=0x19c) returned 0x1 [0059.192] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.192] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.197] GetFileType (hFile=0x19c) returned 0x1 [0059.197] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.201] GetFileType (hFile=0x19c) returned 0x1 [0059.201] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.201] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.201] GetFileType (hFile=0x19c) returned 0x1 [0059.201] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.201] GetFileType (hFile=0x19c) returned 0x1 [0059.201] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.202] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6000*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0059.203] GetFileType (hFile=0x19c) returned 0x1 [0059.203] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.203] GetFileType (hFile=0x19c) returned 0x1 [0059.203] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.204] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6200*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0059.204] GetFileType (hFile=0x19c) returned 0x1 [0059.204] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.204] GetFileType (hFile=0x19c) returned 0x1 [0059.204] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.204] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0059.204] GetFileType (hFile=0x19c) returned 0x1 [0059.204] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.204] CloseHandle (hObject=0x19c) returned 1 [0059.242] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.trapget"), dwFlags=0x1) returned 1 [0059.243] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x10cfa008 | out: lpFileInformation=0x10cfa008*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000)) returned 1 [0059.245] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0059.246] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0059.246] GetFileType (hFile=0x19c) returned 0x1 [0059.246] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0059.246] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e030 | out: pbBuffer=0x10c6e030) returned 1 [0059.246] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0059.246] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ce2001 | out: pbBuffer=0x10ce2001) returned 1 [0059.246] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ce2201 | out: pbBuffer=0x10ce2201) returned 1 [0059.247] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x11c000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x11c000, lpOverlapped=0x0) returned 1 [0059.274] GetFileType (hFile=0x19c) returned 0x1 [0059.274] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.274] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x11c000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11c000, lpOverlapped=0x10c89cbc) returned 1 [0059.280] GetFileType (hFile=0x19c) returned 0x1 [0059.280] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11c000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.280] GetFileType (hFile=0x19c) returned 0x1 [0059.280] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.280] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce2100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ce2100*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0059.280] GetFileType (hFile=0x19c) returned 0x1 [0059.280] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11c000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.280] GetFileType (hFile=0x19c) returned 0x1 [0059.280] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.280] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce2300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ce2300*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0059.280] GetFileType (hFile=0x19c) returned 0x1 [0059.280] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11c000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.281] GetFileType (hFile=0x19c) returned 0x1 [0059.281] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.281] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0059.281] GetFileType (hFile=0x19c) returned 0x1 [0059.281] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11c000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.281] CloseHandle (hObject=0x19c) returned 1 [0059.296] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.trapget"), dwFlags=0x1) returned 1 [0059.297] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0x10cd20f8 | out: lpFileInformation=0x10cd20f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1 [0059.297] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0059.297] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0059.297] GetFileType (hFile=0x19c) returned 0x1 [0059.297] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0059.297] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e0c0 | out: pbBuffer=0x1108e0c0) returned 1 [0059.297] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e0d0 | out: pbBuffer=0x1108e0d0) returned 1 [0059.297] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6301 | out: pbBuffer=0x10cb6301) returned 1 [0059.298] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6501 | out: pbBuffer=0x10cb6501) returned 1 [0059.298] SetEvent (hEvent=0x138) returned 1 [0059.298] GetFileType (hFile=0x19c) returned 0x1 [0059.298] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.298] ReadFile (in: hFile=0x19c, lpBuffer=0x10f48000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f48000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.303] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0059.310] GetFileType (hFile=0x19c) returned 0x1 [0059.310] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.313] GetFileType (hFile=0x19c) returned 0x1 [0059.313] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.313] WriteFile (in: hFile=0x19c, lpBuffer=0x10f98000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f98000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.314] GetFileType (hFile=0x19c) returned 0x1 [0059.314] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.314] GetFileType (hFile=0x19c) returned 0x1 [0059.314] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.314] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.315] GetFileType (hFile=0x19c) returned 0x1 [0059.315] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.319] GetFileType (hFile=0x19c) returned 0x1 [0059.319] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.319] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.320] GetFileType (hFile=0x19c) returned 0x1 [0059.320] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.320] GetFileType (hFile=0x19c) returned 0x1 [0059.320] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.320] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.332] GetFileType (hFile=0x19c) returned 0x1 [0059.332] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.336] GetFileType (hFile=0x19c) returned 0x1 [0059.336] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.336] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.336] GetFileType (hFile=0x19c) returned 0x1 [0059.336] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.337] GetFileType (hFile=0x19c) returned 0x1 [0059.337] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.337] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.343] GetFileType (hFile=0x19c) returned 0x1 [0059.343] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.348] GetFileType (hFile=0x19c) returned 0x1 [0059.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.348] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.349] GetFileType (hFile=0x19c) returned 0x1 [0059.349] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.349] GetFileType (hFile=0x19c) returned 0x1 [0059.349] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.349] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.350] GetFileType (hFile=0x19c) returned 0x1 [0059.350] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.355] GetFileType (hFile=0x19c) returned 0x1 [0059.355] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.355] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.356] GetFileType (hFile=0x19c) returned 0x1 [0059.356] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.356] GetFileType (hFile=0x19c) returned 0x1 [0059.356] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.356] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.366] GetFileType (hFile=0x19c) returned 0x1 [0059.366] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.370] GetFileType (hFile=0x19c) returned 0x1 [0059.370] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.370] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.371] GetFileType (hFile=0x19c) returned 0x1 [0059.371] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.371] SetEvent (hEvent=0x138) returned 1 [0059.371] GetFileType (hFile=0x19c) returned 0x1 [0059.371] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.371] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.374] GetFileType (hFile=0x19c) returned 0x1 [0059.374] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.374] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0059.375] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0059.375] SetEvent (hEvent=0x138) returned 1 [0059.375] SetEvent (hEvent=0x170) returned 1 [0059.375] SetEvent (hEvent=0x12c) returned 1 [0059.375] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0059.376] SetEvent (hEvent=0x168) returned 1 [0059.376] SetEvent (hEvent=0x12c) returned 1 [0059.380] GetFileType (hFile=0x19c) returned 0x1 [0059.380] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.380] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.380] GetFileType (hFile=0x19c) returned 0x1 [0059.381] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.381] GetFileType (hFile=0x19c) returned 0x1 [0059.381] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.381] ReadFile (in: hFile=0x19c, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.381] GetFileType (hFile=0x19c) returned 0x1 [0059.381] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.386] GetFileType (hFile=0x19c) returned 0x1 [0059.386] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.387] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.387] GetFileType (hFile=0x19c) returned 0x1 [0059.387] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.387] GetFileType (hFile=0x19c) returned 0x1 [0059.387] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.387] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.399] GetFileType (hFile=0x19c) returned 0x1 [0059.399] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.402] GetFileType (hFile=0x19c) returned 0x1 [0059.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.403] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.404] GetFileType (hFile=0x19c) returned 0x1 [0059.404] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.404] GetFileType (hFile=0x19c) returned 0x1 [0059.404] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.404] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.405] GetFileType (hFile=0x19c) returned 0x1 [0059.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.411] GetFileType (hFile=0x19c) returned 0x1 [0059.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.411] WriteFile (in: hFile=0x19c, lpBuffer=0x10f6c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.411] GetFileType (hFile=0x19c) returned 0x1 [0059.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.411] GetFileType (hFile=0x19c) returned 0x1 [0059.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.412] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.421] GetFileType (hFile=0x19c) returned 0x1 [0059.421] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.424] GetFileType (hFile=0x19c) returned 0x1 [0059.424] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.424] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.425] GetFileType (hFile=0x19c) returned 0x1 [0059.425] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.425] GetFileType (hFile=0x19c) returned 0x1 [0059.425] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.426] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.434] GetFileType (hFile=0x19c) returned 0x1 [0059.434] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.438] GetFileType (hFile=0x19c) returned 0x1 [0059.438] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.438] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.441] GetFileType (hFile=0x19c) returned 0x1 [0059.441] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.441] SetEvent (hEvent=0x170) returned 1 [0059.441] GetFileType (hFile=0x19c) returned 0x1 [0059.441] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.441] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.443] GetFileType (hFile=0x19c) returned 0x1 [0059.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.445] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0 [0059.446] SetEvent (hEvent=0x170) returned 1 [0059.446] SetEvent (hEvent=0x12c) returned 1 [0059.446] SetEvent (hEvent=0x138) returned 1 [0059.446] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0059.449] SetEvent (hEvent=0x168) returned 1 [0059.449] SetEvent (hEvent=0x138) returned 1 [0059.452] GetFileType (hFile=0x19c) returned 0x1 [0059.452] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.452] WriteFile (in: hFile=0x19c, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.452] GetFileType (hFile=0x19c) returned 0x1 [0059.453] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.453] GetFileType (hFile=0x19c) returned 0x1 [0059.453] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.453] ReadFile (in: hFile=0x19c, lpBuffer=0x10f1c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.463] GetFileType (hFile=0x19c) returned 0x1 [0059.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.466] GetFileType (hFile=0x19c) returned 0x1 [0059.466] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.466] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.468] GetFileType (hFile=0x19c) returned 0x1 [0059.468] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.468] GetFileType (hFile=0x19c) returned 0x1 [0059.468] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.468] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.468] GetFileType (hFile=0x19c) returned 0x1 [0059.468] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.474] GetFileType (hFile=0x19c) returned 0x1 [0059.474] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.474] WriteFile (in: hFile=0x19c, lpBuffer=0x10f6c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.474] GetFileType (hFile=0x19c) returned 0x1 [0059.474] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.475] GetFileType (hFile=0x19c) returned 0x1 [0059.475] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.475] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.483] GetFileType (hFile=0x19c) returned 0x1 [0059.483] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.486] GetFileType (hFile=0x19c) returned 0x1 [0059.486] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.486] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.487] GetFileType (hFile=0x19c) returned 0x1 [0059.487] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.528] GetFileType (hFile=0x19c) returned 0x1 [0059.528] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.528] ReadFile (in: hFile=0x19c, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.591] GetFileType (hFile=0x19c) returned 0x1 [0059.592] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.603] GetFileType (hFile=0x19c) returned 0x1 [0059.603] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.603] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.604] GetFileType (hFile=0x19c) returned 0x1 [0059.604] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.604] GetFileType (hFile=0x19c) returned 0x1 [0059.604] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.604] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.605] GetFileType (hFile=0x19c) returned 0x1 [0059.605] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.610] GetFileType (hFile=0x19c) returned 0x1 [0059.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.610] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.611] GetFileType (hFile=0x19c) returned 0x1 [0059.611] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.611] SetEvent (hEvent=0x12c) returned 1 [0059.611] GetFileType (hFile=0x19c) returned 0x1 [0059.611] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.611] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.623] GetFileType (hFile=0x19c) returned 0x1 [0059.623] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.626] GetFileType (hFile=0x19c) returned 0x1 [0059.626] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.626] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.627] GetFileType (hFile=0x19c) returned 0x1 [0059.627] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.628] GetFileType (hFile=0x19c) returned 0x1 [0059.628] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.628] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.628] GetFileType (hFile=0x19c) returned 0x1 [0059.629] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.634] GetFileType (hFile=0x19c) returned 0x1 [0059.634] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.634] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.635] GetFileType (hFile=0x19c) returned 0x1 [0059.635] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.635] GetFileType (hFile=0x19c) returned 0x1 [0059.635] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.635] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.644] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0059.647] GetFileType (hFile=0x19c) returned 0x1 [0059.647] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.651] GetFileType (hFile=0x19c) returned 0x1 [0059.651] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.651] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.652] GetFileType (hFile=0x19c) returned 0x1 [0059.652] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.652] GetFileType (hFile=0x19c) returned 0x1 [0059.652] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.652] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.659] GetFileType (hFile=0x19c) returned 0x1 [0059.659] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.663] GetFileType (hFile=0x19c) returned 0x1 [0059.663] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.663] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.664] GetFileType (hFile=0x19c) returned 0x1 [0059.664] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.664] GetFileType (hFile=0x19c) returned 0x1 [0059.664] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.664] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.664] GetFileType (hFile=0x19c) returned 0x1 [0059.664] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.670] GetFileType (hFile=0x19c) returned 0x1 [0059.670] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.670] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.670] GetFileType (hFile=0x19c) returned 0x1 [0059.670] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.671] GetFileType (hFile=0x19c) returned 0x1 [0059.671] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.671] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.678] GetFileType (hFile=0x19c) returned 0x1 [0059.678] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.682] GetFileType (hFile=0x19c) returned 0x1 [0059.682] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.682] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.683] GetFileType (hFile=0x19c) returned 0x1 [0059.683] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.716] SetEvent (hEvent=0x12c) returned 1 [0059.716] GetFileType (hFile=0x19c) returned 0x1 [0059.716] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.716] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.716] GetFileType (hFile=0x19c) returned 0x1 [0059.716] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.717] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0 [0059.717] SetEvent (hEvent=0x12c) returned 1 [0059.717] SetEvent (hEvent=0x158) returned 1 [0059.717] SetEvent (hEvent=0x170) returned 1 [0059.717] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0059.721] SetEvent (hEvent=0x168) returned 1 [0059.721] SetEvent (hEvent=0x170) returned 1 [0059.724] GetFileType (hFile=0x19c) returned 0x1 [0059.724] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.724] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.725] GetFileType (hFile=0x19c) returned 0x1 [0059.725] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.725] GetFileType (hFile=0x19c) returned 0x1 [0059.725] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.725] ReadFile (in: hFile=0x19c, lpBuffer=0x10f1c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.726] GetFileType (hFile=0x19c) returned 0x1 [0059.726] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.731] GetFileType (hFile=0x19c) returned 0x1 [0059.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.731] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.732] GetFileType (hFile=0x19c) returned 0x1 [0059.732] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.732] GetFileType (hFile=0x19c) returned 0x1 [0059.732] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.732] ReadFile (in: hFile=0x19c, lpBuffer=0x1132c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1132c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.744] GetFileType (hFile=0x19c) returned 0x1 [0059.744] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.748] GetFileType (hFile=0x19c) returned 0x1 [0059.748] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.748] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.749] GetFileType (hFile=0x19c) returned 0x1 [0059.749] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.749] GetFileType (hFile=0x19c) returned 0x1 [0059.749] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.749] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.750] GetFileType (hFile=0x19c) returned 0x1 [0059.750] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.755] GetFileType (hFile=0x19c) returned 0x1 [0059.755] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.755] WriteFile (in: hFile=0x19c, lpBuffer=0x1137c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1137c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.756] GetFileType (hFile=0x19c) returned 0x1 [0059.756] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.756] GetFileType (hFile=0x19c) returned 0x1 [0059.756] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.756] ReadFile (in: hFile=0x19c, lpBuffer=0x113cc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x113cc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.764] GetFileType (hFile=0x19c) returned 0x1 [0059.764] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.768] GetFileType (hFile=0x19c) returned 0x1 [0059.768] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.768] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.769] GetFileType (hFile=0x19c) returned 0x1 [0059.769] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.769] GetFileType (hFile=0x19c) returned 0x1 [0059.769] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.769] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.776] GetFileType (hFile=0x19c) returned 0x1 [0059.776] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.785] GetFileType (hFile=0x19c) returned 0x1 [0059.786] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.786] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.787] GetFileType (hFile=0x19c) returned 0x1 [0059.787] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.787] SetEvent (hEvent=0x158) returned 1 [0059.787] GetFileType (hFile=0x19c) returned 0x1 [0059.788] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.788] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.788] GetFileType (hFile=0x19c) returned 0x1 [0059.788] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.791] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0059.791] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0059.791] SetEvent (hEvent=0x158) returned 1 [0059.791] SetEvent (hEvent=0x170) returned 1 [0059.791] SetEvent (hEvent=0x12c) returned 1 [0059.791] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0059.792] SetEvent (hEvent=0x12c) returned 1 [0059.796] GetFileType (hFile=0x19c) returned 0x1 [0059.796] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.796] WriteFile (in: hFile=0x19c, lpBuffer=0x10f6c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.797] GetFileType (hFile=0x19c) returned 0x1 [0059.797] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.797] GetFileType (hFile=0x19c) returned 0x1 [0059.797] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.797] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.806] GetFileType (hFile=0x19c) returned 0x1 [0059.806] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.810] GetFileType (hFile=0x19c) returned 0x1 [0059.810] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.810] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.811] GetFileType (hFile=0x19c) returned 0x1 [0059.811] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.811] GetFileType (hFile=0x19c) returned 0x1 [0059.811] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.811] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.812] GetFileType (hFile=0x19c) returned 0x1 [0059.812] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.819] GetFileType (hFile=0x19c) returned 0x1 [0059.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.820] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.820] GetFileType (hFile=0x19c) returned 0x1 [0059.820] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.820] GetFileType (hFile=0x19c) returned 0x1 [0059.820] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.820] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.828] GetFileType (hFile=0x19c) returned 0x1 [0059.828] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.832] GetFileType (hFile=0x19c) returned 0x1 [0059.832] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.832] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.833] GetFileType (hFile=0x19c) returned 0x1 [0059.833] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.833] GetFileType (hFile=0x19c) returned 0x1 [0059.833] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.833] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.839] GetFileType (hFile=0x19c) returned 0x1 [0059.840] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.843] GetFileType (hFile=0x19c) returned 0x1 [0059.843] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.843] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.844] GetFileType (hFile=0x19c) returned 0x1 [0059.844] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.844] GetFileType (hFile=0x19c) returned 0x1 [0059.844] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.844] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.845] GetFileType (hFile=0x19c) returned 0x1 [0059.845] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.851] GetFileType (hFile=0x19c) returned 0x1 [0059.851] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.851] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.851] GetFileType (hFile=0x19c) returned 0x1 [0059.852] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.852] SetEvent (hEvent=0x170) returned 1 [0059.852] GetFileType (hFile=0x19c) returned 0x1 [0059.852] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.852] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.861] GetFileType (hFile=0x19c) returned 0x1 [0059.861] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.864] GetFileType (hFile=0x19c) returned 0x1 [0059.865] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.865] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.866] GetFileType (hFile=0x19c) returned 0x1 [0059.866] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.866] GetFileType (hFile=0x19c) returned 0x1 [0059.866] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.866] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.866] GetFileType (hFile=0x19c) returned 0x1 [0059.866] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.872] GetFileType (hFile=0x19c) returned 0x1 [0059.872] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.873] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.873] GetFileType (hFile=0x19c) returned 0x1 [0059.873] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.873] GetFileType (hFile=0x19c) returned 0x1 [0059.873] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.873] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.881] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0059.887] GetFileType (hFile=0x19c) returned 0x1 [0059.887] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.891] GetFileType (hFile=0x19c) returned 0x1 [0059.891] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.891] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.891] GetFileType (hFile=0x19c) returned 0x1 [0059.891] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.892] GetFileType (hFile=0x19c) returned 0x1 [0059.892] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.892] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.899] GetFileType (hFile=0x19c) returned 0x1 [0059.899] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.902] GetFileType (hFile=0x19c) returned 0x1 [0059.902] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.903] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.904] GetFileType (hFile=0x19c) returned 0x1 [0059.904] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.904] GetFileType (hFile=0x19c) returned 0x1 [0059.904] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.904] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.904] GetFileType (hFile=0x19c) returned 0x1 [0059.904] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.910] GetFileType (hFile=0x19c) returned 0x1 [0059.910] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.910] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.911] GetFileType (hFile=0x19c) returned 0x1 [0059.911] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.911] GetFileType (hFile=0x19c) returned 0x1 [0059.911] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.911] ReadFile (in: hFile=0x19c, lpBuffer=0x1132c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1132c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.918] GetFileType (hFile=0x19c) returned 0x1 [0059.918] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.922] GetFileType (hFile=0x19c) returned 0x1 [0059.922] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.922] WriteFile (in: hFile=0x19c, lpBuffer=0x1137c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1137c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.923] GetFileType (hFile=0x19c) returned 0x1 [0059.923] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.923] SetEvent (hEvent=0x170) returned 1 [0059.923] GetFileType (hFile=0x19c) returned 0x1 [0059.923] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.923] ReadFile (in: hFile=0x19c, lpBuffer=0x113cc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x113cc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.924] GetFileType (hFile=0x19c) returned 0x1 [0059.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.924] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0059.927] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0059.927] SetEvent (hEvent=0x170) returned 1 [0059.927] SetEvent (hEvent=0x138) returned 1 [0059.927] SetEvent (hEvent=0x158) returned 1 [0059.927] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0059.928] SetEvent (hEvent=0x168) returned 1 [0059.928] SetEvent (hEvent=0x158) returned 1 [0059.931] GetFileType (hFile=0x19c) returned 0x1 [0059.931] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.931] WriteFile (in: hFile=0x19c, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.932] GetFileType (hFile=0x19c) returned 0x1 [0059.932] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.932] GetFileType (hFile=0x19c) returned 0x1 [0059.932] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.932] ReadFile (in: hFile=0x19c, lpBuffer=0x111ec000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.943] GetFileType (hFile=0x19c) returned 0x1 [0059.943] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.946] GetFileType (hFile=0x19c) returned 0x1 [0059.946] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.946] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.947] GetFileType (hFile=0x19c) returned 0x1 [0059.947] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.947] GetFileType (hFile=0x19c) returned 0x1 [0059.947] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.947] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.955] GetFileType (hFile=0x19c) returned 0x1 [0059.955] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.959] GetFileType (hFile=0x19c) returned 0x1 [0059.959] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.959] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.961] GetFileType (hFile=0x19c) returned 0x1 [0059.961] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.961] GetFileType (hFile=0x19c) returned 0x1 [0059.962] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.962] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.965] GetFileType (hFile=0x19c) returned 0x1 [0059.965] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.970] GetFileType (hFile=0x19c) returned 0x1 [0059.970] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.970] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.976] GetFileType (hFile=0x19c) returned 0x1 [0059.976] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.976] GetFileType (hFile=0x19c) returned 0x1 [0059.976] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.976] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.986] GetFileType (hFile=0x19c) returned 0x1 [0059.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.990] GetFileType (hFile=0x19c) returned 0x1 [0059.990] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.990] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.994] GetFileType (hFile=0x19c) returned 0x1 [0059.994] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.994] GetFileType (hFile=0x19c) returned 0x1 [0059.994] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0059.994] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0059.998] GetFileType (hFile=0x19c) returned 0x1 [0059.998] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.001] GetFileType (hFile=0x19c) returned 0x1 [0060.001] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.001] WriteFile (in: hFile=0x19c, lpBuffer=0x1132c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1132c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.005] GetFileType (hFile=0x19c) returned 0x1 [0060.005] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.005] SetEvent (hEvent=0x138) returned 1 [0060.005] GetFileType (hFile=0x19c) returned 0x1 [0060.005] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.005] ReadFile (in: hFile=0x19c, lpBuffer=0x1137c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1137c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.008] GetFileType (hFile=0x19c) returned 0x1 [0060.008] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.009] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0 [0060.010] SetEvent (hEvent=0x138) returned 1 [0060.010] SetEvent (hEvent=0x158) returned 1 [0060.010] SetEvent (hEvent=0x170) returned 1 [0060.010] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0060.011] SetEvent (hEvent=0x168) returned 1 [0060.011] SetEvent (hEvent=0x170) returned 1 [0060.015] GetFileType (hFile=0x19c) returned 0x1 [0060.015] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.015] WriteFile (in: hFile=0x19c, lpBuffer=0x113cc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x113cc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.025] GetFileType (hFile=0x19c) returned 0x1 [0060.025] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.025] GetFileType (hFile=0x19c) returned 0x1 [0060.025] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.026] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.036] GetFileType (hFile=0x19c) returned 0x1 [0060.036] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.041] GetFileType (hFile=0x19c) returned 0x1 [0060.041] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.042] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.046] GetFileType (hFile=0x19c) returned 0x1 [0060.046] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.046] GetFileType (hFile=0x19c) returned 0x1 [0060.046] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.046] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.050] GetFileType (hFile=0x19c) returned 0x1 [0060.050] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.053] GetFileType (hFile=0x19c) returned 0x1 [0060.053] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.053] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.057] GetFileType (hFile=0x19c) returned 0x1 [0060.057] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.057] GetFileType (hFile=0x19c) returned 0x1 [0060.057] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.057] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.069] GetFileType (hFile=0x19c) returned 0x1 [0060.069] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.073] GetFileType (hFile=0x19c) returned 0x1 [0060.073] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.073] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.077] GetFileType (hFile=0x19c) returned 0x1 [0060.077] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.077] GetFileType (hFile=0x19c) returned 0x1 [0060.077] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.077] ReadFile (in: hFile=0x19c, lpBuffer=0x111ec000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.090] GetFileType (hFile=0x19c) returned 0x1 [0060.090] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.094] GetFileType (hFile=0x19c) returned 0x1 [0060.094] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.094] WriteFile (in: hFile=0x19c, lpBuffer=0x1123c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.098] GetFileType (hFile=0x19c) returned 0x1 [0060.098] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.099] GetFileType (hFile=0x19c) returned 0x1 [0060.099] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.099] ReadFile (in: hFile=0x19c, lpBuffer=0x1128c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.103] GetFileType (hFile=0x19c) returned 0x1 [0060.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.106] GetFileType (hFile=0x19c) returned 0x1 [0060.106] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.107] WriteFile (in: hFile=0x19c, lpBuffer=0x112dc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.110] GetFileType (hFile=0x19c) returned 0x1 [0060.110] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.110] SetEvent (hEvent=0x158) returned 1 [0060.110] GetFileType (hFile=0x19c) returned 0x1 [0060.110] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.110] ReadFile (in: hFile=0x19c, lpBuffer=0x1132c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1132c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.124] GetFileType (hFile=0x19c) returned 0x1 [0060.124] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.128] GetFileType (hFile=0x19c) returned 0x1 [0060.128] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.128] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.132] GetFileType (hFile=0x19c) returned 0x1 [0060.132] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.132] GetFileType (hFile=0x19c) returned 0x1 [0060.132] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.132] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.136] GetFileType (hFile=0x19c) returned 0x1 [0060.137] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.140] GetFileType (hFile=0x19c) returned 0x1 [0060.140] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.140] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.143] GetFileType (hFile=0x19c) returned 0x1 [0060.144] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.144] GetFileType (hFile=0x19c) returned 0x1 [0060.144] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.144] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.157] GetFileType (hFile=0x19c) returned 0x1 [0060.158] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.162] GetFileType (hFile=0x19c) returned 0x1 [0060.162] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.162] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.168] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0060.170] GetFileType (hFile=0x19c) returned 0x1 [0060.170] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.170] GetFileType (hFile=0x19c) returned 0x1 [0060.170] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.170] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.183] GetFileType (hFile=0x19c) returned 0x1 [0060.183] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.186] GetFileType (hFile=0x19c) returned 0x1 [0060.186] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.186] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.191] GetFileType (hFile=0x19c) returned 0x1 [0060.191] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.191] GetFileType (hFile=0x19c) returned 0x1 [0060.191] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.191] ReadFile (in: hFile=0x19c, lpBuffer=0x10f1c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.195] GetFileType (hFile=0x19c) returned 0x1 [0060.195] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.198] GetFileType (hFile=0x19c) returned 0x1 [0060.198] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.198] WriteFile (in: hFile=0x19c, lpBuffer=0x10f6c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.202] GetFileType (hFile=0x19c) returned 0x1 [0060.202] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.202] GetFileType (hFile=0x19c) returned 0x1 [0060.202] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.202] ReadFile (in: hFile=0x19c, lpBuffer=0x1137c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1137c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.214] GetFileType (hFile=0x19c) returned 0x1 [0060.214] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.217] GetFileType (hFile=0x19c) returned 0x1 [0060.217] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.217] WriteFile (in: hFile=0x19c, lpBuffer=0x113cc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x113cc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.221] GetFileType (hFile=0x19c) returned 0x1 [0060.221] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.221] SetEvent (hEvent=0x158) returned 1 [0060.221] GetFileType (hFile=0x19c) returned 0x1 [0060.221] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.222] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.226] GetFileType (hFile=0x19c) returned 0x1 [0060.226] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.226] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0 [0060.227] SetEvent (hEvent=0x158) returned 1 [0060.227] SetEvent (hEvent=0x12c) returned 1 [0060.227] SetEvent (hEvent=0x138) returned 1 [0060.227] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0060.228] SetEvent (hEvent=0x168) returned 1 [0060.228] SetEvent (hEvent=0x138) returned 1 [0060.232] GetFileType (hFile=0x19c) returned 0x1 [0060.232] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.232] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.235] GetFileType (hFile=0x19c) returned 0x1 [0060.235] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.235] GetFileType (hFile=0x19c) returned 0x1 [0060.235] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.235] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.246] GetFileType (hFile=0x19c) returned 0x1 [0060.246] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.250] GetFileType (hFile=0x19c) returned 0x1 [0060.250] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.250] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.255] GetFileType (hFile=0x19c) returned 0x1 [0060.255] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.255] GetFileType (hFile=0x19c) returned 0x1 [0060.255] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.255] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.266] GetFileType (hFile=0x19c) returned 0x1 [0060.266] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.269] GetFileType (hFile=0x19c) returned 0x1 [0060.269] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.269] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.273] GetFileType (hFile=0x19c) returned 0x1 [0060.273] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.273] GetFileType (hFile=0x19c) returned 0x1 [0060.273] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.273] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.277] GetFileType (hFile=0x19c) returned 0x1 [0060.277] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.280] GetFileType (hFile=0x19c) returned 0x1 [0060.280] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.281] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.284] GetFileType (hFile=0x19c) returned 0x1 [0060.284] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.284] GetFileType (hFile=0x19c) returned 0x1 [0060.284] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.284] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.296] GetFileType (hFile=0x19c) returned 0x1 [0060.296] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.300] GetFileType (hFile=0x19c) returned 0x1 [0060.300] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.300] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.304] GetFileType (hFile=0x19c) returned 0x1 [0060.304] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.304] GetFileType (hFile=0x19c) returned 0x1 [0060.304] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.304] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.308] GetFileType (hFile=0x19c) returned 0x1 [0060.308] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.312] GetFileType (hFile=0x19c) returned 0x1 [0060.312] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.312] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.315] GetFileType (hFile=0x19c) returned 0x1 [0060.315] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.315] SetEvent (hEvent=0x12c) returned 1 [0060.315] GetFileType (hFile=0x19c) returned 0x1 [0060.315] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.315] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.318] GetFileType (hFile=0x19c) returned 0x1 [0060.318] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.318] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0060.320] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0060.320] SetEvent (hEvent=0x12c) returned 1 [0060.320] SetEvent (hEvent=0x138) returned 1 [0060.320] SetEvent (hEvent=0x158) returned 1 [0060.320] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0060.321] SetEvent (hEvent=0x168) returned 1 [0060.321] SetEvent (hEvent=0x158) returned 1 [0060.324] GetFileType (hFile=0x19c) returned 0x1 [0060.324] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.324] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0060.335] GetFileType (hFile=0x19c) returned 0x1 [0060.335] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.335] GetFileType (hFile=0x19c) returned 0x1 [0060.335] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.335] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6400*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0060.343] GetFileType (hFile=0x19c) returned 0x1 [0060.343] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.343] GetFileType (hFile=0x19c) returned 0x1 [0060.343] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.344] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6600*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0060.344] GetFileType (hFile=0x19c) returned 0x1 [0060.344] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.344] GetFileType (hFile=0x19c) returned 0x1 [0060.344] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.344] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0060.344] GetFileType (hFile=0x19c) returned 0x1 [0060.344] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.344] CloseHandle (hObject=0x19c) returned 1 [0060.547] SetEvent (hEvent=0x168) returned 1 [0060.547] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.trapget"), dwFlags=0x1) returned 1 [0060.548] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x10cfa008 | out: lpFileInformation=0x10cfa008*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000)) returned 1 [0060.549] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.549] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0060.549] GetFileType (hFile=0x19c) returned 0x1 [0060.549] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0060.549] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e030 | out: pbBuffer=0x1108e030) returned 1 [0060.549] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e040 | out: pbBuffer=0x1108e040) returned 1 [0060.550] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6001 | out: pbBuffer=0x10cb6001) returned 1 [0060.550] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6201 | out: pbBuffer=0x10cb6201) returned 1 [0060.550] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0xd5000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0xd5000, lpOverlapped=0x0) returned 1 [0060.569] GetFileType (hFile=0x19c) returned 0x1 [0060.569] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.569] WriteFile (in: hFile=0x19c, lpBuffer=0x10e62000*, nNumberOfBytesToWrite=0xd5000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e62000*, lpNumberOfBytesWritten=0x10c89cb8*=0xd5000, lpOverlapped=0x10c89cbc) returned 1 [0060.571] GetFileType (hFile=0x19c) returned 0x1 [0060.571] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd5000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.571] GetFileType (hFile=0x19c) returned 0x1 [0060.571] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.571] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6100*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0060.571] GetFileType (hFile=0x19c) returned 0x1 [0060.571] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd5000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.571] GetFileType (hFile=0x19c) returned 0x1 [0060.571] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.571] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6300*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0060.572] GetFileType (hFile=0x19c) returned 0x1 [0060.572] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd5000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.572] GetFileType (hFile=0x19c) returned 0x1 [0060.572] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.572] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0060.572] GetFileType (hFile=0x19c) returned 0x1 [0060.572] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd5000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.572] CloseHandle (hObject=0x19c) returned 1 [0060.583] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.trapget"), dwFlags=0x1) returned 1 [0060.584] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x10cfa148 | out: lpFileInformation=0x10cfa148*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000)) returned 1 [0060.584] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.584] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0060.585] GetFileType (hFile=0x19c) returned 0x1 [0060.585] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0060.585] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e130 | out: pbBuffer=0x1108e130) returned 1 [0060.585] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e140 | out: pbBuffer=0x1108e140) returned 1 [0060.585] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6501 | out: pbBuffer=0x10cb6501) returned 1 [0060.585] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6801 | out: pbBuffer=0x10cb6801) returned 1 [0060.585] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x79000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x79000, lpOverlapped=0x0) returned 1 [0060.595] GetFileType (hFile=0x19c) returned 0x1 [0060.595] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.595] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x79000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x79000, lpOverlapped=0x10c89cbc) returned 1 [0060.596] GetFileType (hFile=0x19c) returned 0x1 [0060.596] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x79000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.596] GetFileType (hFile=0x19c) returned 0x1 [0060.596] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.596] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6700*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0060.596] GetFileType (hFile=0x19c) returned 0x1 [0060.596] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x79000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.596] GetFileType (hFile=0x19c) returned 0x1 [0060.596] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.597] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6900*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0060.597] GetFileType (hFile=0x19c) returned 0x1 [0060.597] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x79000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.597] GetFileType (hFile=0x19c) returned 0x1 [0060.597] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.597] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0060.597] GetFileType (hFile=0x19c) returned 0x1 [0060.597] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x79000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.597] CloseHandle (hObject=0x19c) returned 1 [0060.604] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.trapget"), dwFlags=0x1) returned 1 [0060.604] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cfa288 | out: lpFileInformation=0x10cfa288*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420)) returned 1 [0060.604] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x10cfa2d8 | out: lpFileInformation=0x10cfa2d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0060.605] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.605] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0060.605] GetFileType (hFile=0x19c) returned 0x1 [0060.605] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0060.605] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e220 | out: pbBuffer=0x1108e220) returned 1 [0060.605] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e230 | out: pbBuffer=0x1108e230) returned 1 [0060.605] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6a01 | out: pbBuffer=0x10cb6a01) returned 1 [0060.605] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6c01 | out: pbBuffer=0x10cb6c01) returned 1 [0060.606] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x19688, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x19688, lpOverlapped=0x0) returned 1 [0060.609] GetFileType (hFile=0x19c) returned 0x1 [0060.609] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.609] WriteFile (in: hFile=0x19c, lpBuffer=0x11116000*, nNumberOfBytesToWrite=0x19688, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11116000*, lpNumberOfBytesWritten=0x10c89cb8*=0x19688, lpOverlapped=0x10c89cbc) returned 1 [0060.609] GetFileType (hFile=0x19c) returned 0x1 [0060.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x19688, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.610] GetFileType (hFile=0x19c) returned 0x1 [0060.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.610] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6b00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0060.610] GetFileType (hFile=0x19c) returned 0x1 [0060.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x19688, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.610] GetFileType (hFile=0x19c) returned 0x1 [0060.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.610] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6d00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0060.610] GetFileType (hFile=0x19c) returned 0x1 [0060.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x19688, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.610] GetFileType (hFile=0x19c) returned 0x1 [0060.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.610] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0060.610] GetFileType (hFile=0x19c) returned 0x1 [0060.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x19688, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.610] CloseHandle (hObject=0x19c) returned 1 [0060.612] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\watermark.bmp.TRAPGET" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.trapget"), dwFlags=0x1) returned 1 [0060.613] GetFileAttributesExW (in: lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x10cfa418 | out: lpFileInformation=0x10cfa418*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0060.614] CreateFileW (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.614] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d2c | out: lpMode=0x10c89d2c) returned 0 [0060.615] GetFileType (hFile=0x19c) returned 0x1 [0060.615] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89d5c | out: lpFileInformation=0x10c89d5c) returned 1 [0060.615] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e330 | out: pbBuffer=0x1108e330) returned 1 [0060.615] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e340 | out: pbBuffer=0x1108e340) returned 1 [0060.615] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6e01 | out: pbBuffer=0x10cb6e01) returned 1 [0060.615] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb7001 | out: pbBuffer=0x10cb7001) returned 1 [0060.615] ReadFile (in: hFile=0x19c, lpBuffer=0x1108e408, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x10c89d1c, lpOverlapped=0x0 | out: lpBuffer=0x1108e408*, lpNumberOfBytesRead=0x10c89d1c*=0x1, lpOverlapped=0x0) returned 1 [0060.616] GetFileType (hFile=0x19c) returned 0x1 [0060.616] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d04 | out: lpNewFilePointer=0x0) returned 1 [0060.616] WriteFile (in: hFile=0x19c, lpBuffer=0x1108e409*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x10c89d1c, lpOverlapped=0x10c89d20 | out: lpBuffer=0x1108e409*, lpNumberOfBytesWritten=0x10c89d1c*=0x1, lpOverlapped=0x10c89d20) returned 1 [0060.617] GetFileType (hFile=0x19c) returned 0x1 [0060.617] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d04 | out: lpNewFilePointer=0x0) returned 1 [0060.617] GetFileType (hFile=0x19c) returned 0x1 [0060.617] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d04 | out: lpNewFilePointer=0x0) returned 1 [0060.617] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89d1c, lpOverlapped=0x10c89d20 | out: lpBuffer=0x10cb6f00*, lpNumberOfBytesWritten=0x10c89d1c*=0x100, lpOverlapped=0x10c89d20) returned 1 [0060.617] GetFileType (hFile=0x19c) returned 0x1 [0060.617] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d04 | out: lpNewFilePointer=0x0) returned 1 [0060.617] GetFileType (hFile=0x19c) returned 0x1 [0060.617] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d04 | out: lpNewFilePointer=0x0) returned 1 [0060.617] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb7100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89d1c, lpOverlapped=0x10c89d20 | out: lpBuffer=0x10cb7100*, lpNumberOfBytesWritten=0x10c89d1c*=0x100, lpOverlapped=0x10c89d20) returned 1 [0060.617] GetFileType (hFile=0x19c) returned 0x1 [0060.617] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d04 | out: lpNewFilePointer=0x0) returned 1 [0060.617] GetFileType (hFile=0x19c) returned 0x1 [0060.617] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d04 | out: lpNewFilePointer=0x0) returned 1 [0060.617] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89e20*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89d1c, lpOverlapped=0x10c89d20 | out: lpBuffer=0x10c89e20*, lpNumberOfBytesWritten=0x10c89d1c*=0x7, lpOverlapped=0x10c89d20) returned 1 [0060.617] GetFileType (hFile=0x19c) returned 0x1 [0060.617] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d04 | out: lpNewFilePointer=0x0) returned 1 [0060.617] CloseHandle (hObject=0x19c) returned 1 [0060.618] MoveFileExW (lpExistingFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), lpNewFileName="C:\\BOOTNXT.TRAPGET" (normalized: "c:\\bootnxt.trapget"), dwFlags=0x1) returned 1 [0060.619] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0x10cfa558 | out: lpFileInformation=0x10cfa558*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0060.619] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.619] FindFirstFileW (in: lpFileName="C:\\BOOTSECT.BAK\\*", lpFindFileData=0x10c89a58 | out: lpFindFileData=0x10c89a58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.619] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10ca2800*, nNumberOfCharsToWrite=0x1f, lpNumberOfCharsWritten=0x10c89880, lpReserved=0x0 | out: lpBuffer=0x10ca2800*, lpNumberOfCharsWritten=0x10c89880*=0x1f) returned 1 [0060.621] GetFileAttributesExW (in: lpFileName="C:\\Boot" (normalized: "c:\\boot"), fInfoLevelId=0x0, lpFileInformation=0x10cfa5a8 | out: lpFileInformation=0x10cfa5a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0060.621] CreateFileW (lpFileName="C:\\Boot" (normalized: "c:\\boot"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.621] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efbf8 [0060.621] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0060.623] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0060.624] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.624] FindClose (in: hFindFile=0x7efbf8 | out: hFindFile=0x7efbf8) returned 1 [0060.624] CreateFileW (lpFileName="C:\\Boot\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.630] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d94 | out: lpMode=0x10c89d94) returned 0 [0060.630] GetFileType (hFile=0x19c) returned 0x1 [0060.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0060.630] WriteFile (in: hFile=0x19c, lpBuffer=0x11092480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d84, lpOverlapped=0x10c89d88 | out: lpBuffer=0x11092480*, lpNumberOfBytesWritten=0x10c89d84*=0x464, lpOverlapped=0x10c89d88) returned 1 [0060.631] GetFileType (hFile=0x19c) returned 0x1 [0060.631] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0060.631] CloseHandle (hObject=0x19c) returned 1 [0060.631] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), fInfoLevelId=0x0, lpFileInformation=0x10cfb598 | out: lpFileInformation=0x10cfb598*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1 [0060.631] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.631] FindFirstFileW (in: lpFileName="C:\\Boot\\BCD\\*", lpFindFileData=0x10c899f4 | out: lpFindFileData=0x10c899f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.631] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10ca28c0*, nNumberOfCharsToWrite=0x1b, lpNumberOfCharsWritten=0x10c8981c, lpReserved=0x0 | out: lpBuffer=0x10ca28c0*, lpNumberOfCharsWritten=0x10c8981c*=0x1b) returned 1 [0060.633] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0x10cfb5e8 | out: lpFileInformation=0x10cfb5e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0060.633] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.633] FindFirstFileW (in: lpFileName="C:\\Boot\\BCD.LOG\\*", lpFindFileData=0x10c899f4 | out: lpFindFileData=0x10c899f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.633] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10ca2900*, nNumberOfCharsToWrite=0x1f, lpNumberOfCharsWritten=0x10c8981c, lpReserved=0x0 | out: lpBuffer=0x10ca2900*, lpNumberOfCharsWritten=0x10c8981c*=0x1f) returned 1 [0060.634] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x10cfb638 | out: lpFileInformation=0x10cfb638*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.634] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.634] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0060.634] GetFileType (hFile=0x19c) returned 0x1 [0060.634] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0060.634] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e6f0 | out: pbBuffer=0x1108e6f0) returned 1 [0060.634] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e700 | out: pbBuffer=0x1108e700) returned 1 [0060.634] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb7201 | out: pbBuffer=0x10cb7201) returned 1 [0060.635] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb7401 | out: pbBuffer=0x10cb7401) returned 1 [0060.635] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10ca2ac0*, nNumberOfCharsToWrite=0x1f, lpNumberOfCharsWritten=0x10c89814, lpReserved=0x0 | out: lpBuffer=0x10ca2ac0*, lpNumberOfCharsWritten=0x10c89814*=0x1f) returned 1 [0060.636] CloseHandle (hObject=0x19c) returned 1 [0060.636] MoveFileExW (lpExistingFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), lpNewFileName="C:\\Boot\\BCD.LOG1.TRAPGET" (normalized: "c:\\boot\\bcd.log1.trapget"), dwFlags=0x1) returned 1 [0060.637] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x10cfb778 | out: lpFileInformation=0x10cfb778*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.637] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.637] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0060.637] GetFileType (hFile=0x19c) returned 0x1 [0060.637] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0060.637] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e7e0 | out: pbBuffer=0x1108e7e0) returned 1 [0060.637] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e7f0 | out: pbBuffer=0x1108e7f0) returned 1 [0060.637] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb7601 | out: pbBuffer=0x10cb7601) returned 1 [0060.637] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb7801 | out: pbBuffer=0x10cb7801) returned 1 [0060.638] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10ca2cc0*, nNumberOfCharsToWrite=0x1f, lpNumberOfCharsWritten=0x10c89814, lpReserved=0x0 | out: lpBuffer=0x10ca2cc0*, lpNumberOfCharsWritten=0x10c89814*=0x1f) returned 1 [0060.640] CloseHandle (hObject=0x19c) returned 1 [0060.640] MoveFileExW (lpExistingFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), lpNewFileName="C:\\Boot\\BCD.LOG2.TRAPGET" (normalized: "c:\\boot\\bcd.log2.trapget"), dwFlags=0x1) returned 1 [0060.640] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x10cfb8b8 | out: lpFileInformation=0x10cfb8b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0060.643] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.643] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0060.643] GetFileType (hFile=0x19c) returned 0x1 [0060.643] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0060.643] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e8c0 | out: pbBuffer=0x1108e8c0) returned 1 [0060.644] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e8d0 | out: pbBuffer=0x1108e8d0) returned 1 [0060.644] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb7a01 | out: pbBuffer=0x10cb7a01) returned 1 [0060.644] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb7c01 | out: pbBuffer=0x10cb7c01) returned 1 [0060.644] SetEvent (hEvent=0x138) returned 1 [0060.645] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0 [0060.646] SetEvent (hEvent=0x138) returned 1 [0060.646] SetEvent (hEvent=0x158) returned 1 [0060.646] SetEvent (hEvent=0x12c) returned 1 [0060.646] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0060.649] SetEvent (hEvent=0x168) returned 1 [0060.649] SetEvent (hEvent=0x12c) returned 1 [0060.649] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x10000, lpOverlapped=0x0) returned 1 [0060.653] GetFileType (hFile=0x19c) returned 0x1 [0060.653] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.653] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x10000, lpOverlapped=0x10c89cbc) returned 1 [0060.653] GetFileType (hFile=0x19c) returned 0x1 [0060.653] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.653] GetFileType (hFile=0x19c) returned 0x1 [0060.653] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.653] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb7b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb7b00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0060.654] GetFileType (hFile=0x19c) returned 0x1 [0060.654] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.654] GetFileType (hFile=0x19c) returned 0x1 [0060.654] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.654] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6000*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0060.654] GetFileType (hFile=0x19c) returned 0x1 [0060.654] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.654] GetFileType (hFile=0x19c) returned 0x1 [0060.654] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.654] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0060.654] GetFileType (hFile=0x19c) returned 0x1 [0060.654] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0060.654] CloseHandle (hObject=0x19c) returned 1 [0060.656] MoveFileExW (lpExistingFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), lpNewFileName="C:\\Boot\\BOOTSTAT.DAT.TRAPGET" (normalized: "c:\\boot\\bootstat.dat.trapget"), dwFlags=0x1) returned 1 [0060.656] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x10cfa008 | out: lpFileInformation=0x10cfa008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.659] CreateFileW (lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.659] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.662] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0060.662] CreateFileW (lpFileName="C:\\Boot\\Fonts\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\fonts\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.663] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0060.663] GetFileType (hFile=0x19c) returned 0x1 [0060.663] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.663] WriteFile (in: hFile=0x19c, lpBuffer=0x10cf6480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cf6480*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0060.664] GetFileType (hFile=0x19c) returned 0x1 [0060.664] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.664] CloseHandle (hObject=0x19c) returned 1 [0060.664] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa558 | out: lpFileInformation=0x10cfa558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467)) returned 1 [0060.665] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.665] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.665] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92000*, nNumberOfCharsToWrite=0x2a, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92000*, lpNumberOfCharsWritten=0x10c897b8*=0x2a) returned 1 [0060.666] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa5f8 | out: lpFileInformation=0x10cfa5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a)) returned 1 [0060.667] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.668] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.668] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92060*, nNumberOfCharsToWrite=0x2a, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92060*, lpNumberOfCharsWritten=0x10c897b8*=0x2a) returned 1 [0060.668] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa648 | out: lpFileInformation=0x10cfa648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b)) returned 1 [0060.670] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.670] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.670] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c920c0*, nNumberOfCharsToWrite=0x2a, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c920c0*, lpNumberOfCharsWritten=0x10c897b8*=0x2a) returned 1 [0060.671] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa698 | out: lpFileInformation=0x10cfa698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588)) returned 1 [0060.672] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.672] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.672] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92120*, nNumberOfCharsToWrite=0x2a, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92120*, lpNumberOfCharsWritten=0x10c897b8*=0x2a) returned 1 [0060.676] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa6e8 | out: lpFileInformation=0x10cfa6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506)) returned 1 [0060.678] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.678] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.678] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92180*, nNumberOfCharsToWrite=0x2d, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92180*, lpNumberOfCharsWritten=0x10c897b8*=0x2d) returned 1 [0060.681] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa738 | out: lpFileInformation=0x10cfa738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f)) returned 1 [0060.683] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.683] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.684] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c921e0*, nNumberOfCharsToWrite=0x2e, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c921e0*, lpNumberOfCharsWritten=0x10c897b8*=0x2e) returned 1 [0060.685] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa788 | out: lpFileInformation=0x10cfa788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b)) returned 1 [0060.686] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.686] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.686] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92240*, nNumberOfCharsToWrite=0x2d, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92240*, lpNumberOfCharsWritten=0x10c897b8*=0x2d) returned 1 [0060.687] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa7d8 | out: lpFileInformation=0x10cfa7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a)) returned 1 [0060.690] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.691] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.691] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c922a0*, nNumberOfCharsToWrite=0x2e, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c922a0*, lpNumberOfCharsWritten=0x10c897b8*=0x2e) returned 1 [0060.691] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa828 | out: lpFileInformation=0x10cfa828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb)) returned 1 [0060.692] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.692] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.692] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92300*, nNumberOfCharsToWrite=0x2b, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92300*, lpNumberOfCharsWritten=0x10c897b8*=0x2b) returned 1 [0060.694] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa878 | out: lpFileInformation=0x10cfa878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b)) returned 1 [0060.694] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.694] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.694] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92360*, nNumberOfCharsToWrite=0x2c, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92360*, lpNumberOfCharsWritten=0x10c897b8*=0x2c) returned 1 [0060.695] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa8c8 | out: lpFileInformation=0x10cfa8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255)) returned 1 [0060.695] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.696] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.696] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c923c0*, nNumberOfCharsToWrite=0x2b, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c923c0*, lpNumberOfCharsWritten=0x10c897b8*=0x2b) returned 1 [0060.699] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa918 | out: lpFileInformation=0x10cfa918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b)) returned 1 [0060.699] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.700] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.700] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92420*, nNumberOfCharsToWrite=0x2c, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92420*, lpNumberOfCharsWritten=0x10c897b8*=0x2c) returned 1 [0060.702] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa968 | out: lpFileInformation=0x10cfa968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b)) returned 1 [0060.703] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.704] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.704] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92480*, nNumberOfCharsToWrite=0x2e, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92480*, lpNumberOfCharsWritten=0x10c897b8*=0x2e) returned 1 [0060.705] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfa9b8 | out: lpFileInformation=0x10cfa9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2)) returned 1 [0060.707] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.707] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.707] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c924e0*, nNumberOfCharsToWrite=0x2e, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c924e0*, lpNumberOfCharsWritten=0x10c897b8*=0x2e) returned 1 [0060.708] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfaa08 | out: lpFileInformation=0x10cfaa08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66)) returned 1 [0060.708] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.708] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.708] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92540*, nNumberOfCharsToWrite=0x2f, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92540*, lpNumberOfCharsWritten=0x10c897b8*=0x2f) returned 1 [0060.709] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x10cfaa58 | out: lpFileInformation=0x10cfaa58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3)) returned 1 [0060.709] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.709] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0060.709] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c925a0*, nNumberOfCharsToWrite=0x2b, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c925a0*, lpNumberOfCharsWritten=0x10c897b8*=0x2b) returned 1 [0060.710] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources" (normalized: "c:\\boot\\resources"), fInfoLevelId=0x0, lpFileInformation=0x10cfaaa8 | out: lpFileInformation=0x10cfaaa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.712] CreateFileW (lpFileName="C:\\Boot\\Resources" (normalized: "c:\\boot\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.712] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f02f8 [0060.712] FindNextFileW (in: hFindFile=0x7f02f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.712] FindNextFileW (in: hFindFile=0x7f02f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0060.712] FindNextFileW (in: hFindFile=0x7f02f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0060.712] FindNextFileW (in: hFindFile=0x7f02f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.712] FindClose (in: hFindFile=0x7f02f8 | out: hFindFile=0x7f02f8) returned 1 [0060.713] CreateFileW (lpFileName="C:\\Boot\\Resources\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\resources\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.713] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0060.713] GetFileType (hFile=0x19c) returned 0x1 [0060.713] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.713] WriteFile (in: hFile=0x19c, lpBuffer=0x10cf6d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cf6d80*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0060.714] GetFileType (hFile=0x19c) returned 0x1 [0060.714] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.714] CloseHandle (hObject=0x19c) returned 1 [0060.714] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cfab98 | out: lpFileInformation=0x10cfab98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0)) returned 1 [0060.714] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US" (normalized: "c:\\boot\\resources\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x10cfabe8 | out: lpFileInformation=0x10cfabe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.714] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US" (normalized: "c:\\boot\\resources\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.714] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efeb8 [0060.714] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.714] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0060.714] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.714] FindClose (in: hFindFile=0x7efeb8 | out: hFindFile=0x7efeb8) returned 1 [0060.715] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\resources\\en-us\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.715] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0060.715] GetFileType (hFile=0x19c) returned 0x1 [0060.715] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0060.715] WriteFile (in: hFile=0x19c, lpBuffer=0x10cf7680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10cf7680*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0060.715] GetFileType (hFile=0x19c) returned 0x1 [0060.716] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0060.716] CloseHandle (hObject=0x19c) returned 1 [0060.716] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfac88 | out: lpFileInformation=0x10cfac88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0)) returned 1 [0060.716] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bg-BG" (normalized: "c:\\boot\\bg-bg"), fInfoLevelId=0x0, lpFileInformation=0x10cfacd8 | out: lpFileInformation=0x10cfacd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.716] CreateFileW (lpFileName="C:\\Boot\\bg-BG" (normalized: "c:\\boot\\bg-bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.716] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0178 [0060.716] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.716] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.716] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.716] FindClose (in: hFindFile=0x7f0178 | out: hFindFile=0x7f0178) returned 1 [0060.716] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\bg-bg\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.717] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0060.717] GetFileType (hFile=0x19c) returned 0x1 [0060.717] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.717] WriteFile (in: hFile=0x19c, lpBuffer=0x11092000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x11092000*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0060.717] GetFileType (hFile=0x19c) returned 0x1 [0060.717] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.717] CloseHandle (hObject=0x19c) returned 1 [0060.718] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfad78 | out: lpFileInformation=0x10cfad78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1 [0060.718] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cfadc8 | out: lpFileInformation=0x10cfadc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0)) returned 1 [0060.720] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), fInfoLevelId=0x0, lpFileInformation=0x10cfae18 | out: lpFileInformation=0x10cfae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0)) returned 1 [0060.723] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x10cfae68 | out: lpFileInformation=0x10cfae68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.723] CreateFileW (lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.723] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efc78 [0060.724] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.724] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.724] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0060.724] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.724] FindClose (in: hFindFile=0x7efc78 | out: hFindFile=0x7efc78) returned 1 [0060.724] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\cs-cz\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.727] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0060.727] GetFileType (hFile=0x19c) returned 0x1 [0060.727] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.727] WriteFile (in: hFile=0x19c, lpBuffer=0x11092900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x11092900*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0060.728] GetFileType (hFile=0x19c) returned 0x1 [0060.728] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.728] CloseHandle (hObject=0x19c) returned 1 [0060.728] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfaf58 | out: lpFileInformation=0x10cfaf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58)) returned 1 [0060.728] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfafa8 | out: lpFileInformation=0x10cfafa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0060.728] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x10cfaff8 | out: lpFileInformation=0x10cfaff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.729] CreateFileW (lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.729] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0078 [0060.729] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.729] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.729] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0060.729] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.729] FindClose (in: hFindFile=0x7f0078 | out: hFindFile=0x7f0078) returned 1 [0060.832] CreateFileW (lpFileName="C:\\Boot\\da-DK\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\da-dk\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.839] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0060.840] GetFileType (hFile=0x19c) returned 0x1 [0060.840] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.840] WriteFile (in: hFile=0x19c, lpBuffer=0x11093200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x11093200*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0060.840] GetFileType (hFile=0x19c) returned 0x1 [0060.840] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.841] CloseHandle (hObject=0x19c) returned 1 [0060.841] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfb0e8 | out: lpFileInformation=0x10cfb0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1 [0060.841] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfb138 | out: lpFileInformation=0x10cfb138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0060.841] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x10cfb188 | out: lpFileInformation=0x10cfb188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.841] CreateFileW (lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.841] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f00b8 [0060.841] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.841] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.842] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0060.842] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.842] FindClose (in: hFindFile=0x7f00b8 | out: hFindFile=0x7f00b8) returned 1 [0060.842] CreateFileW (lpFileName="C:\\Boot\\de-DE\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\de-de\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.847] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0060.847] GetFileType (hFile=0x19c) returned 0x1 [0060.847] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.847] WriteFile (in: hFile=0x19c, lpBuffer=0x11093b00*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x11093b00*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0060.848] GetFileType (hFile=0x19c) returned 0x1 [0060.848] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.848] CloseHandle (hObject=0x19c) returned 1 [0060.848] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfb278 | out: lpFileInformation=0x10cfb278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560)) returned 1 [0060.850] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfb2c8 | out: lpFileInformation=0x10cfb2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1 [0060.850] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x10cfb318 | out: lpFileInformation=0x10cfb318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.851] CreateFileW (lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.851] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0238 [0060.851] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.851] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.851] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0060.851] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.851] FindClose (in: hFindFile=0x7f0238 | out: hFindFile=0x7f0238) returned 1 [0060.851] CreateFileW (lpFileName="C:\\Boot\\el-GR\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\el-gr\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.867] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0060.867] GetFileType (hFile=0x19c) returned 0x1 [0060.867] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.867] WriteFile (in: hFile=0x19c, lpBuffer=0x1109e480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x1109e480*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0060.896] GetFileType (hFile=0x19c) returned 0x1 [0060.896] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.896] CloseHandle (hObject=0x19c) returned 1 [0060.937] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfb408 | out: lpFileInformation=0x10cfb408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960)) returned 1 [0060.941] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfb458 | out: lpFileInformation=0x10cfb458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0)) returned 1 [0060.952] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-GB" (normalized: "c:\\boot\\en-gb"), fInfoLevelId=0x0, lpFileInformation=0x10cfb4a8 | out: lpFileInformation=0x10cfb4a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.952] CreateFileW (lpFileName="C:\\Boot\\en-GB" (normalized: "c:\\boot\\en-gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.952] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcf8 [0060.953] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.953] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.953] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.953] FindClose (in: hFindFile=0x7efcf8 | out: hFindFile=0x7efcf8) returned 1 [0060.953] CreateFileW (lpFileName="C:\\Boot\\en-GB\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\en-gb\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.953] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0060.953] GetFileType (hFile=0x19c) returned 0x1 [0060.953] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.953] WriteFile (in: hFile=0x19c, lpBuffer=0x1109ed80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x1109ed80*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0060.954] GetFileType (hFile=0x19c) returned 0x1 [0060.954] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.954] CloseHandle (hObject=0x19c) returned 1 [0060.954] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfb548 | out: lpFileInformation=0x10cfb548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158)) returned 1 [0060.954] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x10cfb598 | out: lpFileInformation=0x10cfb598*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.955] CreateFileW (lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.955] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcb8 [0060.955] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.955] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.955] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0060.955] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.955] FindClose (in: hFindFile=0x7efcb8 | out: hFindFile=0x7efcb8) returned 1 [0060.955] CreateFileW (lpFileName="C:\\Boot\\en-US\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\en-us\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0060.975] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0060.975] GetFileType (hFile=0x19c) returned 0x1 [0060.975] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.975] WriteFile (in: hFile=0x19c, lpBuffer=0x1109f680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x1109f680*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0060.976] GetFileType (hFile=0x19c) returned 0x1 [0060.976] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0060.976] CloseHandle (hObject=0x19c) returned 1 [0060.976] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfb688 | out: lpFileInformation=0x10cfb688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0)) returned 1 [0060.977] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfb6d8 | out: lpFileInformation=0x10cfb6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0)) returned 1 [0060.977] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x10cfb728 | out: lpFileInformation=0x10cfb728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.982] CreateFileW (lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.982] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f02b8 [0060.982] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.983] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.983] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0060.983] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.983] FindClose (in: hFindFile=0x7f02b8 | out: hFindFile=0x7f02b8) returned 1 [0060.983] CreateFileW (lpFileName="C:\\Boot\\es-ES\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\es-es\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.003] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.004] GetFileType (hFile=0x19c) returned 0x1 [0061.004] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.004] WriteFile (in: hFile=0x19c, lpBuffer=0x110a6000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110a6000*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.004] GetFileType (hFile=0x19c) returned 0x1 [0061.005] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.005] CloseHandle (hObject=0x19c) returned 1 [0061.005] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfb818 | out: lpFileInformation=0x10cfb818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1 [0061.005] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfb868 | out: lpFileInformation=0x10cfb868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1 [0061.012] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-MX" (normalized: "c:\\boot\\es-mx"), fInfoLevelId=0x0, lpFileInformation=0x10cfb908 | out: lpFileInformation=0x10cfb908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.014] CreateFileW (lpFileName="C:\\Boot\\es-MX" (normalized: "c:\\boot\\es-mx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.014] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0061.014] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.014] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.014] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.014] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0061.014] CreateFileW (lpFileName="C:\\Boot\\es-MX\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\es-mx\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.015] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.015] GetFileType (hFile=0x19c) returned 0x1 [0061.015] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.015] WriteFile (in: hFile=0x19c, lpBuffer=0x110a6900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110a6900*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.016] GetFileType (hFile=0x19c) returned 0x1 [0061.016] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.016] CloseHandle (hObject=0x19c) returned 1 [0061.016] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfb9a8 | out: lpFileInformation=0x10cfb9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1 [0061.016] GetFileAttributesExW (in: lpFileName="C:\\Boot\\et-EE" (normalized: "c:\\boot\\et-ee"), fInfoLevelId=0x0, lpFileInformation=0x10cfb9f8 | out: lpFileInformation=0x10cfb9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.016] CreateFileW (lpFileName="C:\\Boot\\et-EE" (normalized: "c:\\boot\\et-ee"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.016] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0061.017] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.017] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.017] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.017] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0061.017] CreateFileW (lpFileName="C:\\Boot\\et-EE\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\et-ee\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.017] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.017] GetFileType (hFile=0x19c) returned 0x1 [0061.017] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.017] WriteFile (in: hFile=0x19c, lpBuffer=0x110a7200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110a7200*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.018] GetFileType (hFile=0x19c) returned 0x1 [0061.018] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.018] CloseHandle (hObject=0x19c) returned 1 [0061.018] GetFileAttributesExW (in: lpFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfba98 | out: lpFileInformation=0x10cfba98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560)) returned 1 [0061.020] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x10cfbae8 | out: lpFileInformation=0x10cfbae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.021] CreateFileW (lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.021] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0038 [0061.021] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.021] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.021] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.021] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.021] FindClose (in: hFindFile=0x7f0038 | out: hFindFile=0x7f0038) returned 1 [0061.021] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\fi-fi\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.024] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.024] GetFileType (hFile=0x19c) returned 0x1 [0061.024] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.024] WriteFile (in: hFile=0x19c, lpBuffer=0x110a7b00*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110a7b00*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.025] GetFileType (hFile=0x19c) returned 0x1 [0061.025] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.025] CloseHandle (hObject=0x19c) returned 1 [0061.025] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfbbd8 | out: lpFileInformation=0x10cfbbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1 [0061.025] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfbc28 | out: lpFileInformation=0x10cfbc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0061.025] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-CA" (normalized: "c:\\boot\\fr-ca"), fInfoLevelId=0x0, lpFileInformation=0x10cfbc78 | out: lpFileInformation=0x10cfbc78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.027] CreateFileW (lpFileName="C:\\Boot\\fr-CA" (normalized: "c:\\boot\\fr-ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.027] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0338 [0061.027] FindNextFileW (in: hFindFile=0x7f0338, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.027] FindNextFileW (in: hFindFile=0x7f0338, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.027] FindNextFileW (in: hFindFile=0x7f0338, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.027] FindClose (in: hFindFile=0x7f0338 | out: hFindFile=0x7f0338) returned 1 [0061.028] CreateFileW (lpFileName="C:\\Boot\\fr-CA\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\fr-ca\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.028] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.028] GetFileType (hFile=0x19c) returned 0x1 [0061.028] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.028] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce8480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10ce8480*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.029] GetFileType (hFile=0x19c) returned 0x1 [0061.029] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.029] CloseHandle (hObject=0x19c) returned 1 [0061.029] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfbd18 | out: lpFileInformation=0x10cfbd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560)) returned 1 [0061.029] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x10cfbd68 | out: lpFileInformation=0x10cfbd68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.029] CreateFileW (lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.029] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0078 [0061.029] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.030] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.030] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.030] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.030] FindClose (in: hFindFile=0x7f0078 | out: hFindFile=0x7f0078) returned 1 [0061.030] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\fr-fr\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.047] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.047] GetFileType (hFile=0x19c) returned 0x1 [0061.047] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.047] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce8d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10ce8d80*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.049] GetFileType (hFile=0x19c) returned 0x1 [0061.049] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.049] CloseHandle (hObject=0x19c) returned 1 [0061.050] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfbe58 | out: lpFileInformation=0x10cfbe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558)) returned 1 [0061.050] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfbea8 | out: lpFileInformation=0x10cfbea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1 [0061.060] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hr-HR" (normalized: "c:\\boot\\hr-hr"), fInfoLevelId=0x0, lpFileInformation=0x10cfbef8 | out: lpFileInformation=0x10cfbef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.060] CreateFileW (lpFileName="C:\\Boot\\hr-HR" (normalized: "c:\\boot\\hr-hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.061] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efbf8 [0061.061] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.061] FindClose (in: hFindFile=0x7efbf8 | out: hFindFile=0x7efbf8) returned 1 [0061.061] CreateFileW (lpFileName="C:\\Boot\\hr-HR\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\hr-hr\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.069] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.069] GetFileType (hFile=0x19c) returned 0x1 [0061.069] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.069] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce9680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10ce9680*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.070] GetFileType (hFile=0x19c) returned 0x1 [0061.070] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.070] CloseHandle (hObject=0x19c) returned 1 [0061.070] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cfbf98 | out: lpFileInformation=0x10cfbf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1 [0061.071] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.071] CreateFileW (lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.071] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efe78 [0061.071] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.071] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.071] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.071] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.071] FindClose (in: hFindFile=0x7efe78 | out: hFindFile=0x7efe78) returned 1 [0061.071] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\hu-hu\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.076] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.076] GetFileType (hFile=0x19c) returned 0x1 [0061.077] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.083] WriteFile (in: hFile=0x19c, lpBuffer=0x10cf0000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cf0000*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.083] GetFileType (hFile=0x19c) returned 0x1 [0061.083] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.083] CloseHandle (hObject=0x19c) returned 1 [0061.084] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2148 | out: lpFileInformation=0x10cd2148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360)) returned 1 [0061.091] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2198 | out: lpFileInformation=0x10cd2198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398)) returned 1 [0061.092] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x10cd21e8 | out: lpFileInformation=0x10cd21e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.092] CreateFileW (lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.092] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0338 [0061.092] FindNextFileW (in: hFindFile=0x7f0338, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.092] FindNextFileW (in: hFindFile=0x7f0338, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.092] FindNextFileW (in: hFindFile=0x7f0338, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.092] FindNextFileW (in: hFindFile=0x7f0338, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.092] FindClose (in: hFindFile=0x7f0338 | out: hFindFile=0x7f0338) returned 1 [0061.092] CreateFileW (lpFileName="C:\\Boot\\it-IT\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\it-it\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.099] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.099] GetFileType (hFile=0x19c) returned 0x1 [0061.099] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.099] WriteFile (in: hFile=0x19c, lpBuffer=0x10cf0900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cf0900*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.100] GetFileType (hFile=0x19c) returned 0x1 [0061.100] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.100] CloseHandle (hObject=0x19c) returned 1 [0061.100] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd22d8 | out: lpFileInformation=0x10cd22d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58)) returned 1 [0061.101] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2328 | out: lpFileInformation=0x10cd2328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0061.102] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x10cd2378 | out: lpFileInformation=0x10cd2378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.102] CreateFileW (lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.102] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0178 [0061.103] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.103] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.103] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.103] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.103] FindClose (in: hFindFile=0x7f0178 | out: hFindFile=0x7f0178) returned 1 [0061.103] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\ja-jp\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.142] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.142] GetFileType (hFile=0x19c) returned 0x1 [0061.142] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.143] WriteFile (in: hFile=0x19c, lpBuffer=0x10cf1200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cf1200*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.143] GetFileType (hFile=0x19c) returned 0x1 [0061.143] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.143] CloseHandle (hObject=0x19c) returned 1 [0061.144] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2468 | out: lpFileInformation=0x10cd2468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760)) returned 1 [0061.144] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd24b8 | out: lpFileInformation=0x10cd24b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798)) returned 1 [0061.144] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x10cd2508 | out: lpFileInformation=0x10cd2508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.150] CreateFileW (lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.150] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcb8 [0061.150] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.150] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.150] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.150] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.150] FindClose (in: hFindFile=0x7efcb8 | out: hFindFile=0x7efcb8) returned 1 [0061.150] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\ko-kr\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.154] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.154] GetFileType (hFile=0x19c) returned 0x1 [0061.154] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.154] WriteFile (in: hFile=0x19c, lpBuffer=0x10cf1b00*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cf1b00*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.155] GetFileType (hFile=0x19c) returned 0x1 [0061.155] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.155] CloseHandle (hObject=0x19c) returned 1 [0061.155] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd25f8 | out: lpFileInformation=0x10cd25f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560)) returned 1 [0061.155] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2648 | out: lpFileInformation=0x10cd2648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0)) returned 1 [0061.155] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lt-LT" (normalized: "c:\\boot\\lt-lt"), fInfoLevelId=0x0, lpFileInformation=0x10cd2698 | out: lpFileInformation=0x10cd2698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.155] CreateFileW (lpFileName="C:\\Boot\\lt-LT" (normalized: "c:\\boot\\lt-lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.155] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0238 [0061.155] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.156] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.156] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.156] FindClose (in: hFindFile=0x7f0238 | out: hFindFile=0x7f0238) returned 1 [0061.156] CreateFileW (lpFileName="C:\\Boot\\lt-LT\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\lt-lt\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.156] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.156] GetFileType (hFile=0x19c) returned 0x1 [0061.156] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.156] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce2480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10ce2480*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.157] GetFileType (hFile=0x19c) returned 0x1 [0061.157] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.157] CloseHandle (hObject=0x19c) returned 1 [0061.157] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2738 | out: lpFileInformation=0x10cd2738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1 [0061.161] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lv-LV" (normalized: "c:\\boot\\lv-lv"), fInfoLevelId=0x0, lpFileInformation=0x10cd2788 | out: lpFileInformation=0x10cd2788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.162] CreateFileW (lpFileName="C:\\Boot\\lv-LV" (normalized: "c:\\boot\\lv-lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.162] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd78 [0061.162] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.162] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.162] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.162] FindClose (in: hFindFile=0x7efd78 | out: hFindFile=0x7efd78) returned 1 [0061.162] CreateFileW (lpFileName="C:\\Boot\\lv-LV\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\lv-lv\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.162] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.162] GetFileType (hFile=0x19c) returned 0x1 [0061.162] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.163] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce2d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10ce2d80*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.163] GetFileType (hFile=0x19c) returned 0x1 [0061.163] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.163] CloseHandle (hObject=0x19c) returned 1 [0061.164] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2828 | out: lpFileInformation=0x10cd2828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758)) returned 1 [0061.164] GetFileAttributesExW (in: lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), fInfoLevelId=0x0, lpFileInformation=0x10cd2878 | out: lpFileInformation=0x10cd2878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0)) returned 1 [0061.164] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x10cd28c8 | out: lpFileInformation=0x10cd28c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.166] CreateFileW (lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.166] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efeb8 [0061.167] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.167] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.167] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.167] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.167] FindClose (in: hFindFile=0x7efeb8 | out: hFindFile=0x7efeb8) returned 1 [0061.167] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\nb-no\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.214] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.214] GetFileType (hFile=0x19c) returned 0x1 [0061.214] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.215] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce3680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10ce3680*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.215] GetFileType (hFile=0x19c) returned 0x1 [0061.215] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.215] CloseHandle (hObject=0x19c) returned 1 [0061.216] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd29b8 | out: lpFileInformation=0x10cd29b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1 [0061.216] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2a08 | out: lpFileInformation=0x10cd2a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0061.216] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0x10cd2a58 | out: lpFileInformation=0x10cd2a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.216] CreateFileW (lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.216] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efeb8 [0061.216] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.216] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.216] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.216] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.216] FindClose (in: hFindFile=0x7efeb8 | out: hFindFile=0x7efeb8) returned 1 [0061.217] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\nl-nl\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.289] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.289] GetFileType (hFile=0x19c) returned 0x1 [0061.289] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.289] WriteFile (in: hFile=0x19c, lpBuffer=0x110be480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110be480*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.290] GetFileType (hFile=0x19c) returned 0x1 [0061.290] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.290] CloseHandle (hObject=0x19c) returned 1 [0061.290] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c6008 | out: lpFileInformation=0x110c6008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160)) returned 1 [0061.324] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c6058 | out: lpFileInformation=0x110c6058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0061.324] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x110c60a8 | out: lpFileInformation=0x110c60a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.325] CreateFileW (lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.325] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eff38 [0061.325] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.325] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.325] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.325] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.325] FindClose (in: hFindFile=0x7eff38 | out: hFindFile=0x7eff38) returned 1 [0061.325] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\pl-pl\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.359] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.359] GetFileType (hFile=0x19c) returned 0x1 [0061.359] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.360] WriteFile (in: hFile=0x19c, lpBuffer=0x110bed80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110bed80*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.360] GetFileType (hFile=0x19c) returned 0x1 [0061.360] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.360] CloseHandle (hObject=0x19c) returned 1 [0061.361] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c6198 | out: lpFileInformation=0x110c6198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58)) returned 1 [0061.361] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c61e8 | out: lpFileInformation=0x110c61e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1 [0061.395] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x110c6238 | out: lpFileInformation=0x110c6238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.395] CreateFileW (lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.395] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcf8 [0061.395] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.395] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.395] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.395] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.395] FindClose (in: hFindFile=0x7efcf8 | out: hFindFile=0x7efcf8) returned 1 [0061.395] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\pt-br\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.431] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.431] GetFileType (hFile=0x19c) returned 0x1 [0061.431] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.431] WriteFile (in: hFile=0x19c, lpBuffer=0x110d2000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110d2000*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.432] GetFileType (hFile=0x19c) returned 0x1 [0061.432] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.432] CloseHandle (hObject=0x19c) returned 1 [0061.432] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2b48 | out: lpFileInformation=0x10cd2b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1 [0061.432] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2b98 | out: lpFileInformation=0x10cd2b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0061.432] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x10cd2be8 | out: lpFileInformation=0x10cd2be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.467] CreateFileW (lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.467] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0038 [0061.467] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.467] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.467] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.467] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.467] FindClose (in: hFindFile=0x7f0038 | out: hFindFile=0x7f0038) returned 1 [0061.468] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\pt-pt\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.502] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.502] GetFileType (hFile=0x19c) returned 0x1 [0061.502] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.503] WriteFile (in: hFile=0x19c, lpBuffer=0x110d2900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110d2900*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.538] GetFileType (hFile=0x19c) returned 0x1 [0061.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.539] CloseHandle (hObject=0x19c) returned 1 [0061.539] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2cd8 | out: lpFileInformation=0x10cd2cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1 [0061.539] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2d28 | out: lpFileInformation=0x10cd2d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1 [0061.540] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc" (normalized: "c:\\boot\\qps-ploc"), fInfoLevelId=0x0, lpFileInformation=0x10cd2d78 | out: lpFileInformation=0x10cd2d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.540] CreateFileW (lpFileName="C:\\Boot\\qps-ploc" (normalized: "c:\\boot\\qps-ploc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.540] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0238 [0061.540] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.540] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.540] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.540] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.541] FindClose (in: hFindFile=0x7f0238 | out: hFindFile=0x7f0238) returned 1 [0061.541] CreateFileW (lpFileName="C:\\Boot\\qps-ploc\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\qps-ploc\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.618] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.618] GetFileType (hFile=0x19c) returned 0x1 [0061.618] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.618] WriteFile (in: hFile=0x19c, lpBuffer=0x110bf680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110bf680*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.619] GetFileType (hFile=0x19c) returned 0x1 [0061.619] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.619] CloseHandle (hObject=0x19c) returned 1 [0061.619] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c6328 | out: lpFileInformation=0x110c6328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160)) returned 1 [0061.654] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c6378 | out: lpFileInformation=0x110c6378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398)) returned 1 [0061.654] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ro-RO" (normalized: "c:\\boot\\ro-ro"), fInfoLevelId=0x0, lpFileInformation=0x110c63c8 | out: lpFileInformation=0x110c63c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.654] CreateFileW (lpFileName="C:\\Boot\\ro-RO" (normalized: "c:\\boot\\ro-ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.655] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f02b8 [0061.655] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.655] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.655] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.655] FindClose (in: hFindFile=0x7f02b8 | out: hFindFile=0x7f02b8) returned 1 [0061.655] CreateFileW (lpFileName="C:\\Boot\\ro-RO\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\ro-ro\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.655] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.655] GetFileType (hFile=0x19c) returned 0x1 [0061.655] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.655] WriteFile (in: hFile=0x19c, lpBuffer=0x110da000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110da000*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.656] GetFileType (hFile=0x19c) returned 0x1 [0061.656] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.656] CloseHandle (hObject=0x19c) returned 1 [0061.656] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c6468 | out: lpFileInformation=0x110c6468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960)) returned 1 [0061.657] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x110c64b8 | out: lpFileInformation=0x110c64b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.691] CreateFileW (lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.691] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f00b8 [0061.691] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.691] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.691] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.691] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.691] FindClose (in: hFindFile=0x7f00b8 | out: hFindFile=0x7f00b8) returned 1 [0061.691] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\ru-ru\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.726] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.726] GetFileType (hFile=0x19c) returned 0x1 [0061.726] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.726] WriteFile (in: hFile=0x19c, lpBuffer=0x110da900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110da900*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.727] GetFileType (hFile=0x19c) returned 0x1 [0061.727] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.727] CloseHandle (hObject=0x19c) returned 1 [0061.727] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c65a8 | out: lpFileInformation=0x110c65a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1 [0061.728] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c65f8 | out: lpFileInformation=0x110c65f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0)) returned 1 [0061.728] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sk-SK" (normalized: "c:\\boot\\sk-sk"), fInfoLevelId=0x0, lpFileInformation=0x110c6648 | out: lpFileInformation=0x110c6648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.728] CreateFileW (lpFileName="C:\\Boot\\sk-SK" (normalized: "c:\\boot\\sk-sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.728] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f02b8 [0061.728] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.728] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.728] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.728] FindClose (in: hFindFile=0x7f02b8 | out: hFindFile=0x7f02b8) returned 1 [0061.728] CreateFileW (lpFileName="C:\\Boot\\sk-SK\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\sk-sk\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.729] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.729] GetFileType (hFile=0x19c) returned 0x1 [0061.729] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.729] WriteFile (in: hFile=0x19c, lpBuffer=0x110db200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110db200*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.729] GetFileType (hFile=0x19c) returned 0x1 [0061.729] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.729] CloseHandle (hObject=0x19c) returned 1 [0061.775] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c66e8 | out: lpFileInformation=0x110c66e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58)) returned 1 [0061.821] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sl-SI" (normalized: "c:\\boot\\sl-si"), fInfoLevelId=0x0, lpFileInformation=0x110c6738 | out: lpFileInformation=0x110c6738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.821] CreateFileW (lpFileName="C:\\Boot\\sl-SI" (normalized: "c:\\boot\\sl-si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.821] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f01b8 [0061.821] FindNextFileW (in: hFindFile=0x7f01b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.821] FindNextFileW (in: hFindFile=0x7f01b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.821] FindNextFileW (in: hFindFile=0x7f01b8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.821] FindClose (in: hFindFile=0x7f01b8 | out: hFindFile=0x7f01b8) returned 1 [0061.821] CreateFileW (lpFileName="C:\\Boot\\sl-SI\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\sl-si\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.856] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.856] GetFileType (hFile=0x19c) returned 0x1 [0061.856] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.856] WriteFile (in: hFile=0x19c, lpBuffer=0x110dbb00*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110dbb00*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.857] GetFileType (hFile=0x19c) returned 0x1 [0061.857] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.857] CloseHandle (hObject=0x19c) returned 1 [0061.857] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c67d8 | out: lpFileInformation=0x110c67d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1 [0061.857] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS" (normalized: "c:\\boot\\sr-latn-cs"), fInfoLevelId=0x0, lpFileInformation=0x110c6828 | out: lpFileInformation=0x110c6828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.858] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS" (normalized: "c:\\boot\\sr-latn-cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.858] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0078 [0061.858] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.858] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.858] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0061.858] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.858] FindClose (in: hFindFile=0x7f0078 | out: hFindFile=0x7f0078) returned 1 [0061.858] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\sr-latn-cs\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.893] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.893] GetFileType (hFile=0x19c) returned 0x1 [0061.893] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.894] WriteFile (in: hFile=0x19c, lpBuffer=0x110e0480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110e0480*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.894] GetFileType (hFile=0x19c) returned 0x1 [0061.894] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.894] CloseHandle (hObject=0x19c) returned 1 [0061.895] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c6918 | out: lpFileInformation=0x110c6918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1 [0061.930] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c6968 | out: lpFileInformation=0x110c6968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58)) returned 1 [0061.930] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-RS" (normalized: "c:\\boot\\sr-latn-rs"), fInfoLevelId=0x0, lpFileInformation=0x110c69b8 | out: lpFileInformation=0x110c69b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.930] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS" (normalized: "c:\\boot\\sr-latn-rs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.930] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efbf8 [0061.930] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.930] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0061.930] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.930] FindClose (in: hFindFile=0x7efbf8 | out: hFindFile=0x7efbf8) returned 1 [0061.930] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\sr-latn-rs\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0061.931] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0061.931] GetFileType (hFile=0x19c) returned 0x1 [0061.931] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.931] WriteFile (in: hFile=0x19c, lpBuffer=0x110e0d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110e0d80*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0061.931] GetFileType (hFile=0x19c) returned 0x1 [0061.932] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0061.932] CloseHandle (hObject=0x19c) returned 1 [0061.932] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c6a58 | out: lpFileInformation=0x110c6a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1 [0061.932] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x110c6aa8 | out: lpFileInformation=0x110c6aa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.004] CreateFileW (lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0062.004] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efef8 [0062.004] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.004] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0062.004] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0062.005] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.005] FindClose (in: hFindFile=0x7efef8 | out: hFindFile=0x7efef8) returned 1 [0062.005] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\sv-se\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0062.040] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0062.040] GetFileType (hFile=0x19c) returned 0x1 [0062.040] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0062.040] WriteFile (in: hFile=0x19c, lpBuffer=0x110e1680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110e1680*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0062.075] GetFileType (hFile=0x19c) returned 0x1 [0062.075] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0062.075] CloseHandle (hObject=0x19c) returned 1 [0062.076] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c6b98 | out: lpFileInformation=0x110c6b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960)) returned 1 [0062.076] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c6be8 | out: lpFileInformation=0x110c6be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98)) returned 1 [0062.076] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x110c6c38 | out: lpFileInformation=0x110c6c38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.076] CreateFileW (lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0062.076] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0238 [0062.077] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.077] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0062.077] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0062.077] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.077] FindClose (in: hFindFile=0x7f0238 | out: hFindFile=0x7f0238) returned 1 [0062.077] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\tr-tr\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0062.160] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0062.161] GetFileType (hFile=0x19c) returned 0x1 [0062.161] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0062.161] WriteFile (in: hFile=0x19c, lpBuffer=0x110d3200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110d3200*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0062.161] GetFileType (hFile=0x19c) returned 0x1 [0062.161] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0062.162] CloseHandle (hObject=0x19c) returned 1 [0062.162] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2e68 | out: lpFileInformation=0x10cd2e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558)) returned 1 [0062.199] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2eb8 | out: lpFileInformation=0x10cd2eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0062.199] GetFileAttributesExW (in: lpFileName="C:\\Boot\\uk-UA" (normalized: "c:\\boot\\uk-ua"), fInfoLevelId=0x0, lpFileInformation=0x10cd2f08 | out: lpFileInformation=0x10cd2f08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.200] CreateFileW (lpFileName="C:\\Boot\\uk-UA" (normalized: "c:\\boot\\uk-ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0062.200] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eff38 [0062.200] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.200] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0062.200] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.200] FindClose (in: hFindFile=0x7eff38 | out: hFindFile=0x7eff38) returned 1 [0062.200] CreateFileW (lpFileName="C:\\Boot\\uk-UA\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\uk-ua\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0062.201] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0062.201] GetFileType (hFile=0x19c) returned 0x1 [0062.201] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0062.201] WriteFile (in: hFile=0x19c, lpBuffer=0x110d3b00*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110d3b00*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0062.202] GetFileType (hFile=0x19c) returned 0x1 [0062.202] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0062.202] CloseHandle (hObject=0x19c) returned 1 [0062.202] GetFileAttributesExW (in: lpFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd2fa8 | out: lpFileInformation=0x10cd2fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1 [0062.202] GetFileAttributesExW (in: lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), fInfoLevelId=0x0, lpFileInformation=0x10cd2ff8 | out: lpFileInformation=0x10cd2ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236)) returned 1 [0062.238] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0062.238] FindFirstFileW (in: lpFileName="C:\\Boot\\updaterevokesipolicy.p7b\\*", lpFindFileData=0x10c899f4 | out: lpFindFileData=0x10c899f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0062.238] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92720*, nNumberOfCharsToWrite=0x30, lpNumberOfCharsWritten=0x10c8981c, lpReserved=0x0 | out: lpBuffer=0x10c92720*, lpNumberOfCharsWritten=0x10c8981c*=0x30) returned 1 [0062.278] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x10cd3048 | out: lpFileInformation=0x10cd3048*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.340] CreateFileW (lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0062.340] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd78 [0062.340] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.340] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0062.340] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0062.340] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.340] FindClose (in: hFindFile=0x7efd78 | out: hFindFile=0x7efd78) returned 1 [0062.340] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\zh-cn\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0062.377] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0062.377] GetFileType (hFile=0x19c) returned 0x1 [0062.377] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0062.377] WriteFile (in: hFile=0x19c, lpBuffer=0x110e4480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110e4480*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0062.378] GetFileType (hFile=0x19c) returned 0x1 [0062.378] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0062.378] CloseHandle (hObject=0x19c) returned 1 [0062.378] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd3138 | out: lpFileInformation=0x10cd3138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960)) returned 1 [0062.378] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd3188 | out: lpFileInformation=0x10cd3188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0)) returned 1 [0062.378] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), fInfoLevelId=0x0, lpFileInformation=0x10cd31d8 | out: lpFileInformation=0x10cd31d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.378] CreateFileW (lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0062.378] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efc78 [0062.379] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.379] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0062.379] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0062.379] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.379] FindClose (in: hFindFile=0x7efc78 | out: hFindFile=0x7efc78) returned 1 [0062.379] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\zh-hk\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0062.452] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0062.452] GetFileType (hFile=0x19c) returned 0x1 [0062.452] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0062.452] WriteFile (in: hFile=0x19c, lpBuffer=0x110e4d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110e4d80*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0062.453] GetFileType (hFile=0x19c) returned 0x1 [0062.453] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0062.453] CloseHandle (hObject=0x19c) returned 1 [0062.453] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd32c8 | out: lpFileInformation=0x10cd32c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958)) returned 1 [0062.489] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x10cd3318 | out: lpFileInformation=0x10cd3318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558)) returned 1 [0062.489] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x10cd3368 | out: lpFileInformation=0x10cd3368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.489] CreateFileW (lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0062.489] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0178 [0062.489] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.489] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0062.489] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0062.489] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.489] FindClose (in: hFindFile=0x7f0178 | out: hFindFile=0x7f0178) returned 1 [0062.489] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\boot\\zh-tw\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0062.564] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0062.564] GetFileType (hFile=0x19c) returned 0x1 [0062.564] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0062.564] WriteFile (in: hFile=0x19c, lpBuffer=0x110e8000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x110e8000*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0062.565] GetFileType (hFile=0x19c) returned 0x1 [0062.565] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0062.565] CloseHandle (hObject=0x19c) returned 1 [0062.565] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c6d28 | out: lpFileInformation=0x110c6d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960)) returned 1 [0062.565] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x110c6d78 | out: lpFileInformation=0x110c6d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598)) returned 1 [0062.565] GetFileAttributesExW (in: lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), fInfoLevelId=0x0, lpFileInformation=0x110c6dc8 | out: lpFileInformation=0x110c6dc8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.566] CreateFileW (lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0062.566] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x10c89a58 | out: lpFindFileData=0x10c89a58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0062.566] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x110de0c0*, nNumberOfCharsToWrite=0x29, lpNumberOfCharsWritten=0x10c89880, lpReserved=0x0 | out: lpBuffer=0x110de0c0*, lpNumberOfCharsWritten=0x10c89880*=0x29) returned 1 [0062.603] GetFileAttributesExW (in: lpFileName="C:\\ESD" (normalized: "c:\\esd"), fInfoLevelId=0x0, lpFileInformation=0x110c6e18 | out: lpFileInformation=0x110c6e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.642] CreateFileW (lpFileName="C:\\ESD" (normalized: "c:\\esd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0062.642] FindFirstFileW (in: lpFileName="C:\\ESD\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f02b8 [0062.642] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.642] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.642] FindClose (in: hFindFile=0x7f02b8 | out: hFindFile=0x7f02b8) returned 1 [0062.642] CreateFileW (lpFileName="C:\\ESD\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\esd\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0062.643] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d94 | out: lpMode=0x10c89d94) returned 0 [0062.643] GetFileType (hFile=0x19c) returned 0x1 [0062.643] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0062.643] WriteFile (in: hFile=0x19c, lpBuffer=0x110e8900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d84, lpOverlapped=0x10c89d88 | out: lpBuffer=0x110e8900*, lpNumberOfBytesWritten=0x10c89d84*=0x464, lpOverlapped=0x10c89d88) returned 1 [0062.643] GetFileType (hFile=0x19c) returned 0x1 [0062.643] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0062.643] CloseHandle (hObject=0x19c) returned 1 [0062.644] GetFileAttributesExW (in: lpFileName="C:\\Logs" (normalized: "c:\\logs"), fInfoLevelId=0x0, lpFileInformation=0x110c6e68 | out: lpFileInformation=0x110c6e68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.862] SetEvent (hEvent=0x168) returned 1 [0062.862] CreateFileW (lpFileName="C:\\Logs" (normalized: "c:\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0062.862] FindFirstFileW (in: lpFileName="C:\\Logs\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eff78 [0062.946] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.515] SetEvent (hEvent=0x168) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0063.519] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0063.519] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0063.519] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0063.519] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0063.519] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0063.519] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0063.519] FindClose (in: hFindFile=0x7eff78 | out: hFindFile=0x7eff78) returned 1 [0063.519] CreateFileW (lpFileName="C:\\Logs\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\logs\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0063.520] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d94 | out: lpMode=0x10c89d94) returned 0 [0063.520] GetFileType (hFile=0x19c) returned 0x1 [0063.520] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0063.520] WriteFile (in: hFile=0x19c, lpBuffer=0x110e5680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d84, lpOverlapped=0x10c89d88 | out: lpBuffer=0x110e5680*, lpNumberOfBytesWritten=0x10c89d84*=0x464, lpOverlapped=0x10c89d88) returned 1 [0063.521] GetFileType (hFile=0x19c) returned 0x1 [0063.521] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0063.521] CloseHandle (hObject=0x19c) returned 1 [0063.521] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110f4ff8 | out: lpFileInformation=0x110f4ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0063.562] CreateFileW (lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0063.562] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0063.562] GetFileType (hFile=0x19c) returned 0x1 [0063.562] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0063.563] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ee10 | out: pbBuffer=0x1108ee10) returned 1 [0063.563] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ee20 | out: pbBuffer=0x1108ee20) returned 1 [0063.563] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6401 | out: pbBuffer=0x10cb6401) returned 1 [0063.563] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6601 | out: pbBuffer=0x10cb6601) returned 1 [0063.563] ReadFile (in: hFile=0x19c, lpBuffer=0x10d02000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10d02000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0063.599] GetFileType (hFile=0x19c) returned 0x1 [0063.599] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.599] WriteFile (in: hFile=0x19c, lpBuffer=0x10d14000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d14000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0063.600] GetFileType (hFile=0x19c) returned 0x1 [0063.600] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.600] GetFileType (hFile=0x19c) returned 0x1 [0063.600] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.600] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6500*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0063.600] GetFileType (hFile=0x19c) returned 0x1 [0063.600] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.600] GetFileType (hFile=0x19c) returned 0x1 [0063.600] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.600] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6700*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0063.600] GetFileType (hFile=0x19c) returned 0x1 [0063.600] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.600] GetFileType (hFile=0x19c) returned 0x1 [0063.600] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.600] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0063.600] GetFileType (hFile=0x19c) returned 0x1 [0063.600] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.600] CloseHandle (hObject=0x19c) returned 1 [0063.602] MoveFileExW (lpExistingFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), lpNewFileName="C:\\Logs\\Application.evtx.TRAPGET" (normalized: "c:\\logs\\application.evtx.trapget"), dwFlags=0x1) returned 1 [0063.612] GetFileAttributesExW (in: lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110f5138 | out: lpFileInformation=0x110f5138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0063.645] CreateFileW (lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0063.646] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0063.646] GetFileType (hFile=0x19c) returned 0x1 [0063.646] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0063.646] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ef00 | out: pbBuffer=0x1108ef00) returned 1 [0063.646] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ef10 | out: pbBuffer=0x1108ef10) returned 1 [0063.646] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6801 | out: pbBuffer=0x10cb6801) returned 1 [0063.646] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6a01 | out: pbBuffer=0x10cb6a01) returned 1 [0063.647] ReadFile (in: hFile=0x19c, lpBuffer=0x10d30000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10d30000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0063.884] GetFileType (hFile=0x19c) returned 0x1 [0063.884] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.884] WriteFile (in: hFile=0x19c, lpBuffer=0x10d42000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d42000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0063.885] GetFileType (hFile=0x19c) returned 0x1 [0063.885] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.885] GetFileType (hFile=0x19c) returned 0x1 [0063.885] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.885] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6900*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0063.885] GetFileType (hFile=0x19c) returned 0x1 [0063.885] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.885] GetFileType (hFile=0x19c) returned 0x1 [0063.885] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.885] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6b00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0063.885] GetFileType (hFile=0x19c) returned 0x1 [0063.886] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.886] GetFileType (hFile=0x19c) returned 0x1 [0063.886] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.886] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0063.886] GetFileType (hFile=0x19c) returned 0x1 [0063.886] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.886] CloseHandle (hObject=0x19c) returned 1 [0063.888] MoveFileExW (lpExistingFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), lpNewFileName="C:\\Logs\\HardwareEvents.evtx.TRAPGET" (normalized: "c:\\logs\\hardwareevents.evtx.trapget"), dwFlags=0x1) returned 1 [0063.888] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110f5278 | out: lpFileInformation=0x110f5278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0063.888] CreateFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0063.889] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0063.889] GetFileType (hFile=0x19c) returned 0x1 [0063.889] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0063.889] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108eff0 | out: pbBuffer=0x1108eff0) returned 1 [0063.889] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f000 | out: pbBuffer=0x1108f000) returned 1 [0063.889] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6c01 | out: pbBuffer=0x10cb6c01) returned 1 [0063.889] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb6e01 | out: pbBuffer=0x10cb6e01) returned 1 [0063.890] ReadFile (in: hFile=0x19c, lpBuffer=0x10d60000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10d60000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0063.926] GetFileType (hFile=0x19c) returned 0x1 [0063.926] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.926] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0063.926] GetFileType (hFile=0x19c) returned 0x1 [0063.926] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.926] GetFileType (hFile=0x19c) returned 0x1 [0063.926] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.926] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6d00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0063.927] GetFileType (hFile=0x19c) returned 0x1 [0063.927] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.927] GetFileType (hFile=0x19c) returned 0x1 [0063.927] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.927] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb6f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb6f00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0063.927] GetFileType (hFile=0x19c) returned 0x1 [0063.927] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.927] GetFileType (hFile=0x19c) returned 0x1 [0063.927] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.927] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0063.927] GetFileType (hFile=0x19c) returned 0x1 [0063.927] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0063.927] CloseHandle (hObject=0x19c) returned 1 [0063.929] MoveFileExW (lpExistingFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), lpNewFileName="C:\\Logs\\Internet Explorer.evtx.TRAPGET" (normalized: "c:\\logs\\internet explorer.evtx.trapget"), dwFlags=0x1) returned 1 [0063.930] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110f53b8 | out: lpFileInformation=0x110f53b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0063.930] CreateFileW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0063.930] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0063.930] GetFileType (hFile=0x19c) returned 0x1 [0063.930] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0063.930] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f0d0 | out: pbBuffer=0x1108f0d0) returned 1 [0063.930] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f0e0 | out: pbBuffer=0x1108f0e0) returned 1 [0063.930] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb7001 | out: pbBuffer=0x10cb7001) returned 1 [0063.931] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cb7201 | out: pbBuffer=0x10cb7201) returned 1 [0063.931] ReadFile (in: hFile=0x19c, lpBuffer=0x11014000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x11014000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0064.000] GetFileType (hFile=0x19c) returned 0x1 [0064.000] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.001] WriteFile (in: hFile=0x19c, lpBuffer=0x11026000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11026000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0064.001] GetFileType (hFile=0x19c) returned 0x1 [0064.001] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.001] GetFileType (hFile=0x19c) returned 0x1 [0064.001] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.001] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb7100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb7100*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.001] GetFileType (hFile=0x19c) returned 0x1 [0064.001] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.001] GetFileType (hFile=0x19c) returned 0x1 [0064.001] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.001] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb7300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cb7300*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.002] GetFileType (hFile=0x19c) returned 0x1 [0064.002] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.002] GetFileType (hFile=0x19c) returned 0x1 [0064.002] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.002] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0064.002] GetFileType (hFile=0x19c) returned 0x1 [0064.002] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.002] CloseHandle (hObject=0x19c) returned 1 [0064.004] MoveFileExW (lpExistingFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), lpNewFileName="C:\\Logs\\Key Management Service.evtx.TRAPGET" (normalized: "c:\\logs\\key management service.evtx.trapget"), dwFlags=0x1) returned 1 [0064.004] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6eb8 | out: lpFileInformation=0x110c6eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0064.005] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0064.005] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0064.005] GetFileType (hFile=0x19c) returned 0x1 [0064.005] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0064.005] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e460 | out: pbBuffer=0x10c6e460) returned 1 [0064.005] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e470 | out: pbBuffer=0x10c6e470) returned 1 [0064.005] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11046001 | out: pbBuffer=0x11046001) returned 1 [0064.005] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11046201 | out: pbBuffer=0x11046201) returned 1 [0064.006] ReadFile (in: hFile=0x19c, lpBuffer=0x11054000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x11054000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0064.042] GetFileType (hFile=0x19c) returned 0x1 [0064.042] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.042] WriteFile (in: hFile=0x19c, lpBuffer=0x11066000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11066000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0064.042] GetFileType (hFile=0x19c) returned 0x1 [0064.042] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.042] GetFileType (hFile=0x19c) returned 0x1 [0064.042] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.042] WriteFile (in: hFile=0x19c, lpBuffer=0x11046100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11046100*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.042] GetFileType (hFile=0x19c) returned 0x1 [0064.042] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.042] GetFileType (hFile=0x19c) returned 0x1 [0064.042] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.043] WriteFile (in: hFile=0x19c, lpBuffer=0x11046300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11046300*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.043] GetFileType (hFile=0x19c) returned 0x1 [0064.043] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.043] GetFileType (hFile=0x19c) returned 0x1 [0064.043] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.043] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0064.043] GetFileType (hFile=0x19c) returned 0x1 [0064.043] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.043] CloseHandle (hObject=0x19c) returned 1 [0064.045] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.trapget"), dwFlags=0x1) returned 1 [0064.045] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6ff8 | out: lpFileInformation=0x110c6ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0064.080] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0064.080] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0064.080] GetFileType (hFile=0x19c) returned 0x1 [0064.080] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0064.080] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e550 | out: pbBuffer=0x10c6e550) returned 1 [0064.080] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e560 | out: pbBuffer=0x10c6e560) returned 1 [0064.080] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11046501 | out: pbBuffer=0x11046501) returned 1 [0064.081] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11046701 | out: pbBuffer=0x11046701) returned 1 [0064.081] ReadFile (in: hFile=0x19c, lpBuffer=0x10d7c000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10d7c000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0064.116] GetFileType (hFile=0x19c) returned 0x1 [0064.116] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.116] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8e000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8e000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0064.117] GetFileType (hFile=0x19c) returned 0x1 [0064.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.117] GetFileType (hFile=0x19c) returned 0x1 [0064.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.117] WriteFile (in: hFile=0x19c, lpBuffer=0x11046600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11046600*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.117] GetFileType (hFile=0x19c) returned 0x1 [0064.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.117] GetFileType (hFile=0x19c) returned 0x1 [0064.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.117] WriteFile (in: hFile=0x19c, lpBuffer=0x11046800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11046800*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.117] GetFileType (hFile=0x19c) returned 0x1 [0064.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.117] GetFileType (hFile=0x19c) returned 0x1 [0064.118] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.118] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0064.118] GetFileType (hFile=0x19c) returned 0x1 [0064.118] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.118] CloseHandle (hObject=0x19c) returned 1 [0064.120] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.trapget"), dwFlags=0x1) returned 1 [0064.120] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c7138 | out: lpFileInformation=0x110c7138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0064.154] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0064.155] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0064.155] GetFileType (hFile=0x19c) returned 0x1 [0064.155] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0064.155] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e640 | out: pbBuffer=0x10c6e640) returned 1 [0064.155] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e650 | out: pbBuffer=0x10c6e650) returned 1 [0064.155] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11046a01 | out: pbBuffer=0x11046a01) returned 1 [0064.155] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11046c01 | out: pbBuffer=0x11046c01) returned 1 [0064.156] ReadFile (in: hFile=0x19c, lpBuffer=0x10da6000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10da6000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0064.194] GetFileType (hFile=0x19c) returned 0x1 [0064.194] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.194] WriteFile (in: hFile=0x19c, lpBuffer=0x10db8000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10db8000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0064.195] GetFileType (hFile=0x19c) returned 0x1 [0064.195] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.195] GetFileType (hFile=0x19c) returned 0x1 [0064.195] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.195] WriteFile (in: hFile=0x19c, lpBuffer=0x11046b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11046b00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.195] GetFileType (hFile=0x19c) returned 0x1 [0064.195] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.195] GetFileType (hFile=0x19c) returned 0x1 [0064.195] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.195] WriteFile (in: hFile=0x19c, lpBuffer=0x11046d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11046d00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.195] GetFileType (hFile=0x19c) returned 0x1 [0064.195] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.195] GetFileType (hFile=0x19c) returned 0x1 [0064.195] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.195] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0064.195] GetFileType (hFile=0x19c) returned 0x1 [0064.196] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.196] CloseHandle (hObject=0x19c) returned 1 [0064.198] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.trapget"), dwFlags=0x1) returned 1 [0064.198] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c7278 | out: lpFileInformation=0x110c7278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0064.198] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0064.199] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0064.199] GetFileType (hFile=0x19c) returned 0x1 [0064.199] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0064.199] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e730 | out: pbBuffer=0x10c6e730) returned 1 [0064.199] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e740 | out: pbBuffer=0x10c6e740) returned 1 [0064.199] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11046e01 | out: pbBuffer=0x11046e01) returned 1 [0064.199] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11047001 | out: pbBuffer=0x11047001) returned 1 [0064.200] ReadFile (in: hFile=0x19c, lpBuffer=0x10dd2000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10dd2000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0064.237] GetFileType (hFile=0x19c) returned 0x1 [0064.237] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.237] WriteFile (in: hFile=0x19c, lpBuffer=0x10de4000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10de4000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0064.238] GetFileType (hFile=0x19c) returned 0x1 [0064.238] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.238] GetFileType (hFile=0x19c) returned 0x1 [0064.238] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.238] WriteFile (in: hFile=0x19c, lpBuffer=0x11046f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11046f00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.238] GetFileType (hFile=0x19c) returned 0x1 [0064.238] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.238] GetFileType (hFile=0x19c) returned 0x1 [0064.238] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.238] WriteFile (in: hFile=0x19c, lpBuffer=0x11047100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11047100*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.238] GetFileType (hFile=0x19c) returned 0x1 [0064.238] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.239] GetFileType (hFile=0x19c) returned 0x1 [0064.239] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.239] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0064.239] GetFileType (hFile=0x19c) returned 0x1 [0064.239] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.239] CloseHandle (hObject=0x19c) returned 1 [0064.277] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.trapget"), dwFlags=0x1) returned 1 [0064.277] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c73b8 | out: lpFileInformation=0x110c73b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0064.277] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0064.277] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0064.278] GetFileType (hFile=0x19c) returned 0x1 [0064.278] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0064.278] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e810 | out: pbBuffer=0x10c6e810) returned 1 [0064.278] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e820 | out: pbBuffer=0x10c6e820) returned 1 [0064.278] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11047201 | out: pbBuffer=0x11047201) returned 1 [0064.278] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11047401 | out: pbBuffer=0x11047401) returned 1 [0064.278] ReadFile (in: hFile=0x19c, lpBuffer=0x10e04000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10e04000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0064.315] GetFileType (hFile=0x19c) returned 0x1 [0064.315] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.315] WriteFile (in: hFile=0x19c, lpBuffer=0x10e16000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e16000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0064.315] GetFileType (hFile=0x19c) returned 0x1 [0064.315] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.315] GetFileType (hFile=0x19c) returned 0x1 [0064.316] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.316] WriteFile (in: hFile=0x19c, lpBuffer=0x11047300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11047300*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.316] GetFileType (hFile=0x19c) returned 0x1 [0064.316] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.316] GetFileType (hFile=0x19c) returned 0x1 [0064.316] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.316] WriteFile (in: hFile=0x19c, lpBuffer=0x11047500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11047500*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.316] GetFileType (hFile=0x19c) returned 0x1 [0064.316] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.316] GetFileType (hFile=0x19c) returned 0x1 [0064.316] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.316] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0064.316] GetFileType (hFile=0x19c) returned 0x1 [0064.316] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.316] CloseHandle (hObject=0x19c) returned 1 [0064.318] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.trapget"), dwFlags=0x1) returned 1 [0064.319] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c74f8 | out: lpFileInformation=0x110c74f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0064.319] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0064.319] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0064.319] GetFileType (hFile=0x19c) returned 0x1 [0064.319] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0064.319] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e900 | out: pbBuffer=0x10c6e900) returned 1 [0064.319] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e910 | out: pbBuffer=0x10c6e910) returned 1 [0064.320] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11047601 | out: pbBuffer=0x11047601) returned 1 [0064.320] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11047801 | out: pbBuffer=0x11047801) returned 1 [0064.320] ReadFile (in: hFile=0x19c, lpBuffer=0x10e30000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10e30000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0064.368] GetFileType (hFile=0x19c) returned 0x1 [0064.368] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.368] WriteFile (in: hFile=0x19c, lpBuffer=0x10e42000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e42000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0064.369] GetFileType (hFile=0x19c) returned 0x1 [0064.369] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.369] GetFileType (hFile=0x19c) returned 0x1 [0064.369] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.369] WriteFile (in: hFile=0x19c, lpBuffer=0x11047700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11047700*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.369] GetFileType (hFile=0x19c) returned 0x1 [0064.369] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.369] GetFileType (hFile=0x19c) returned 0x1 [0064.369] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.369] WriteFile (in: hFile=0x19c, lpBuffer=0x11047900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11047900*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.369] GetFileType (hFile=0x19c) returned 0x1 [0064.369] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.369] GetFileType (hFile=0x19c) returned 0x1 [0064.370] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.370] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0064.370] GetFileType (hFile=0x19c) returned 0x1 [0064.370] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.370] CloseHandle (hObject=0x19c) returned 1 [0064.372] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.trapget"), dwFlags=0x1) returned 1 [0064.372] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c7638 | out: lpFileInformation=0x110c7638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0064.372] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0064.373] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0064.373] GetFileType (hFile=0x19c) returned 0x1 [0064.373] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0064.373] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e9f0 | out: pbBuffer=0x10c6e9f0) returned 1 [0064.373] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea00 | out: pbBuffer=0x10c6ea00) returned 1 [0064.373] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11047b01 | out: pbBuffer=0x11047b01) returned 1 [0064.373] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11047d01 | out: pbBuffer=0x11047d01) returned 1 [0064.374] ReadFile (in: hFile=0x19c, lpBuffer=0x10e5e000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10e5e000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0064.409] GetFileType (hFile=0x19c) returned 0x1 [0064.410] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.410] WriteFile (in: hFile=0x19c, lpBuffer=0x10e70000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e70000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0064.410] GetFileType (hFile=0x19c) returned 0x1 [0064.410] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.410] GetFileType (hFile=0x19c) returned 0x1 [0064.410] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.410] WriteFile (in: hFile=0x19c, lpBuffer=0x11047c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11047c00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.410] GetFileType (hFile=0x19c) returned 0x1 [0064.410] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.410] GetFileType (hFile=0x19c) returned 0x1 [0064.410] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.410] WriteFile (in: hFile=0x19c, lpBuffer=0x11047e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11047e00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.411] GetFileType (hFile=0x19c) returned 0x1 [0064.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.411] GetFileType (hFile=0x19c) returned 0x1 [0064.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.411] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0064.411] GetFileType (hFile=0x19c) returned 0x1 [0064.411] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.411] CloseHandle (hObject=0x19c) returned 1 [0064.413] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.trapget"), dwFlags=0x1) returned 1 [0064.414] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c7778 | out: lpFileInformation=0x110c7778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0064.450] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0064.450] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0064.450] GetFileType (hFile=0x19c) returned 0x1 [0064.450] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0064.450] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eae0 | out: pbBuffer=0x10c6eae0) returned 1 [0064.450] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eaf0 | out: pbBuffer=0x10c6eaf0) returned 1 [0064.450] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11047f01 | out: pbBuffer=0x11047f01) returned 1 [0064.450] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86101 | out: pbBuffer=0x10e86101) returned 1 [0064.451] SetEvent (hEvent=0x158) returned 1 [0064.451] ReadFile (in: hFile=0x19c, lpBuffer=0x10e8a000, nNumberOfBytesToRead=0x111000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10e8a000*, lpNumberOfBytesRead=0x10c89cb8*=0x111000, lpOverlapped=0x0) returned 1 [0064.534] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0064.729] GetFileType (hFile=0x19c) returned 0x1 [0064.729] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.729] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfa000*, nNumberOfBytesToWrite=0x111000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfa000*, lpNumberOfBytesWritten=0x10c89cb8*=0x111000, lpOverlapped=0x10c89cbc) returned 1 [0064.733] GetFileType (hFile=0x19c) returned 0x1 [0064.733] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.733] GetFileType (hFile=0x19c) returned 0x1 [0064.733] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.734] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e86000*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.734] GetFileType (hFile=0x19c) returned 0x1 [0064.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.734] GetFileType (hFile=0x19c) returned 0x1 [0064.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.734] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e86200*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0064.734] GetFileType (hFile=0x19c) returned 0x1 [0064.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.734] GetFileType (hFile=0x19c) returned 0x1 [0064.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.734] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0064.734] GetFileType (hFile=0x19c) returned 0x1 [0064.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0064.734] CloseHandle (hObject=0x19c) returned 1 [0065.119] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0065.120] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0065.120] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0065.138] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0065.138] GetFileType (hFile=0x19c) returned 0x1 [0065.138] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0065.138] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0065.138] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e050 | out: pbBuffer=0x10c6e050) returned 1 [0065.138] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86101 | out: pbBuffer=0x10e86101) returned 1 [0065.139] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86401 | out: pbBuffer=0x10e86401) returned 1 [0065.139] ReadFile (in: hFile=0x19c, lpBuffer=0x11092000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x11092000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0065.248] GetFileType (hFile=0x19c) returned 0x1 [0065.249] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.249] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0065.249] GetFileType (hFile=0x19c) returned 0x1 [0065.249] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.249] GetFileType (hFile=0x19c) returned 0x1 [0065.249] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.249] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e86300*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0065.249] GetFileType (hFile=0x19c) returned 0x1 [0065.249] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.249] GetFileType (hFile=0x19c) returned 0x1 [0065.249] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.249] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e86500*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0065.250] GetFileType (hFile=0x19c) returned 0x1 [0065.250] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.250] GetFileType (hFile=0x19c) returned 0x1 [0065.250] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.250] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0065.250] GetFileType (hFile=0x19c) returned 0x1 [0065.250] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.250] CloseHandle (hObject=0x19c) returned 1 [0065.252] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0065.252] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2198 | out: lpFileInformation=0x10cd2198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1 [0065.253] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0065.253] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0065.253] GetFileType (hFile=0x19c) returned 0x1 [0065.253] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0065.253] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e120 | out: pbBuffer=0x10c6e120) returned 1 [0065.253] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e130 | out: pbBuffer=0x10c6e130) returned 1 [0065.253] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86601 | out: pbBuffer=0x10e86601) returned 1 [0065.253] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86801 | out: pbBuffer=0x10e86801) returned 1 [0065.254] GetFileType (hFile=0x19c) returned 0x1 [0065.254] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.254] ReadFile (in: hFile=0x19c, lpBuffer=0x10f9c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f9c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0065.298] GetFileType (hFile=0x19c) returned 0x1 [0065.298] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.395] GetFileType (hFile=0x19c) returned 0x1 [0065.395] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.395] WriteFile (in: hFile=0x19c, lpBuffer=0x10e0c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e0c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0065.396] GetFileType (hFile=0x19c) returned 0x1 [0065.396] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.396] GetFileType (hFile=0x19c) returned 0x1 [0065.396] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.396] ReadFile (in: hFile=0x19c, lpBuffer=0x110f8000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110f8000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0065.462] GetFileType (hFile=0x19c) returned 0x1 [0065.462] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.499] GetFileType (hFile=0x19c) returned 0x1 [0065.499] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.499] WriteFile (in: hFile=0x19c, lpBuffer=0x11148000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11148000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0065.499] GetFileType (hFile=0x19c) returned 0x1 [0065.499] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.500] SetEvent (hEvent=0x158) returned 1 [0065.500] GetFileType (hFile=0x19c) returned 0x1 [0065.500] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.500] ReadFile (in: hFile=0x19c, lpBuffer=0x11198000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11198000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0065.510] GetFileType (hFile=0x19c) returned 0x1 [0065.510] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0065.511] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0065.605] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0065.605] SetEvent (hEvent=0x158) returned 1 [0065.605] SetEvent (hEvent=0x170) returned 1 [0065.605] SetEvent (hEvent=0x138) returned 1 [0065.605] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0066.075] SetEvent (hEvent=0x168) returned 1 [0066.075] SetEvent (hEvent=0x138) returned 1 [0066.078] GetFileType (hFile=0x19c) returned 0x1 [0066.078] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.078] WriteFile (in: hFile=0x19c, lpBuffer=0x10f9c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f9c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0066.079] GetFileType (hFile=0x19c) returned 0x1 [0066.079] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.079] GetFileType (hFile=0x19c) returned 0x1 [0066.079] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.079] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e86700*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.083] GetFileType (hFile=0x19c) returned 0x1 [0066.083] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.083] GetFileType (hFile=0x19c) returned 0x1 [0066.083] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.083] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e86900*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.083] GetFileType (hFile=0x19c) returned 0x1 [0066.083] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.083] GetFileType (hFile=0x19c) returned 0x1 [0066.083] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.083] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0066.084] GetFileType (hFile=0x19c) returned 0x1 [0066.084] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.084] CloseHandle (hObject=0x19c) returned 1 [0066.257] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0066.258] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0066.301] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0066.301] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0066.302] GetFileType (hFile=0x19c) returned 0x1 [0066.302] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0066.302] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e020 | out: pbBuffer=0x1108e020) returned 1 [0066.302] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e030 | out: pbBuffer=0x1108e030) returned 1 [0066.302] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86201 | out: pbBuffer=0x10e86201) returned 1 [0066.302] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86401 | out: pbBuffer=0x10e86401) returned 1 [0066.303] ReadFile (in: hFile=0x19c, lpBuffer=0x11092000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x11092000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0066.354] GetFileType (hFile=0x19c) returned 0x1 [0066.354] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.354] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0066.355] GetFileType (hFile=0x19c) returned 0x1 [0066.355] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.355] GetFileType (hFile=0x19c) returned 0x1 [0066.355] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.355] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e86300*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.355] GetFileType (hFile=0x19c) returned 0x1 [0066.355] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.355] GetFileType (hFile=0x19c) returned 0x1 [0066.355] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.355] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e86500*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.355] GetFileType (hFile=0x19c) returned 0x1 [0066.355] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.355] GetFileType (hFile=0x19c) returned 0x1 [0066.355] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.355] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0066.356] GetFileType (hFile=0x19c) returned 0x1 [0066.356] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.356] CloseHandle (hObject=0x19c) returned 1 [0066.357] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.trapget"), dwFlags=0x1) returned 1 [0066.394] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd21e8 | out: lpFileInformation=0x10cd21e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0066.394] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0066.394] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0066.394] GetFileType (hFile=0x19c) returned 0x1 [0066.394] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0066.394] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e100 | out: pbBuffer=0x1108e100) returned 1 [0066.394] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e110 | out: pbBuffer=0x1108e110) returned 1 [0066.395] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86801 | out: pbBuffer=0x10e86801) returned 1 [0066.395] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86b01 | out: pbBuffer=0x10e86b01) returned 1 [0066.395] ReadFile (in: hFile=0x19c, lpBuffer=0x110c8000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x110c8000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0066.434] GetFileType (hFile=0x19c) returned 0x1 [0066.434] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.434] WriteFile (in: hFile=0x19c, lpBuffer=0x110da000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110da000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0066.434] GetFileType (hFile=0x19c) returned 0x1 [0066.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.435] GetFileType (hFile=0x19c) returned 0x1 [0066.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.435] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e86a00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.435] GetFileType (hFile=0x19c) returned 0x1 [0066.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.435] GetFileType (hFile=0x19c) returned 0x1 [0066.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.435] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e86c00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.435] GetFileType (hFile=0x19c) returned 0x1 [0066.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.435] GetFileType (hFile=0x19c) returned 0x1 [0066.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.435] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0066.435] GetFileType (hFile=0x19c) returned 0x1 [0066.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.435] CloseHandle (hObject=0x19c) returned 1 [0066.437] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.trapget"), dwFlags=0x1) returned 1 [0066.438] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2328 | out: lpFileInformation=0x10cd2328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0066.438] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0066.438] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0066.438] GetFileType (hFile=0x19c) returned 0x1 [0066.438] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0066.438] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e1f0 | out: pbBuffer=0x1108e1f0) returned 1 [0066.438] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e200 | out: pbBuffer=0x1108e200) returned 1 [0066.438] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86d01 | out: pbBuffer=0x10e86d01) returned 1 [0066.439] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86f01 | out: pbBuffer=0x10e86f01) returned 1 [0066.439] ReadFile (in: hFile=0x19c, lpBuffer=0x10e88000, nNumberOfBytesToRead=0x101000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10e88000*, lpNumberOfBytesRead=0x10c89cb8*=0x101000, lpOverlapped=0x0) returned 1 [0066.552] GetFileType (hFile=0x19c) returned 0x1 [0066.552] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.552] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfa000*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfa000*, lpNumberOfBytesWritten=0x10c89cb8*=0x101000, lpOverlapped=0x10c89cbc) returned 1 [0066.556] GetFileType (hFile=0x19c) returned 0x1 [0066.556] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.556] GetFileType (hFile=0x19c) returned 0x1 [0066.556] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.556] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e86e00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.556] GetFileType (hFile=0x19c) returned 0x1 [0066.556] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.556] GetFileType (hFile=0x19c) returned 0x1 [0066.556] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.556] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e87000*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.556] GetFileType (hFile=0x19c) returned 0x1 [0066.556] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.556] GetFileType (hFile=0x19c) returned 0x1 [0066.556] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.556] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0066.557] GetFileType (hFile=0x19c) returned 0x1 [0066.557] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.557] CloseHandle (hObject=0x19c) returned 1 [0066.570] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0066.571] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2468 | out: lpFileInformation=0x10cd2468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0066.571] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0066.571] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0066.571] GetFileType (hFile=0x19c) returned 0x1 [0066.571] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0066.572] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e2e0 | out: pbBuffer=0x1108e2e0) returned 1 [0066.572] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e2f0 | out: pbBuffer=0x1108e2f0) returned 1 [0066.572] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87101 | out: pbBuffer=0x10e87101) returned 1 [0066.572] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87301 | out: pbBuffer=0x10e87301) returned 1 [0066.572] ReadFile (in: hFile=0x19c, lpBuffer=0x10f8a000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10f8a000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0066.638] GetFileType (hFile=0x19c) returned 0x1 [0066.638] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.638] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0066.639] GetFileType (hFile=0x19c) returned 0x1 [0066.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.639] GetFileType (hFile=0x19c) returned 0x1 [0066.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.639] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e87200*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.639] GetFileType (hFile=0x19c) returned 0x1 [0066.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.639] GetFileType (hFile=0x19c) returned 0x1 [0066.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.639] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e87400*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.639] GetFileType (hFile=0x19c) returned 0x1 [0066.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.639] GetFileType (hFile=0x19c) returned 0x1 [0066.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.639] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0066.639] GetFileType (hFile=0x19c) returned 0x1 [0066.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.640] CloseHandle (hObject=0x19c) returned 1 [0066.641] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0066.642] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd25a8 | out: lpFileInformation=0x10cd25a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0066.693] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0066.693] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0066.693] GetFileType (hFile=0x19c) returned 0x1 [0066.693] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0066.693] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e3d0 | out: pbBuffer=0x1108e3d0) returned 1 [0066.693] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e3e0 | out: pbBuffer=0x1108e3e0) returned 1 [0066.693] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87501 | out: pbBuffer=0x10e87501) returned 1 [0066.694] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87701 | out: pbBuffer=0x10e87701) returned 1 [0066.694] ReadFile (in: hFile=0x19c, lpBuffer=0x11010000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x11010000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0066.886] GetFileType (hFile=0x19c) returned 0x1 [0066.886] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.886] WriteFile (in: hFile=0x19c, lpBuffer=0x11022000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11022000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0066.887] GetFileType (hFile=0x19c) returned 0x1 [0066.887] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.887] GetFileType (hFile=0x19c) returned 0x1 [0066.887] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.887] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e87600*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.887] GetFileType (hFile=0x19c) returned 0x1 [0066.887] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.887] GetFileType (hFile=0x19c) returned 0x1 [0066.887] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.887] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e87800*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.887] GetFileType (hFile=0x19c) returned 0x1 [0066.887] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.887] GetFileType (hFile=0x19c) returned 0x1 [0066.887] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.888] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0066.888] GetFileType (hFile=0x19c) returned 0x1 [0066.888] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.888] CloseHandle (hObject=0x19c) returned 1 [0066.938] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0066.939] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd26e8 | out: lpFileInformation=0x10cd26e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0066.939] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0066.939] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0066.939] GetFileType (hFile=0x19c) returned 0x1 [0066.939] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0066.939] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e4b0 | out: pbBuffer=0x1108e4b0) returned 1 [0066.939] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e4c0 | out: pbBuffer=0x1108e4c0) returned 1 [0066.939] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87901 | out: pbBuffer=0x10e87901) returned 1 [0066.940] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87b01 | out: pbBuffer=0x10e87b01) returned 1 [0066.940] ReadFile (in: hFile=0x19c, lpBuffer=0x11036000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x11036000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0066.997] GetFileType (hFile=0x19c) returned 0x1 [0066.997] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.997] WriteFile (in: hFile=0x19c, lpBuffer=0x11048000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11048000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0066.997] GetFileType (hFile=0x19c) returned 0x1 [0066.997] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.997] GetFileType (hFile=0x19c) returned 0x1 [0066.997] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.997] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e87a00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.998] GetFileType (hFile=0x19c) returned 0x1 [0066.998] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.998] GetFileType (hFile=0x19c) returned 0x1 [0066.998] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.998] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e87c00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0066.998] GetFileType (hFile=0x19c) returned 0x1 [0066.998] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.998] GetFileType (hFile=0x19c) returned 0x1 [0066.998] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.998] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0066.998] GetFileType (hFile=0x19c) returned 0x1 [0066.998] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0066.998] CloseHandle (hObject=0x19c) returned 1 [0067.000] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0067.001] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2828 | out: lpFileInformation=0x10cd2828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0067.001] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0067.001] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0067.001] GetFileType (hFile=0x19c) returned 0x1 [0067.001] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0067.001] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e5a0 | out: pbBuffer=0x1108e5a0) returned 1 [0067.001] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e5b0 | out: pbBuffer=0x1108e5b0) returned 1 [0067.001] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87e01 | out: pbBuffer=0x10e87e01) returned 1 [0067.001] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1105e001 | out: pbBuffer=0x1105e001) returned 1 [0067.002] ReadFile (in: hFile=0x19c, lpBuffer=0x11066000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x11066000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0067.042] SetEvent (hEvent=0x170) returned 1 [0067.042] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0067.081] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0067.081] SetEvent (hEvent=0x170) returned 1 [0067.081] SetEvent (hEvent=0x138) returned 1 [0067.081] SetEvent (hEvent=0x158) returned 1 [0067.081] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0067.166] SetEvent (hEvent=0x168) returned 1 [0067.166] SetEvent (hEvent=0x158) returned 1 [0067.167] GetFileType (hFile=0x19c) returned 0x1 [0067.167] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.167] WriteFile (in: hFile=0x19c, lpBuffer=0x10dfc000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10dfc000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0067.167] GetFileType (hFile=0x19c) returned 0x1 [0067.167] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.167] GetFileType (hFile=0x19c) returned 0x1 [0067.167] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.167] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e87f00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.167] GetFileType (hFile=0x19c) returned 0x1 [0067.168] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.168] GetFileType (hFile=0x19c) returned 0x1 [0067.168] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.168] WriteFile (in: hFile=0x19c, lpBuffer=0x1105e200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1105e200*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.168] GetFileType (hFile=0x19c) returned 0x1 [0067.168] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.168] GetFileType (hFile=0x19c) returned 0x1 [0067.168] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.168] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0067.168] GetFileType (hFile=0x19c) returned 0x1 [0067.168] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.168] CloseHandle (hObject=0x19c) returned 1 [0067.170] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0067.170] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0067.171] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0067.171] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0067.171] GetFileType (hFile=0x19c) returned 0x1 [0067.171] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0067.171] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e030 | out: pbBuffer=0x1108e030) returned 1 [0067.171] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e040 | out: pbBuffer=0x1108e040) returned 1 [0067.171] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1105e001 | out: pbBuffer=0x1105e001) returned 1 [0067.171] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1105e301 | out: pbBuffer=0x1105e301) returned 1 [0067.172] ReadFile (in: hFile=0x19c, lpBuffer=0x11092000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x11092000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0067.224] GetFileType (hFile=0x19c) returned 0x1 [0067.224] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.224] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0067.225] GetFileType (hFile=0x19c) returned 0x1 [0067.225] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.225] GetFileType (hFile=0x19c) returned 0x1 [0067.225] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.225] WriteFile (in: hFile=0x19c, lpBuffer=0x1105e100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1105e100*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.225] GetFileType (hFile=0x19c) returned 0x1 [0067.225] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.225] GetFileType (hFile=0x19c) returned 0x1 [0067.225] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.225] WriteFile (in: hFile=0x19c, lpBuffer=0x1105e400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1105e400*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.225] GetFileType (hFile=0x19c) returned 0x1 [0067.225] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.225] GetFileType (hFile=0x19c) returned 0x1 [0067.225] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.225] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0067.225] GetFileType (hFile=0x19c) returned 0x1 [0067.225] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.225] CloseHandle (hObject=0x19c) returned 1 [0067.227] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0067.228] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2198 | out: lpFileInformation=0x10cd2198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0067.228] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0067.228] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0067.228] GetFileType (hFile=0x19c) returned 0x1 [0067.228] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0067.228] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e110 | out: pbBuffer=0x1108e110) returned 1 [0067.228] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e120 | out: pbBuffer=0x1108e120) returned 1 [0067.228] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1105e501 | out: pbBuffer=0x1105e501) returned 1 [0067.229] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1105e701 | out: pbBuffer=0x1105e701) returned 1 [0067.229] ReadFile (in: hFile=0x19c, lpBuffer=0x110c8000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x110c8000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0067.276] GetFileType (hFile=0x19c) returned 0x1 [0067.276] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.276] WriteFile (in: hFile=0x19c, lpBuffer=0x110da000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x110da000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0067.276] GetFileType (hFile=0x19c) returned 0x1 [0067.276] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.276] GetFileType (hFile=0x19c) returned 0x1 [0067.276] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.276] WriteFile (in: hFile=0x19c, lpBuffer=0x1105e600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1105e600*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.276] GetFileType (hFile=0x19c) returned 0x1 [0067.276] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.276] GetFileType (hFile=0x19c) returned 0x1 [0067.276] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.277] WriteFile (in: hFile=0x19c, lpBuffer=0x1105e800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1105e800*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.277] GetFileType (hFile=0x19c) returned 0x1 [0067.277] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.277] GetFileType (hFile=0x19c) returned 0x1 [0067.277] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.277] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0067.277] GetFileType (hFile=0x19c) returned 0x1 [0067.277] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.277] CloseHandle (hObject=0x19c) returned 1 [0067.279] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.trapget"), dwFlags=0x1) returned 1 [0067.280] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd22d8 | out: lpFileInformation=0x10cd22d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0067.322] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0067.322] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0067.322] GetFileType (hFile=0x19c) returned 0x1 [0067.322] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0067.322] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e200 | out: pbBuffer=0x1108e200) returned 1 [0067.322] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e210 | out: pbBuffer=0x1108e210) returned 1 [0067.322] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1105e901 | out: pbBuffer=0x1105e901) returned 1 [0067.323] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1105eb01 | out: pbBuffer=0x1105eb01) returned 1 [0067.323] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0067.359] GetFileType (hFile=0x19c) returned 0x1 [0067.359] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.359] WriteFile (in: hFile=0x19c, lpBuffer=0x11010000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x11010000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0067.360] GetFileType (hFile=0x19c) returned 0x1 [0067.360] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.360] GetFileType (hFile=0x19c) returned 0x1 [0067.360] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.360] WriteFile (in: hFile=0x19c, lpBuffer=0x1105ea00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1105ea00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.360] GetFileType (hFile=0x19c) returned 0x1 [0067.360] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.360] GetFileType (hFile=0x19c) returned 0x1 [0067.360] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.360] WriteFile (in: hFile=0x19c, lpBuffer=0x1105ec00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1105ec00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.360] GetFileType (hFile=0x19c) returned 0x1 [0067.360] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.360] GetFileType (hFile=0x19c) returned 0x1 [0067.360] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.361] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0067.361] GetFileType (hFile=0x19c) returned 0x1 [0067.361] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.361] CloseHandle (hObject=0x19c) returned 1 [0067.362] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0067.363] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2418 | out: lpFileInformation=0x10cd2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0067.363] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0067.363] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0067.363] GetFileType (hFile=0x19c) returned 0x1 [0067.363] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0067.364] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e2f0 | out: pbBuffer=0x1108e2f0) returned 1 [0067.364] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e300 | out: pbBuffer=0x1108e300) returned 1 [0067.364] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1105ed01 | out: pbBuffer=0x1105ed01) returned 1 [0067.364] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1105ef01 | out: pbBuffer=0x1105ef01) returned 1 [0067.364] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfa000, nNumberOfBytesToRead=0x101000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10cfa000*, lpNumberOfBytesRead=0x10c8fcb8*=0x101000, lpOverlapped=0x0) returned 1 [0067.476] GetFileType (hFile=0x19c) returned 0x1 [0067.476] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.476] WriteFile (in: hFile=0x19c, lpBuffer=0x10e88000*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e88000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x101000, lpOverlapped=0x10c8fcbc) returned 1 [0067.480] GetFileType (hFile=0x19c) returned 0x1 [0067.480] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.480] GetFileType (hFile=0x19c) returned 0x1 [0067.480] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.481] WriteFile (in: hFile=0x19c, lpBuffer=0x1105ee00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1105ee00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.481] GetFileType (hFile=0x19c) returned 0x1 [0067.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.481] GetFileType (hFile=0x19c) returned 0x1 [0067.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.481] WriteFile (in: hFile=0x19c, lpBuffer=0x1105f000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1105f000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.481] GetFileType (hFile=0x19c) returned 0x1 [0067.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.481] GetFileType (hFile=0x19c) returned 0x1 [0067.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.481] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0067.481] GetFileType (hFile=0x19c) returned 0x1 [0067.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.481] CloseHandle (hObject=0x19c) returned 1 [0067.549] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.trapget"), dwFlags=0x1) returned 1 [0067.560] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6008 | out: lpFileInformation=0x110c6008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0067.561] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0067.684] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0067.684] GetFileType (hFile=0x19c) returned 0x1 [0067.684] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0067.684] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0067.684] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e050 | out: pbBuffer=0x10c6e050) returned 1 [0067.684] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86001 | out: pbBuffer=0x10e86001) returned 1 [0067.685] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86201 | out: pbBuffer=0x10e86201) returned 1 [0067.685] ReadFile (in: hFile=0x19c, lpBuffer=0x11022000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x11022000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0067.743] GetFileType (hFile=0x19c) returned 0x1 [0067.743] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.743] WriteFile (in: hFile=0x19c, lpBuffer=0x11034000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x11034000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0067.744] GetFileType (hFile=0x19c) returned 0x1 [0067.744] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.744] GetFileType (hFile=0x19c) returned 0x1 [0067.744] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.744] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e86100*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.744] GetFileType (hFile=0x19c) returned 0x1 [0067.744] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.744] GetFileType (hFile=0x19c) returned 0x1 [0067.744] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.744] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e86300*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.744] GetFileType (hFile=0x19c) returned 0x1 [0067.744] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.744] GetFileType (hFile=0x19c) returned 0x1 [0067.744] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.744] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0067.744] GetFileType (hFile=0x19c) returned 0x1 [0067.744] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.744] CloseHandle (hObject=0x19c) returned 1 [0067.837] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.trapget"), dwFlags=0x1) returned 1 [0067.838] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6148 | out: lpFileInformation=0x110c6148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0067.838] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0067.838] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0067.838] GetFileType (hFile=0x19c) returned 0x1 [0067.838] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0067.838] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e120 | out: pbBuffer=0x10c6e120) returned 1 [0067.838] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e130 | out: pbBuffer=0x10c6e130) returned 1 [0067.838] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86601 | out: pbBuffer=0x10e86601) returned 1 [0067.839] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86801 | out: pbBuffer=0x10e86801) returned 1 [0067.839] ReadFile (in: hFile=0x19c, lpBuffer=0x10f8a000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10f8a000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0067.878] GetFileType (hFile=0x19c) returned 0x1 [0067.878] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.878] WriteFile (in: hFile=0x19c, lpBuffer=0x10f9c000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10f9c000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0067.878] GetFileType (hFile=0x19c) returned 0x1 [0067.878] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.878] GetFileType (hFile=0x19c) returned 0x1 [0067.878] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.878] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e86700*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.879] GetFileType (hFile=0x19c) returned 0x1 [0067.879] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.879] GetFileType (hFile=0x19c) returned 0x1 [0067.879] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.879] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e86900*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.879] GetFileType (hFile=0x19c) returned 0x1 [0067.879] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.879] GetFileType (hFile=0x19c) returned 0x1 [0067.879] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.879] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0067.879] GetFileType (hFile=0x19c) returned 0x1 [0067.879] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.879] CloseHandle (hObject=0x19c) returned 1 [0067.881] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0067.882] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6288 | out: lpFileInformation=0x110c6288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0067.882] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0067.882] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0067.882] GetFileType (hFile=0x19c) returned 0x1 [0067.882] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0067.882] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e210 | out: pbBuffer=0x10c6e210) returned 1 [0067.882] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e220 | out: pbBuffer=0x10c6e220) returned 1 [0067.882] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86b01 | out: pbBuffer=0x10e86b01) returned 1 [0067.883] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86d01 | out: pbBuffer=0x10e86d01) returned 1 [0067.883] ReadFile (in: hFile=0x19c, lpBuffer=0x10fae000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10fae000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0067.980] GetFileType (hFile=0x19c) returned 0x1 [0067.980] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.980] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc0000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10fc0000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0067.981] GetFileType (hFile=0x19c) returned 0x1 [0067.981] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.981] GetFileType (hFile=0x19c) returned 0x1 [0067.981] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.981] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e86c00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.981] GetFileType (hFile=0x19c) returned 0x1 [0067.981] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.981] GetFileType (hFile=0x19c) returned 0x1 [0067.981] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.981] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e86e00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0067.981] GetFileType (hFile=0x19c) returned 0x1 [0067.981] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.981] GetFileType (hFile=0x19c) returned 0x1 [0067.981] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.982] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0067.982] GetFileType (hFile=0x19c) returned 0x1 [0067.982] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0067.982] CloseHandle (hObject=0x19c) returned 1 [0067.983] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.trapget"), dwFlags=0x1) returned 1 [0067.986] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c63c8 | out: lpFileInformation=0x110c63c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0067.987] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0067.987] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0067.987] GetFileType (hFile=0x19c) returned 0x1 [0067.987] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0067.987] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e300 | out: pbBuffer=0x10c6e300) returned 1 [0067.987] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e310 | out: pbBuffer=0x10c6e310) returned 1 [0067.987] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86f01 | out: pbBuffer=0x10e86f01) returned 1 [0067.987] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87101 | out: pbBuffer=0x10e87101) returned 1 [0067.988] ReadFile (in: hFile=0x19c, lpBuffer=0x10fd8000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10fd8000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0068.116] GetFileType (hFile=0x19c) returned 0x1 [0068.116] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.116] WriteFile (in: hFile=0x19c, lpBuffer=0x10e0e000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e0e000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0068.116] GetFileType (hFile=0x19c) returned 0x1 [0068.116] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.116] GetFileType (hFile=0x19c) returned 0x1 [0068.116] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.116] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e87000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0068.116] GetFileType (hFile=0x19c) returned 0x1 [0068.116] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.116] GetFileType (hFile=0x19c) returned 0x1 [0068.116] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.117] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e87200*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0068.117] GetFileType (hFile=0x19c) returned 0x1 [0068.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.117] GetFileType (hFile=0x19c) returned 0x1 [0068.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.117] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0068.117] GetFileType (hFile=0x19c) returned 0x1 [0068.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.117] CloseHandle (hObject=0x19c) returned 1 [0068.119] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.trapget"), dwFlags=0x1) returned 1 [0068.119] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6508 | out: lpFileInformation=0x110c6508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0068.175] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.175] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0068.175] GetFileType (hFile=0x19c) returned 0x1 [0068.175] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0068.175] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e3f0 | out: pbBuffer=0x10c6e3f0) returned 1 [0068.175] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e400 | out: pbBuffer=0x10c6e400) returned 1 [0068.175] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87301 | out: pbBuffer=0x10e87301) returned 1 [0068.176] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87501 | out: pbBuffer=0x10e87501) returned 1 [0068.176] SetEvent (hEvent=0x138) returned 1 [0068.176] ReadFile (in: hFile=0x19c, lpBuffer=0x10e22000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10e22000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0068.312] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0068.629] GetFileType (hFile=0x19c) returned 0x1 [0068.629] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.629] WriteFile (in: hFile=0x19c, lpBuffer=0x11092000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x11092000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0068.629] GetFileType (hFile=0x19c) returned 0x1 [0068.629] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.629] GetFileType (hFile=0x19c) returned 0x1 [0068.629] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.630] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e87400*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0068.630] GetFileType (hFile=0x19c) returned 0x1 [0068.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.630] GetFileType (hFile=0x19c) returned 0x1 [0068.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.630] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e87600*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0068.630] GetFileType (hFile=0x19c) returned 0x1 [0068.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.630] GetFileType (hFile=0x19c) returned 0x1 [0068.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.630] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0068.630] GetFileType (hFile=0x19c) returned 0x1 [0068.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.630] CloseHandle (hObject=0x19c) returned 1 [0068.632] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0068.633] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0068.633] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.633] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0068.633] GetFileType (hFile=0x19c) returned 0x1 [0068.633] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0068.633] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e030 | out: pbBuffer=0x1108e030) returned 1 [0068.633] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e040 | out: pbBuffer=0x1108e040) returned 1 [0068.633] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86001 | out: pbBuffer=0x10e86001) returned 1 [0068.634] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86201 | out: pbBuffer=0x10e86201) returned 1 [0068.634] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0068.697] GetFileType (hFile=0x19c) returned 0x1 [0068.697] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.697] WriteFile (in: hFile=0x19c, lpBuffer=0x110c8000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x110c8000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0068.697] GetFileType (hFile=0x19c) returned 0x1 [0068.697] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.697] GetFileType (hFile=0x19c) returned 0x1 [0068.697] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.697] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e86100*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0068.697] GetFileType (hFile=0x19c) returned 0x1 [0068.697] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.697] GetFileType (hFile=0x19c) returned 0x1 [0068.697] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.697] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e86300*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0068.698] GetFileType (hFile=0x19c) returned 0x1 [0068.698] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.698] GetFileType (hFile=0x19c) returned 0x1 [0068.698] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.698] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0068.698] GetFileType (hFile=0x19c) returned 0x1 [0068.698] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.698] CloseHandle (hObject=0x19c) returned 1 [0068.700] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0068.700] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2198 | out: lpFileInformation=0x10cd2198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0068.700] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.701] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0068.701] GetFileType (hFile=0x19c) returned 0x1 [0068.701] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0068.701] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e110 | out: pbBuffer=0x1108e110) returned 1 [0068.701] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e120 | out: pbBuffer=0x1108e120) returned 1 [0068.701] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86401 | out: pbBuffer=0x10e86401) returned 1 [0068.701] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86601 | out: pbBuffer=0x10e86601) returned 1 [0068.702] ReadFile (in: hFile=0x19c, lpBuffer=0x110da000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x110da000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0068.846] GetFileType (hFile=0x19c) returned 0x1 [0068.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.846] WriteFile (in: hFile=0x19c, lpBuffer=0x10e34000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e34000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0068.846] GetFileType (hFile=0x19c) returned 0x1 [0068.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.846] GetFileType (hFile=0x19c) returned 0x1 [0068.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.846] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e86500*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0068.846] GetFileType (hFile=0x19c) returned 0x1 [0068.846] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.846] GetFileType (hFile=0x19c) returned 0x1 [0068.847] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.847] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e86700*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0068.847] GetFileType (hFile=0x19c) returned 0x1 [0068.847] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.847] GetFileType (hFile=0x19c) returned 0x1 [0068.847] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.847] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0068.847] GetFileType (hFile=0x19c) returned 0x1 [0068.847] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.847] CloseHandle (hObject=0x19c) returned 1 [0068.849] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0068.849] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd22d8 | out: lpFileInformation=0x10cd22d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0068.922] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.922] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0068.922] GetFileType (hFile=0x19c) returned 0x1 [0068.923] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0068.923] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e200 | out: pbBuffer=0x1108e200) returned 1 [0068.923] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e210 | out: pbBuffer=0x1108e210) returned 1 [0068.923] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86901 | out: pbBuffer=0x10e86901) returned 1 [0068.923] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86b01 | out: pbBuffer=0x10e86b01) returned 1 [0068.923] ReadFile (in: hFile=0x19c, lpBuffer=0x10e46000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10e46000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0068.967] GetFileType (hFile=0x19c) returned 0x1 [0068.967] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.967] WriteFile (in: hFile=0x19c, lpBuffer=0x10e58000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e58000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0068.968] GetFileType (hFile=0x19c) returned 0x1 [0068.968] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.968] GetFileType (hFile=0x19c) returned 0x1 [0068.968] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.968] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e86a00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0068.968] GetFileType (hFile=0x19c) returned 0x1 [0068.968] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.968] GetFileType (hFile=0x19c) returned 0x1 [0068.969] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.969] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e86c00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0068.969] GetFileType (hFile=0x19c) returned 0x1 [0068.969] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.969] GetFileType (hFile=0x19c) returned 0x1 [0068.969] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.969] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0068.969] GetFileType (hFile=0x19c) returned 0x1 [0068.969] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0068.969] CloseHandle (hObject=0x19c) returned 1 [0068.971] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0068.972] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2418 | out: lpFileInformation=0x10cd2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0068.972] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0068.972] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0068.972] GetFileType (hFile=0x19c) returned 0x1 [0068.973] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0068.973] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e2f0 | out: pbBuffer=0x1108e2f0) returned 1 [0068.973] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e300 | out: pbBuffer=0x1108e300) returned 1 [0068.973] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e86e01 | out: pbBuffer=0x10e86e01) returned 1 [0068.973] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87001 | out: pbBuffer=0x10e87001) returned 1 [0068.973] ReadFile (in: hFile=0x19c, lpBuffer=0x10e6a000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10e6a000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0069.055] GetFileType (hFile=0x19c) returned 0x1 [0069.056] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.056] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0069.056] GetFileType (hFile=0x19c) returned 0x1 [0069.056] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.056] GetFileType (hFile=0x19c) returned 0x1 [0069.056] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.056] WriteFile (in: hFile=0x19c, lpBuffer=0x10e86f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e86f00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0069.056] GetFileType (hFile=0x19c) returned 0x1 [0069.056] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.056] GetFileType (hFile=0x19c) returned 0x1 [0069.056] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.057] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e87100*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0069.057] GetFileType (hFile=0x19c) returned 0x1 [0069.057] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.057] GetFileType (hFile=0x19c) returned 0x1 [0069.057] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.057] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0069.057] GetFileType (hFile=0x19c) returned 0x1 [0069.057] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.057] CloseHandle (hObject=0x19c) returned 1 [0069.131] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.trapget"), dwFlags=0x1) returned 1 [0069.132] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2558 | out: lpFileInformation=0x10cd2558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0069.188] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0069.188] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0069.188] GetFileType (hFile=0x19c) returned 0x1 [0069.188] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0069.188] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e3f0 | out: pbBuffer=0x1108e3f0) returned 1 [0069.188] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e400 | out: pbBuffer=0x1108e400) returned 1 [0069.188] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87201 | out: pbBuffer=0x10e87201) returned 1 [0069.189] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87501 | out: pbBuffer=0x10e87501) returned 1 [0069.189] ReadFile (in: hFile=0x19c, lpBuffer=0x11010000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x11010000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0069.323] GetFileType (hFile=0x19c) returned 0x1 [0069.323] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.323] WriteFile (in: hFile=0x19c, lpBuffer=0x11022000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x11022000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0069.324] GetFileType (hFile=0x19c) returned 0x1 [0069.324] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.324] GetFileType (hFile=0x19c) returned 0x1 [0069.324] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.324] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e87300*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0069.324] GetFileType (hFile=0x19c) returned 0x1 [0069.324] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.324] GetFileType (hFile=0x19c) returned 0x1 [0069.324] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.324] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e87700*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0069.324] GetFileType (hFile=0x19c) returned 0x1 [0069.324] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.324] GetFileType (hFile=0x19c) returned 0x1 [0069.324] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.324] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0069.324] GetFileType (hFile=0x19c) returned 0x1 [0069.325] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.325] CloseHandle (hObject=0x19c) returned 1 [0069.326] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0069.327] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2698 | out: lpFileInformation=0x10cd2698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0069.327] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0069.327] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0069.327] GetFileType (hFile=0x19c) returned 0x1 [0069.327] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0069.327] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e4d0 | out: pbBuffer=0x1108e4d0) returned 1 [0069.327] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e4e0 | out: pbBuffer=0x1108e4e0) returned 1 [0069.328] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87801 | out: pbBuffer=0x10e87801) returned 1 [0069.328] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87a01 | out: pbBuffer=0x10e87a01) returned 1 [0069.328] ReadFile (in: hFile=0x19c, lpBuffer=0x11036000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x11036000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0069.503] GetFileType (hFile=0x19c) returned 0x1 [0069.503] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.503] WriteFile (in: hFile=0x19c, lpBuffer=0x11048000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x11048000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0069.503] GetFileType (hFile=0x19c) returned 0x1 [0069.503] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.503] GetFileType (hFile=0x19c) returned 0x1 [0069.503] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.504] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e87900*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0069.504] GetFileType (hFile=0x19c) returned 0x1 [0069.504] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.504] GetFileType (hFile=0x19c) returned 0x1 [0069.504] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.504] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e87b00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0069.504] GetFileType (hFile=0x19c) returned 0x1 [0069.504] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.504] GetFileType (hFile=0x19c) returned 0x1 [0069.504] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.504] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0069.504] GetFileType (hFile=0x19c) returned 0x1 [0069.504] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.504] CloseHandle (hObject=0x19c) returned 1 [0069.506] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0069.507] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd27d8 | out: lpFileInformation=0x10cd27d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0069.507] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0069.507] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0069.507] GetFileType (hFile=0x19c) returned 0x1 [0069.507] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0069.507] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e5c0 | out: pbBuffer=0x1108e5c0) returned 1 [0069.507] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e5d0 | out: pbBuffer=0x1108e5d0) returned 1 [0069.507] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87d01 | out: pbBuffer=0x10e87d01) returned 1 [0069.508] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e87f01 | out: pbBuffer=0x10e87f01) returned 1 [0069.508] ReadFile (in: hFile=0x19c, lpBuffer=0x11066000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x11066000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0069.601] GetFileType (hFile=0x19c) returned 0x1 [0069.601] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.601] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfa000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10cfa000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0069.601] GetFileType (hFile=0x19c) returned 0x1 [0069.601] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.601] GetFileType (hFile=0x19c) returned 0x1 [0069.601] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.601] WriteFile (in: hFile=0x19c, lpBuffer=0x10e87e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e87e00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0069.602] GetFileType (hFile=0x19c) returned 0x1 [0069.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.602] GetFileType (hFile=0x19c) returned 0x1 [0069.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.602] WriteFile (in: hFile=0x19c, lpBuffer=0x11064000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x11064000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0069.602] GetFileType (hFile=0x19c) returned 0x1 [0069.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.602] GetFileType (hFile=0x19c) returned 0x1 [0069.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.602] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0069.602] GetFileType (hFile=0x19c) returned 0x1 [0069.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.602] CloseHandle (hObject=0x19c) returned 1 [0069.606] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.trapget"), dwFlags=0x1) returned 1 [0069.610] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2918 | out: lpFileInformation=0x10cd2918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0069.611] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0069.611] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0069.611] GetFileType (hFile=0x19c) returned 0x1 [0069.611] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0069.611] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e6b0 | out: pbBuffer=0x1108e6b0) returned 1 [0069.611] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e6c0 | out: pbBuffer=0x1108e6c0) returned 1 [0069.611] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11064101 | out: pbBuffer=0x11064101) returned 1 [0069.611] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11064301 | out: pbBuffer=0x11064301) returned 1 [0069.612] ReadFile (in: hFile=0x19c, lpBuffer=0x10d0c000, nNumberOfBytesToRead=0x101000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10d0c000*, lpNumberOfBytesRead=0x10c8fcb8*=0x101000, lpOverlapped=0x0) returned 1 [0069.870] GetFileType (hFile=0x19c) returned 0x1 [0069.870] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.870] WriteFile (in: hFile=0x19c, lpBuffer=0x10e88000*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10e88000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x101000, lpOverlapped=0x10c8fcbc) returned 1 [0069.874] GetFileType (hFile=0x19c) returned 0x1 [0069.874] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.874] GetFileType (hFile=0x19c) returned 0x1 [0069.874] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.874] WriteFile (in: hFile=0x19c, lpBuffer=0x11064200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x11064200*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0069.874] GetFileType (hFile=0x19c) returned 0x1 [0069.874] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.874] GetFileType (hFile=0x19c) returned 0x1 [0069.875] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.875] WriteFile (in: hFile=0x19c, lpBuffer=0x11064400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x11064400*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0069.875] GetFileType (hFile=0x19c) returned 0x1 [0069.875] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.875] GetFileType (hFile=0x19c) returned 0x1 [0069.875] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.875] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0069.875] GetFileType (hFile=0x19c) returned 0x1 [0069.875] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0069.875] CloseHandle (hObject=0x19c) returned 1 [0069.918] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.trapget"), dwFlags=0x1) returned 1 [0069.919] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6008 | out: lpFileInformation=0x110c6008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0069.919] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0069.919] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0069.919] GetFileType (hFile=0x19c) returned 0x1 [0069.919] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0069.919] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0069.920] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e050 | out: pbBuffer=0x10c6e050) returned 1 [0069.920] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e001 | out: pbBuffer=0x10e1e001) returned 1 [0069.926] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e201 | out: pbBuffer=0x10e1e201) returned 1 [0069.927] ReadFile (in: hFile=0x19c, lpBuffer=0x10f94000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10f94000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0070.007] SetEvent (hEvent=0x138) returned 1 [0070.007] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0070.041] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0070.041] SetEvent (hEvent=0x138) returned 1 [0070.041] SetEvent (hEvent=0x12c) returned 1 [0070.041] SetEvent (hEvent=0x170) returned 1 [0070.041] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0070.181] SetEvent (hEvent=0x168) returned 1 [0070.181] SetEvent (hEvent=0x170) returned 1 [0070.182] GetFileType (hFile=0x19c) returned 0x1 [0070.182] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.182] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa6000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10fa6000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0070.183] GetFileType (hFile=0x19c) returned 0x1 [0070.183] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.183] GetFileType (hFile=0x19c) returned 0x1 [0070.183] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.183] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1e100*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.183] GetFileType (hFile=0x19c) returned 0x1 [0070.183] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.183] GetFileType (hFile=0x19c) returned 0x1 [0070.183] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.183] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1e300*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.183] GetFileType (hFile=0x19c) returned 0x1 [0070.183] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.183] GetFileType (hFile=0x19c) returned 0x1 [0070.183] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.183] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0070.184] GetFileType (hFile=0x19c) returned 0x1 [0070.184] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.184] CloseHandle (hObject=0x19c) returned 1 [0070.185] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.trapget"), dwFlags=0x1) returned 1 [0070.186] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6058 | out: lpFileInformation=0x110c6058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0070.186] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0070.186] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0070.186] GetFileType (hFile=0x19c) returned 0x1 [0070.186] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0070.186] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0070.186] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e060 | out: pbBuffer=0x10c6e060) returned 1 [0070.186] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e401 | out: pbBuffer=0x10e1e401) returned 1 [0070.187] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e601 | out: pbBuffer=0x10e1e601) returned 1 [0070.187] ReadFile (in: hFile=0x19c, lpBuffer=0x10e22000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10e22000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0070.280] GetFileType (hFile=0x19c) returned 0x1 [0070.280] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.280] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0070.280] GetFileType (hFile=0x19c) returned 0x1 [0070.280] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.280] GetFileType (hFile=0x19c) returned 0x1 [0070.280] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.280] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1e500*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.280] GetFileType (hFile=0x19c) returned 0x1 [0070.280] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.281] GetFileType (hFile=0x19c) returned 0x1 [0070.281] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.281] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1e700*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.281] GetFileType (hFile=0x19c) returned 0x1 [0070.281] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.281] GetFileType (hFile=0x19c) returned 0x1 [0070.281] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.281] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0070.281] GetFileType (hFile=0x19c) returned 0x1 [0070.281] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.281] CloseHandle (hObject=0x19c) returned 1 [0070.283] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0070.284] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6198 | out: lpFileInformation=0x110c6198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0070.284] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0070.284] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0070.284] GetFileType (hFile=0x19c) returned 0x1 [0070.284] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0070.284] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e140 | out: pbBuffer=0x10c6e140) returned 1 [0070.284] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e150 | out: pbBuffer=0x10c6e150) returned 1 [0070.284] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e901 | out: pbBuffer=0x10e1e901) returned 1 [0070.285] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1eb01 | out: pbBuffer=0x10e1eb01) returned 1 [0070.285] ReadFile (in: hFile=0x19c, lpBuffer=0x11092000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x11092000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0070.350] GetFileType (hFile=0x19c) returned 0x1 [0070.350] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.350] WriteFile (in: hFile=0x19c, lpBuffer=0x110c8000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110c8000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0070.351] GetFileType (hFile=0x19c) returned 0x1 [0070.351] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.351] GetFileType (hFile=0x19c) returned 0x1 [0070.351] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.351] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1ea00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1ea00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.351] GetFileType (hFile=0x19c) returned 0x1 [0070.351] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.351] GetFileType (hFile=0x19c) returned 0x1 [0070.351] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.351] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1ec00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1ec00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.351] GetFileType (hFile=0x19c) returned 0x1 [0070.351] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.351] GetFileType (hFile=0x19c) returned 0x1 [0070.352] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.352] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0070.352] GetFileType (hFile=0x19c) returned 0x1 [0070.352] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.352] CloseHandle (hObject=0x19c) returned 1 [0070.354] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0070.354] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c62d8 | out: lpFileInformation=0x110c62d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0070.410] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0070.410] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0070.410] GetFileType (hFile=0x19c) returned 0x1 [0070.410] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0070.411] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e230 | out: pbBuffer=0x10c6e230) returned 1 [0070.411] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e240 | out: pbBuffer=0x10c6e240) returned 1 [0070.411] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1ed01 | out: pbBuffer=0x10e1ed01) returned 1 [0070.411] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1ef01 | out: pbBuffer=0x10e1ef01) returned 1 [0070.411] ReadFile (in: hFile=0x19c, lpBuffer=0x110da000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x110da000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0070.539] GetFileType (hFile=0x19c) returned 0x1 [0070.539] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.539] WriteFile (in: hFile=0x19c, lpBuffer=0x10fb8000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10fb8000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0070.540] GetFileType (hFile=0x19c) returned 0x1 [0070.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.540] GetFileType (hFile=0x19c) returned 0x1 [0070.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.540] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1ee00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1ee00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.540] GetFileType (hFile=0x19c) returned 0x1 [0070.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.540] GetFileType (hFile=0x19c) returned 0x1 [0070.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.540] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1f000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1f000*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.540] GetFileType (hFile=0x19c) returned 0x1 [0070.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.540] GetFileType (hFile=0x19c) returned 0x1 [0070.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.540] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0070.540] GetFileType (hFile=0x19c) returned 0x1 [0070.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.540] CloseHandle (hObject=0x19c) returned 1 [0070.542] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.trapget"), dwFlags=0x1) returned 1 [0070.543] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6418 | out: lpFileInformation=0x110c6418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0070.606] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0070.607] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0070.607] GetFileType (hFile=0x19c) returned 0x1 [0070.607] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0070.607] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e320 | out: pbBuffer=0x10c6e320) returned 1 [0070.607] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e330 | out: pbBuffer=0x10c6e330) returned 1 [0070.607] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1f101 | out: pbBuffer=0x10e1f101) returned 1 [0070.607] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1f301 | out: pbBuffer=0x10e1f301) returned 1 [0070.607] ReadFile (in: hFile=0x19c, lpBuffer=0x10fca000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10fca000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0070.730] GetFileType (hFile=0x19c) returned 0x1 [0070.730] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.730] WriteFile (in: hFile=0x19c, lpBuffer=0x10fdc000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10fdc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0070.730] GetFileType (hFile=0x19c) returned 0x1 [0070.730] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.730] GetFileType (hFile=0x19c) returned 0x1 [0070.730] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.730] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1f200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1f200*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.731] GetFileType (hFile=0x19c) returned 0x1 [0070.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.731] GetFileType (hFile=0x19c) returned 0x1 [0070.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.731] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1f400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1f400*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.731] GetFileType (hFile=0x19c) returned 0x1 [0070.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.731] GetFileType (hFile=0x19c) returned 0x1 [0070.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.731] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0070.731] GetFileType (hFile=0x19c) returned 0x1 [0070.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.731] CloseHandle (hObject=0x19c) returned 1 [0070.733] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0070.734] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0070.734] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0070.734] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0070.734] GetFileType (hFile=0x19c) returned 0x1 [0070.734] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0070.734] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e030 | out: pbBuffer=0x1108e030) returned 1 [0070.734] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e040 | out: pbBuffer=0x1108e040) returned 1 [0070.734] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110ec101 | out: pbBuffer=0x110ec101) returned 1 [0070.735] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110ec301 | out: pbBuffer=0x110ec301) returned 1 [0070.735] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0070.836] GetFileType (hFile=0x19c) returned 0x1 [0070.836] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.836] WriteFile (in: hFile=0x19c, lpBuffer=0x11010000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11010000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0070.836] GetFileType (hFile=0x19c) returned 0x1 [0070.836] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.836] GetFileType (hFile=0x19c) returned 0x1 [0070.836] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.836] WriteFile (in: hFile=0x19c, lpBuffer=0x110ec200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ec200*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.836] GetFileType (hFile=0x19c) returned 0x1 [0070.836] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.837] GetFileType (hFile=0x19c) returned 0x1 [0070.837] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.837] WriteFile (in: hFile=0x19c, lpBuffer=0x110ec400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ec400*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.837] GetFileType (hFile=0x19c) returned 0x1 [0070.837] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.837] GetFileType (hFile=0x19c) returned 0x1 [0070.837] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.837] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0070.837] GetFileType (hFile=0x19c) returned 0x1 [0070.837] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.837] CloseHandle (hObject=0x19c) returned 1 [0070.839] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.trapget"), dwFlags=0x1) returned 1 [0070.840] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2198 | out: lpFileInformation=0x10cd2198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0070.840] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0070.840] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0070.840] GetFileType (hFile=0x19c) returned 0x1 [0070.840] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0070.840] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e110 | out: pbBuffer=0x1108e110) returned 1 [0070.840] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e120 | out: pbBuffer=0x1108e120) returned 1 [0070.840] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110ec501 | out: pbBuffer=0x110ec501) returned 1 [0070.840] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110ec701 | out: pbBuffer=0x110ec701) returned 1 [0070.841] ReadFile (in: hFile=0x19c, lpBuffer=0x11022000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x11022000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0070.890] GetFileType (hFile=0x19c) returned 0x1 [0070.890] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.890] WriteFile (in: hFile=0x19c, lpBuffer=0x11034000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11034000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0070.890] GetFileType (hFile=0x19c) returned 0x1 [0070.890] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.890] GetFileType (hFile=0x19c) returned 0x1 [0070.890] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.890] WriteFile (in: hFile=0x19c, lpBuffer=0x110ec600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ec600*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.891] GetFileType (hFile=0x19c) returned 0x1 [0070.891] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.891] GetFileType (hFile=0x19c) returned 0x1 [0070.891] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.891] WriteFile (in: hFile=0x19c, lpBuffer=0x110ec800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ec800*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.891] GetFileType (hFile=0x19c) returned 0x1 [0070.891] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.891] GetFileType (hFile=0x19c) returned 0x1 [0070.891] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.891] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0070.891] GetFileType (hFile=0x19c) returned 0x1 [0070.891] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.891] CloseHandle (hObject=0x19c) returned 1 [0070.893] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0070.894] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd22d8 | out: lpFileInformation=0x10cd22d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0070.894] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0070.894] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0070.894] GetFileType (hFile=0x19c) returned 0x1 [0070.894] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0070.894] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e200 | out: pbBuffer=0x1108e200) returned 1 [0070.894] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e210 | out: pbBuffer=0x1108e210) returned 1 [0070.894] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110ec901 | out: pbBuffer=0x110ec901) returned 1 [0070.895] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110ecb01 | out: pbBuffer=0x110ecb01) returned 1 [0070.895] ReadFile (in: hFile=0x19c, lpBuffer=0x11046000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x11046000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0070.910] GetFileType (hFile=0x19c) returned 0x1 [0070.910] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.911] WriteFile (in: hFile=0x19c, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0070.911] GetFileType (hFile=0x19c) returned 0x1 [0070.911] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.911] GetFileType (hFile=0x19c) returned 0x1 [0070.911] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.911] WriteFile (in: hFile=0x19c, lpBuffer=0x110eca00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110eca00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.911] GetFileType (hFile=0x19c) returned 0x1 [0070.911] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.911] GetFileType (hFile=0x19c) returned 0x1 [0070.911] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.911] WriteFile (in: hFile=0x19c, lpBuffer=0x110ecc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ecc00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.911] GetFileType (hFile=0x19c) returned 0x1 [0070.911] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.911] GetFileType (hFile=0x19c) returned 0x1 [0070.911] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.912] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0070.912] GetFileType (hFile=0x19c) returned 0x1 [0070.912] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.912] CloseHandle (hObject=0x19c) returned 1 [0070.913] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.trapget"), dwFlags=0x1) returned 1 [0070.914] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2418 | out: lpFileInformation=0x10cd2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0070.914] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0070.914] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0070.914] GetFileType (hFile=0x19c) returned 0x1 [0070.914] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0070.914] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e2f0 | out: pbBuffer=0x1108e2f0) returned 1 [0070.915] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e300 | out: pbBuffer=0x1108e300) returned 1 [0070.915] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110ecd01 | out: pbBuffer=0x110ecd01) returned 1 [0070.915] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110ecf01 | out: pbBuffer=0x110ecf01) returned 1 [0070.915] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfa000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10cfa000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0070.963] GetFileType (hFile=0x19c) returned 0x1 [0070.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.963] WriteFile (in: hFile=0x19c, lpBuffer=0x10d0c000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d0c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0070.963] GetFileType (hFile=0x19c) returned 0x1 [0070.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.963] GetFileType (hFile=0x19c) returned 0x1 [0070.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.963] WriteFile (in: hFile=0x19c, lpBuffer=0x110ece00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ece00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.963] GetFileType (hFile=0x19c) returned 0x1 [0070.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.963] GetFileType (hFile=0x19c) returned 0x1 [0070.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.964] WriteFile (in: hFile=0x19c, lpBuffer=0x110ed000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ed000*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0070.964] GetFileType (hFile=0x19c) returned 0x1 [0070.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.964] GetFileType (hFile=0x19c) returned 0x1 [0070.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.964] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0070.964] GetFileType (hFile=0x19c) returned 0x1 [0070.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0070.964] CloseHandle (hObject=0x19c) returned 1 [0070.966] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0070.966] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2558 | out: lpFileInformation=0x10cd2558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0070.967] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0070.967] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0070.967] GetFileType (hFile=0x19c) returned 0x1 [0070.967] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0070.967] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e3e0 | out: pbBuffer=0x1108e3e0) returned 1 [0070.967] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e3f0 | out: pbBuffer=0x1108e3f0) returned 1 [0071.002] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110ed101 | out: pbBuffer=0x110ed101) returned 1 [0071.002] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110ed301 | out: pbBuffer=0x110ed301) returned 1 [0071.003] ReadFile (in: hFile=0x19c, lpBuffer=0x10d20000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10d20000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0071.051] GetFileType (hFile=0x19c) returned 0x1 [0071.051] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.051] WriteFile (in: hFile=0x19c, lpBuffer=0x10d32000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d32000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0071.051] GetFileType (hFile=0x19c) returned 0x1 [0071.051] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.051] GetFileType (hFile=0x19c) returned 0x1 [0071.051] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.051] WriteFile (in: hFile=0x19c, lpBuffer=0x110ed200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ed200*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.052] GetFileType (hFile=0x19c) returned 0x1 [0071.052] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.052] GetFileType (hFile=0x19c) returned 0x1 [0071.052] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.052] WriteFile (in: hFile=0x19c, lpBuffer=0x110ed400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ed400*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.052] GetFileType (hFile=0x19c) returned 0x1 [0071.052] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.052] GetFileType (hFile=0x19c) returned 0x1 [0071.052] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.052] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0071.052] GetFileType (hFile=0x19c) returned 0x1 [0071.052] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.052] CloseHandle (hObject=0x19c) returned 1 [0071.054] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0071.055] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2698 | out: lpFileInformation=0x10cd2698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0071.055] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0071.055] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0071.055] GetFileType (hFile=0x19c) returned 0x1 [0071.055] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0071.055] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e4c0 | out: pbBuffer=0x1108e4c0) returned 1 [0071.055] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e4d0 | out: pbBuffer=0x1108e4d0) returned 1 [0071.055] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110ed501 | out: pbBuffer=0x110ed501) returned 1 [0071.056] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110ed701 | out: pbBuffer=0x110ed701) returned 1 [0071.056] ReadFile (in: hFile=0x19c, lpBuffer=0x10d4c000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10d4c000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0071.102] GetFileType (hFile=0x19c) returned 0x1 [0071.102] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.102] WriteFile (in: hFile=0x19c, lpBuffer=0x10d5e000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d5e000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0071.103] GetFileType (hFile=0x19c) returned 0x1 [0071.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.103] GetFileType (hFile=0x19c) returned 0x1 [0071.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.103] WriteFile (in: hFile=0x19c, lpBuffer=0x110ed600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ed600*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.103] GetFileType (hFile=0x19c) returned 0x1 [0071.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.103] GetFileType (hFile=0x19c) returned 0x1 [0071.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.103] WriteFile (in: hFile=0x19c, lpBuffer=0x110ed800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ed800*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.103] GetFileType (hFile=0x19c) returned 0x1 [0071.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.103] GetFileType (hFile=0x19c) returned 0x1 [0071.104] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.104] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0071.104] GetFileType (hFile=0x19c) returned 0x1 [0071.104] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.104] CloseHandle (hObject=0x19c) returned 1 [0071.106] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0071.107] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd27d8 | out: lpFileInformation=0x10cd27d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0071.142] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0071.143] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0071.143] GetFileType (hFile=0x19c) returned 0x1 [0071.143] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0071.143] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e5b0 | out: pbBuffer=0x1108e5b0) returned 1 [0071.143] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e5c0 | out: pbBuffer=0x1108e5c0) returned 1 [0071.143] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110ed901 | out: pbBuffer=0x110ed901) returned 1 [0071.143] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110edb01 | out: pbBuffer=0x110edb01) returned 1 [0071.144] ReadFile (in: hFile=0x19c, lpBuffer=0x10d78000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10d78000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0071.181] GetFileType (hFile=0x19c) returned 0x1 [0071.181] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.181] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8a000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8a000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0071.215] GetFileType (hFile=0x19c) returned 0x1 [0071.215] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.215] GetFileType (hFile=0x19c) returned 0x1 [0071.215] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.215] WriteFile (in: hFile=0x19c, lpBuffer=0x110eda00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110eda00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.216] GetFileType (hFile=0x19c) returned 0x1 [0071.216] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.216] GetFileType (hFile=0x19c) returned 0x1 [0071.216] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.216] WriteFile (in: hFile=0x19c, lpBuffer=0x110edc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110edc00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.216] GetFileType (hFile=0x19c) returned 0x1 [0071.216] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.216] GetFileType (hFile=0x19c) returned 0x1 [0071.216] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.216] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0071.216] GetFileType (hFile=0x19c) returned 0x1 [0071.216] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.216] CloseHandle (hObject=0x19c) returned 1 [0071.218] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0071.222] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2918 | out: lpFileInformation=0x10cd2918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0071.222] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0071.222] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0071.222] GetFileType (hFile=0x19c) returned 0x1 [0071.222] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0071.222] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e6a0 | out: pbBuffer=0x1108e6a0) returned 1 [0071.222] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e6b0 | out: pbBuffer=0x1108e6b0) returned 1 [0071.222] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110edd01 | out: pbBuffer=0x110edd01) returned 1 [0071.222] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110edf01 | out: pbBuffer=0x110edf01) returned 1 [0071.223] ReadFile (in: hFile=0x19c, lpBuffer=0x10da4000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10da4000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0071.262] GetFileType (hFile=0x19c) returned 0x1 [0071.262] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.262] WriteFile (in: hFile=0x19c, lpBuffer=0x10db6000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10db6000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0071.262] GetFileType (hFile=0x19c) returned 0x1 [0071.262] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.262] GetFileType (hFile=0x19c) returned 0x1 [0071.262] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.262] WriteFile (in: hFile=0x19c, lpBuffer=0x110ede00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ede00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.262] GetFileType (hFile=0x19c) returned 0x1 [0071.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.263] GetFileType (hFile=0x19c) returned 0x1 [0071.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.263] WriteFile (in: hFile=0x19c, lpBuffer=0x10da2000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da2000*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.263] GetFileType (hFile=0x19c) returned 0x1 [0071.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.263] GetFileType (hFile=0x19c) returned 0x1 [0071.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.263] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0071.263] GetFileType (hFile=0x19c) returned 0x1 [0071.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.263] CloseHandle (hObject=0x19c) returned 1 [0071.265] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.trapget"), dwFlags=0x1) returned 1 [0071.265] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2a58 | out: lpFileInformation=0x10cd2a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0071.336] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0071.336] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0071.336] GetFileType (hFile=0x19c) returned 0x1 [0071.336] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0071.336] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e7a0 | out: pbBuffer=0x1108e7a0) returned 1 [0071.336] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e7b0 | out: pbBuffer=0x1108e7b0) returned 1 [0071.336] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da2101 | out: pbBuffer=0x10da2101) returned 1 [0071.336] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da2301 | out: pbBuffer=0x10da2301) returned 1 [0071.406] ReadFile (in: hFile=0x19c, lpBuffer=0x10dd4000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10dd4000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0071.482] GetFileType (hFile=0x19c) returned 0x1 [0071.482] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.482] WriteFile (in: hFile=0x19c, lpBuffer=0x10de6000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10de6000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0071.483] GetFileType (hFile=0x19c) returned 0x1 [0071.483] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.483] GetFileType (hFile=0x19c) returned 0x1 [0071.483] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.483] WriteFile (in: hFile=0x19c, lpBuffer=0x10da2200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da2200*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.483] GetFileType (hFile=0x19c) returned 0x1 [0071.483] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.483] GetFileType (hFile=0x19c) returned 0x1 [0071.483] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.483] WriteFile (in: hFile=0x19c, lpBuffer=0x10da2400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da2400*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.483] GetFileType (hFile=0x19c) returned 0x1 [0071.483] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.483] GetFileType (hFile=0x19c) returned 0x1 [0071.483] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.483] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0071.484] GetFileType (hFile=0x19c) returned 0x1 [0071.484] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.484] CloseHandle (hObject=0x19c) returned 1 [0071.486] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.trapget"), dwFlags=0x1) returned 1 [0071.486] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2b98 | out: lpFileInformation=0x10cd2b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0071.486] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0071.486] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0071.487] GetFileType (hFile=0x19c) returned 0x1 [0071.487] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0071.487] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e880 | out: pbBuffer=0x1108e880) returned 1 [0071.487] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e890 | out: pbBuffer=0x1108e890) returned 1 [0071.487] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da2501 | out: pbBuffer=0x10da2501) returned 1 [0071.487] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da2701 | out: pbBuffer=0x10da2701) returned 1 [0071.487] ReadFile (in: hFile=0x19c, lpBuffer=0x10e34000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10e34000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0071.546] GetFileType (hFile=0x19c) returned 0x1 [0071.546] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.546] WriteFile (in: hFile=0x19c, lpBuffer=0x10e46000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e46000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0071.547] GetFileType (hFile=0x19c) returned 0x1 [0071.547] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.547] GetFileType (hFile=0x19c) returned 0x1 [0071.547] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.547] WriteFile (in: hFile=0x19c, lpBuffer=0x10da2600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da2600*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.547] GetFileType (hFile=0x19c) returned 0x1 [0071.547] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.547] GetFileType (hFile=0x19c) returned 0x1 [0071.547] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.547] WriteFile (in: hFile=0x19c, lpBuffer=0x10da2800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da2800*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.547] GetFileType (hFile=0x19c) returned 0x1 [0071.547] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.547] GetFileType (hFile=0x19c) returned 0x1 [0071.547] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.547] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0071.547] GetFileType (hFile=0x19c) returned 0x1 [0071.547] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.547] CloseHandle (hObject=0x19c) returned 1 [0071.550] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0071.551] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2cd8 | out: lpFileInformation=0x10cd2cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0071.553] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0071.553] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0071.554] GetFileType (hFile=0x19c) returned 0x1 [0071.554] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0071.554] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e970 | out: pbBuffer=0x1108e970) returned 1 [0071.554] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e980 | out: pbBuffer=0x1108e980) returned 1 [0071.554] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da2a01 | out: pbBuffer=0x10da2a01) returned 1 [0071.554] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da2c01 | out: pbBuffer=0x10da2c01) returned 1 [0071.554] ReadFile (in: hFile=0x19c, lpBuffer=0x10e58000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10e58000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0071.593] GetFileType (hFile=0x19c) returned 0x1 [0071.593] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.593] WriteFile (in: hFile=0x19c, lpBuffer=0x10e6a000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e6a000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0071.593] GetFileType (hFile=0x19c) returned 0x1 [0071.593] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.593] GetFileType (hFile=0x19c) returned 0x1 [0071.593] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.593] WriteFile (in: hFile=0x19c, lpBuffer=0x10da2b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da2b00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.594] GetFileType (hFile=0x19c) returned 0x1 [0071.594] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.594] GetFileType (hFile=0x19c) returned 0x1 [0071.594] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.594] WriteFile (in: hFile=0x19c, lpBuffer=0x10da2d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da2d00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.594] GetFileType (hFile=0x19c) returned 0x1 [0071.594] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.594] GetFileType (hFile=0x19c) returned 0x1 [0071.594] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.594] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0071.594] GetFileType (hFile=0x19c) returned 0x1 [0071.594] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.594] CloseHandle (hObject=0x19c) returned 1 [0071.596] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0071.597] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2e18 | out: lpFileInformation=0x10cd2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0071.597] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0071.597] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0071.597] GetFileType (hFile=0x19c) returned 0x1 [0071.597] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0071.597] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ea60 | out: pbBuffer=0x1108ea60) returned 1 [0071.597] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ea70 | out: pbBuffer=0x1108ea70) returned 1 [0071.597] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da2e01 | out: pbBuffer=0x10da2e01) returned 1 [0071.598] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da3001 | out: pbBuffer=0x10da3001) returned 1 [0071.598] ReadFile (in: hFile=0x19c, lpBuffer=0x10e88000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10e88000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0071.675] GetFileType (hFile=0x19c) returned 0x1 [0071.675] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.675] WriteFile (in: hFile=0x19c, lpBuffer=0x10e9a000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e9a000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0071.676] GetFileType (hFile=0x19c) returned 0x1 [0071.676] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.676] GetFileType (hFile=0x19c) returned 0x1 [0071.676] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.676] WriteFile (in: hFile=0x19c, lpBuffer=0x10da2f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da2f00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.676] GetFileType (hFile=0x19c) returned 0x1 [0071.676] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.676] GetFileType (hFile=0x19c) returned 0x1 [0071.676] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.676] WriteFile (in: hFile=0x19c, lpBuffer=0x10da3100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da3100*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.676] GetFileType (hFile=0x19c) returned 0x1 [0071.676] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.676] GetFileType (hFile=0x19c) returned 0x1 [0071.676] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.676] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0071.676] GetFileType (hFile=0x19c) returned 0x1 [0071.676] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.677] CloseHandle (hObject=0x19c) returned 1 [0071.678] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0071.679] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2f58 | out: lpFileInformation=0x10cd2f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0071.719] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0071.719] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0071.719] GetFileType (hFile=0x19c) returned 0x1 [0071.719] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0071.719] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108eb50 | out: pbBuffer=0x1108eb50) returned 1 [0071.719] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108eb60 | out: pbBuffer=0x1108eb60) returned 1 [0071.719] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da3301 | out: pbBuffer=0x10da3301) returned 1 [0071.720] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da3501 | out: pbBuffer=0x10da3501) returned 1 [0071.720] ReadFile (in: hFile=0x19c, lpBuffer=0x10eb4000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10eb4000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0071.759] GetFileType (hFile=0x19c) returned 0x1 [0071.759] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.759] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec6000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ec6000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0071.760] GetFileType (hFile=0x19c) returned 0x1 [0071.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.760] GetFileType (hFile=0x19c) returned 0x1 [0071.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.760] WriteFile (in: hFile=0x19c, lpBuffer=0x10da3400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da3400*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.760] GetFileType (hFile=0x19c) returned 0x1 [0071.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.760] GetFileType (hFile=0x19c) returned 0x1 [0071.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.760] WriteFile (in: hFile=0x19c, lpBuffer=0x10da3600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da3600*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.760] GetFileType (hFile=0x19c) returned 0x1 [0071.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.760] GetFileType (hFile=0x19c) returned 0x1 [0071.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.760] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0071.761] GetFileType (hFile=0x19c) returned 0x1 [0071.761] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.761] CloseHandle (hObject=0x19c) returned 1 [0071.839] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.trapget"), dwFlags=0x1) returned 1 [0071.839] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd3098 | out: lpFileInformation=0x10cd3098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0071.840] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0071.840] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0071.840] GetFileType (hFile=0x19c) returned 0x1 [0071.840] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0071.840] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ec30 | out: pbBuffer=0x1108ec30) returned 1 [0071.840] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ec40 | out: pbBuffer=0x1108ec40) returned 1 [0071.840] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da3701 | out: pbBuffer=0x10da3701) returned 1 [0071.840] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da3901 | out: pbBuffer=0x10da3901) returned 1 [0071.841] ReadFile (in: hFile=0x19c, lpBuffer=0x10ee6000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10ee6000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0071.881] GetFileType (hFile=0x19c) returned 0x1 [0071.881] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.881] WriteFile (in: hFile=0x19c, lpBuffer=0x10ef8000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ef8000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0071.881] GetFileType (hFile=0x19c) returned 0x1 [0071.881] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.881] GetFileType (hFile=0x19c) returned 0x1 [0071.881] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.881] WriteFile (in: hFile=0x19c, lpBuffer=0x10da3800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da3800*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.881] GetFileType (hFile=0x19c) returned 0x1 [0071.882] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.882] GetFileType (hFile=0x19c) returned 0x1 [0071.882] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.882] WriteFile (in: hFile=0x19c, lpBuffer=0x10da3a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da3a00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.882] GetFileType (hFile=0x19c) returned 0x1 [0071.882] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.882] GetFileType (hFile=0x19c) returned 0x1 [0071.882] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.882] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0071.882] GetFileType (hFile=0x19c) returned 0x1 [0071.882] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.882] CloseHandle (hObject=0x19c) returned 1 [0071.884] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.trapget"), dwFlags=0x1) returned 1 [0071.885] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd31d8 | out: lpFileInformation=0x10cd31d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0071.920] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0071.920] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0071.920] GetFileType (hFile=0x19c) returned 0x1 [0071.920] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0071.920] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ed20 | out: pbBuffer=0x1108ed20) returned 1 [0071.920] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ed30 | out: pbBuffer=0x1108ed30) returned 1 [0071.920] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da3c01 | out: pbBuffer=0x10da3c01) returned 1 [0071.920] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10da3e01 | out: pbBuffer=0x10da3e01) returned 1 [0071.921] ReadFile (in: hFile=0x19c, lpBuffer=0x10f10000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10f10000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0071.958] GetFileType (hFile=0x19c) returned 0x1 [0071.958] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.958] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f22000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0071.959] GetFileType (hFile=0x19c) returned 0x1 [0071.959] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.959] GetFileType (hFile=0x19c) returned 0x1 [0071.959] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.959] WriteFile (in: hFile=0x19c, lpBuffer=0x10da3d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da3d00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.959] GetFileType (hFile=0x19c) returned 0x1 [0071.959] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.959] GetFileType (hFile=0x19c) returned 0x1 [0071.959] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.959] WriteFile (in: hFile=0x19c, lpBuffer=0x10da3f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10da3f00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0071.959] GetFileType (hFile=0x19c) returned 0x1 [0071.959] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.959] GetFileType (hFile=0x19c) returned 0x1 [0071.959] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.959] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0071.959] GetFileType (hFile=0x19c) returned 0x1 [0071.959] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0071.959] CloseHandle (hObject=0x19c) returned 1 [0071.961] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0071.962] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd3318 | out: lpFileInformation=0x10cd3318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0071.962] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0071.962] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0071.962] GetFileType (hFile=0x19c) returned 0x1 [0071.962] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0071.962] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ee40 | out: pbBuffer=0x1108ee40) returned 1 [0071.963] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ee50 | out: pbBuffer=0x1108ee50) returned 1 [0071.963] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f34101 | out: pbBuffer=0x10f34101) returned 1 [0071.963] SetEvent (hEvent=0x12c) returned 1 [0071.963] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0072.000] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0072.000] SetEvent (hEvent=0x12c) returned 1 [0072.000] SetEvent (hEvent=0x170) returned 1 [0072.000] SetEvent (hEvent=0x138) returned 1 [0072.000] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0072.085] SetEvent (hEvent=0x168) returned 1 [0072.085] SetEvent (hEvent=0x138) returned 1 [0072.085] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e101 | out: pbBuffer=0x10e1e101) returned 1 [0072.085] ReadFile (in: hFile=0x19c, lpBuffer=0x10f94000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10f94000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0072.133] GetFileType (hFile=0x19c) returned 0x1 [0072.133] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.133] WriteFile (in: hFile=0x19c, lpBuffer=0x11092000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11092000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0072.134] GetFileType (hFile=0x19c) returned 0x1 [0072.134] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.134] GetFileType (hFile=0x19c) returned 0x1 [0072.134] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.134] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1e000*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.134] GetFileType (hFile=0x19c) returned 0x1 [0072.134] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.134] GetFileType (hFile=0x19c) returned 0x1 [0072.134] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.134] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1e200*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.134] GetFileType (hFile=0x19c) returned 0x1 [0072.134] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.134] GetFileType (hFile=0x19c) returned 0x1 [0072.134] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.135] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0072.135] GetFileType (hFile=0x19c) returned 0x1 [0072.135] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.135] CloseHandle (hObject=0x19c) returned 1 [0072.137] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.trapget"), dwFlags=0x1) returned 1 [0072.137] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6058 | out: lpFileInformation=0x110c6058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0072.137] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0072.138] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0072.138] GetFileType (hFile=0x19c) returned 0x1 [0072.138] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0072.138] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e090 | out: pbBuffer=0x10c6e090) returned 1 [0072.138] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e0a0 | out: pbBuffer=0x10c6e0a0) returned 1 [0072.138] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e301 | out: pbBuffer=0x10e1e301) returned 1 [0072.138] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e501 | out: pbBuffer=0x10e1e501) returned 1 [0072.139] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfa000, nNumberOfBytesToRead=0x101000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10cfa000*, lpNumberOfBytesRead=0x10c89cb8*=0x101000, lpOverlapped=0x0) returned 1 [0072.296] GetFileType (hFile=0x19c) returned 0x1 [0072.296] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.296] WriteFile (in: hFile=0x19c, lpBuffer=0x110f8000*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110f8000*, lpNumberOfBytesWritten=0x10c89cb8*=0x101000, lpOverlapped=0x10c89cbc) returned 1 [0072.371] GetFileType (hFile=0x19c) returned 0x1 [0072.371] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.371] GetFileType (hFile=0x19c) returned 0x1 [0072.371] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.372] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1e400*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.372] GetFileType (hFile=0x19c) returned 0x1 [0072.372] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.372] GetFileType (hFile=0x19c) returned 0x1 [0072.372] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.372] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1e600*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.372] GetFileType (hFile=0x19c) returned 0x1 [0072.372] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.372] GetFileType (hFile=0x19c) returned 0x1 [0072.372] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.372] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0072.372] GetFileType (hFile=0x19c) returned 0x1 [0072.372] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.372] CloseHandle (hObject=0x19c) returned 1 [0072.387] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.trapget"), dwFlags=0x1) returned 1 [0072.387] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6198 | out: lpFileInformation=0x110c6198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0072.388] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0072.388] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0072.388] GetFileType (hFile=0x19c) returned 0x1 [0072.388] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0072.388] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e180 | out: pbBuffer=0x10c6e180) returned 1 [0072.388] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e190 | out: pbBuffer=0x10c6e190) returned 1 [0072.388] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e701 | out: pbBuffer=0x10e1e701) returned 1 [0072.388] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e901 | out: pbBuffer=0x10e1e901) returned 1 [0072.389] ReadFile (in: hFile=0x19c, lpBuffer=0x10dfc000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10dfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0072.445] GetFileType (hFile=0x19c) returned 0x1 [0072.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.445] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0072.445] GetFileType (hFile=0x19c) returned 0x1 [0072.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.445] GetFileType (hFile=0x19c) returned 0x1 [0072.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.445] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1e800*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.446] GetFileType (hFile=0x19c) returned 0x1 [0072.446] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.446] GetFileType (hFile=0x19c) returned 0x1 [0072.446] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.446] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1ea00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1ea00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.446] GetFileType (hFile=0x19c) returned 0x1 [0072.446] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.446] GetFileType (hFile=0x19c) returned 0x1 [0072.446] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.446] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0072.447] GetFileType (hFile=0x19c) returned 0x1 [0072.447] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.447] CloseHandle (hObject=0x19c) returned 1 [0072.449] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0072.451] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c62d8 | out: lpFileInformation=0x110c62d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0072.451] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0072.451] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0072.451] GetFileType (hFile=0x19c) returned 0x1 [0072.451] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0072.451] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e270 | out: pbBuffer=0x10c6e270) returned 1 [0072.451] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e280 | out: pbBuffer=0x10c6e280) returned 1 [0072.451] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1ec01 | out: pbBuffer=0x10e1ec01) returned 1 [0072.452] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1ee01 | out: pbBuffer=0x10e1ee01) returned 1 [0072.452] ReadFile (in: hFile=0x19c, lpBuffer=0x10ede000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10ede000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0072.509] GetFileType (hFile=0x19c) returned 0x1 [0072.509] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.509] WriteFile (in: hFile=0x19c, lpBuffer=0x10ef0000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ef0000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0072.510] GetFileType (hFile=0x19c) returned 0x1 [0072.510] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.510] GetFileType (hFile=0x19c) returned 0x1 [0072.510] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.510] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1ed00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1ed00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.510] GetFileType (hFile=0x19c) returned 0x1 [0072.510] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.510] GetFileType (hFile=0x19c) returned 0x1 [0072.510] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.510] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1ef00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1ef00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.510] GetFileType (hFile=0x19c) returned 0x1 [0072.510] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.510] GetFileType (hFile=0x19c) returned 0x1 [0072.510] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.510] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0072.511] GetFileType (hFile=0x19c) returned 0x1 [0072.511] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.511] CloseHandle (hObject=0x19c) returned 1 [0072.512] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.trapget"), dwFlags=0x1) returned 1 [0072.513] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6418 | out: lpFileInformation=0x110c6418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0072.513] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0072.513] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0072.513] GetFileType (hFile=0x19c) returned 0x1 [0072.513] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0072.514] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e360 | out: pbBuffer=0x10c6e360) returned 1 [0072.514] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e370 | out: pbBuffer=0x10c6e370) returned 1 [0072.514] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1f101 | out: pbBuffer=0x10e1f101) returned 1 [0072.551] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1f301 | out: pbBuffer=0x10e1f301) returned 1 [0072.551] ReadFile (in: hFile=0x19c, lpBuffer=0x110c8000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x110c8000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0072.594] GetFileType (hFile=0x19c) returned 0x1 [0072.594] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.594] WriteFile (in: hFile=0x19c, lpBuffer=0x110da000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110da000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0072.594] GetFileType (hFile=0x19c) returned 0x1 [0072.594] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.594] GetFileType (hFile=0x19c) returned 0x1 [0072.594] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.594] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1f200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1f200*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.594] GetFileType (hFile=0x19c) returned 0x1 [0072.594] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.595] GetFileType (hFile=0x19c) returned 0x1 [0072.595] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.595] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1f400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1f400*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.595] GetFileType (hFile=0x19c) returned 0x1 [0072.595] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.595] GetFileType (hFile=0x19c) returned 0x1 [0072.595] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.595] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0072.595] GetFileType (hFile=0x19c) returned 0x1 [0072.595] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.595] CloseHandle (hObject=0x19c) returned 1 [0072.597] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0072.597] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6558 | out: lpFileInformation=0x110c6558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0072.598] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0072.598] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0072.598] GetFileType (hFile=0x19c) returned 0x1 [0072.598] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0072.598] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e460 | out: pbBuffer=0x10c6e460) returned 1 [0072.598] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e470 | out: pbBuffer=0x10c6e470) returned 1 [0072.598] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1f601 | out: pbBuffer=0x10e1f601) returned 1 [0072.598] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1f801 | out: pbBuffer=0x10e1f801) returned 1 [0072.599] ReadFile (in: hFile=0x19c, lpBuffer=0x10f0c000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10f0c000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0072.640] GetFileType (hFile=0x19c) returned 0x1 [0072.640] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.640] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1e000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1e000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0072.640] GetFileType (hFile=0x19c) returned 0x1 [0072.640] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.640] GetFileType (hFile=0x19c) returned 0x1 [0072.640] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.640] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1f700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1f700*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.641] GetFileType (hFile=0x19c) returned 0x1 [0072.641] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.641] GetFileType (hFile=0x19c) returned 0x1 [0072.641] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.641] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1f900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1f900*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.641] GetFileType (hFile=0x19c) returned 0x1 [0072.641] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.641] GetFileType (hFile=0x19c) returned 0x1 [0072.641] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.641] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0072.641] GetFileType (hFile=0x19c) returned 0x1 [0072.641] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.641] CloseHandle (hObject=0x19c) returned 1 [0072.643] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.trapget"), dwFlags=0x1) returned 1 [0072.644] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6698 | out: lpFileInformation=0x110c6698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0072.644] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0072.644] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0072.644] GetFileType (hFile=0x19c) returned 0x1 [0072.644] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0072.644] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e550 | out: pbBuffer=0x10c6e550) returned 1 [0072.644] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e560 | out: pbBuffer=0x10c6e560) returned 1 [0072.644] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1fb01 | out: pbBuffer=0x10e1fb01) returned 1 [0072.644] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1fd01 | out: pbBuffer=0x10e1fd01) returned 1 [0072.645] ReadFile (in: hFile=0x19c, lpBuffer=0x10f30000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10f30000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0072.689] GetFileType (hFile=0x19c) returned 0x1 [0072.689] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.689] WriteFile (in: hFile=0x19c, lpBuffer=0x10f44000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f44000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0072.689] GetFileType (hFile=0x19c) returned 0x1 [0072.689] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.689] GetFileType (hFile=0x19c) returned 0x1 [0072.689] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.689] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1fc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1fc00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.689] GetFileType (hFile=0x19c) returned 0x1 [0072.689] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.689] GetFileType (hFile=0x19c) returned 0x1 [0072.689] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.689] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1fe00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e1fe00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.690] GetFileType (hFile=0x19c) returned 0x1 [0072.690] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.690] GetFileType (hFile=0x19c) returned 0x1 [0072.690] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.690] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0072.690] GetFileType (hFile=0x19c) returned 0x1 [0072.690] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.690] CloseHandle (hObject=0x19c) returned 1 [0072.692] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.trapget"), dwFlags=0x1) returned 1 [0072.692] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c67d8 | out: lpFileInformation=0x110c67d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0072.729] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0072.730] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0072.730] GetFileType (hFile=0x19c) returned 0x1 [0072.730] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0072.730] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e640 | out: pbBuffer=0x10c6e640) returned 1 [0072.730] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e650 | out: pbBuffer=0x10c6e650) returned 1 [0072.730] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1ff01 | out: pbBuffer=0x10e1ff01) returned 1 [0072.730] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ce0101 | out: pbBuffer=0x10ce0101) returned 1 [0072.730] ReadFile (in: hFile=0x19c, lpBuffer=0x10f56000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10f56000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0072.859] GetFileType (hFile=0x19c) returned 0x1 [0072.859] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.859] WriteFile (in: hFile=0x19c, lpBuffer=0x10f68000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f68000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0072.859] GetFileType (hFile=0x19c) returned 0x1 [0072.859] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.859] GetFileType (hFile=0x19c) returned 0x1 [0072.859] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.859] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ce0000*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.859] GetFileType (hFile=0x19c) returned 0x1 [0072.859] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.859] GetFileType (hFile=0x19c) returned 0x1 [0072.859] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.860] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce0200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ce0200*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.860] GetFileType (hFile=0x19c) returned 0x1 [0072.860] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.860] GetFileType (hFile=0x19c) returned 0x1 [0072.860] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.860] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0072.860] GetFileType (hFile=0x19c) returned 0x1 [0072.860] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.860] CloseHandle (hObject=0x19c) returned 1 [0072.862] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0072.862] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6918 | out: lpFileInformation=0x110c6918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0072.905] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0072.905] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0072.905] GetFileType (hFile=0x19c) returned 0x1 [0072.905] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0072.905] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e730 | out: pbBuffer=0x10c6e730) returned 1 [0072.905] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e740 | out: pbBuffer=0x10c6e740) returned 1 [0072.905] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ce0301 | out: pbBuffer=0x10ce0301) returned 1 [0072.905] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ce0501 | out: pbBuffer=0x10ce0501) returned 1 [0072.906] ReadFile (in: hFile=0x19c, lpBuffer=0x10f7a000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10f7a000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0072.945] GetFileType (hFile=0x19c) returned 0x1 [0072.945] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.945] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa6000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10fa6000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0072.945] GetFileType (hFile=0x19c) returned 0x1 [0072.945] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.945] GetFileType (hFile=0x19c) returned 0x1 [0072.945] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.946] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce0400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ce0400*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.946] GetFileType (hFile=0x19c) returned 0x1 [0072.946] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.946] GetFileType (hFile=0x19c) returned 0x1 [0072.946] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.946] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce0600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ce0600*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0072.946] GetFileType (hFile=0x19c) returned 0x1 [0072.946] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.946] GetFileType (hFile=0x19c) returned 0x1 [0072.946] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.946] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0072.946] GetFileType (hFile=0x19c) returned 0x1 [0072.946] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0072.946] CloseHandle (hObject=0x19c) returned 1 [0072.988] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0072.989] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6a58 | out: lpFileInformation=0x110c6a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0072.989] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0072.989] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0072.989] GetFileType (hFile=0x19c) returned 0x1 [0072.989] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0072.989] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e810 | out: pbBuffer=0x10c6e810) returned 1 [0072.989] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e820 | out: pbBuffer=0x10c6e820) returned 1 [0072.989] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ce0701 | out: pbBuffer=0x10ce0701) returned 1 [0072.990] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ce0901 | out: pbBuffer=0x10ce0901) returned 1 [0072.990] ReadFile (in: hFile=0x19c, lpBuffer=0x10fbe000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10fbe000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0073.041] GetFileType (hFile=0x19c) returned 0x1 [0073.041] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.043] WriteFile (in: hFile=0x19c, lpBuffer=0x10fd0000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10fd0000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0073.044] GetFileType (hFile=0x19c) returned 0x1 [0073.044] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.044] GetFileType (hFile=0x19c) returned 0x1 [0073.044] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.045] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce0800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ce0800*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.046] GetFileType (hFile=0x19c) returned 0x1 [0073.046] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.046] GetFileType (hFile=0x19c) returned 0x1 [0073.046] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.046] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce0a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ce0a00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.046] GetFileType (hFile=0x19c) returned 0x1 [0073.046] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.046] GetFileType (hFile=0x19c) returned 0x1 [0073.046] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.046] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0073.046] GetFileType (hFile=0x19c) returned 0x1 [0073.046] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.046] CloseHandle (hObject=0x19c) returned 1 [0073.048] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.trapget"), dwFlags=0x1) returned 1 [0073.049] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6b98 | out: lpFileInformation=0x110c6b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0073.049] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0073.049] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0073.049] GetFileType (hFile=0x19c) returned 0x1 [0073.049] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0073.049] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e900 | out: pbBuffer=0x10c6e900) returned 1 [0073.049] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e910 | out: pbBuffer=0x10c6e910) returned 1 [0073.049] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ce0b01 | out: pbBuffer=0x10ce0b01) returned 1 [0073.050] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ce0d01 | out: pbBuffer=0x10ce0d01) returned 1 [0073.051] SetEvent (hEvent=0x170) returned 1 [0073.051] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0073.088] GetFileType (hFile=0x19c) returned 0x1 [0073.088] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.089] WriteFile (in: hFile=0x19c, lpBuffer=0x11010000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11010000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0073.089] GetFileType (hFile=0x19c) returned 0x1 [0073.089] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.089] GetFileType (hFile=0x19c) returned 0x1 [0073.089] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.089] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce0c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ce0c00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.089] GetFileType (hFile=0x19c) returned 0x1 [0073.089] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.089] GetFileType (hFile=0x19c) returned 0x1 [0073.089] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.089] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce0e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ce0e00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.090] GetFileType (hFile=0x19c) returned 0x1 [0073.090] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.090] GetFileType (hFile=0x19c) returned 0x1 [0073.090] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.090] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0073.091] GetFileType (hFile=0x19c) returned 0x1 [0073.091] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.091] CloseHandle (hObject=0x19c) returned 1 [0073.093] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.trapget"), dwFlags=0x1) returned 1 [0073.094] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0073.094] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0073.094] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0073.094] GetFileType (hFile=0x19c) returned 0x1 [0073.094] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0073.094] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e030 | out: pbBuffer=0x1108e030) returned 1 [0073.094] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e040 | out: pbBuffer=0x1108e040) returned 1 [0073.094] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11030001 | out: pbBuffer=0x11030001) returned 1 [0073.094] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11030201 | out: pbBuffer=0x11030201) returned 1 [0073.095] ReadFile (in: hFile=0x19c, lpBuffer=0x1103e000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x1103e000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0073.136] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0073.347] GetFileType (hFile=0x19c) returned 0x1 [0073.347] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.347] WriteFile (in: hFile=0x19c, lpBuffer=0x11092000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11092000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0073.347] GetFileType (hFile=0x19c) returned 0x1 [0073.347] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.347] GetFileType (hFile=0x19c) returned 0x1 [0073.347] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.347] WriteFile (in: hFile=0x19c, lpBuffer=0x11030100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11030100*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.348] GetFileType (hFile=0x19c) returned 0x1 [0073.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.348] GetFileType (hFile=0x19c) returned 0x1 [0073.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.348] WriteFile (in: hFile=0x19c, lpBuffer=0x11030300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11030300*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.348] GetFileType (hFile=0x19c) returned 0x1 [0073.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.348] GetFileType (hFile=0x19c) returned 0x1 [0073.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.348] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0073.348] GetFileType (hFile=0x19c) returned 0x1 [0073.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.348] CloseHandle (hObject=0x19c) returned 1 [0073.350] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0073.351] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2198 | out: lpFileInformation=0x10cd2198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0073.389] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0073.389] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0073.389] GetFileType (hFile=0x19c) returned 0x1 [0073.389] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0073.389] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e120 | out: pbBuffer=0x1108e120) returned 1 [0073.389] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e130 | out: pbBuffer=0x1108e130) returned 1 [0073.389] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11030401 | out: pbBuffer=0x11030401) returned 1 [0073.389] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11030601 | out: pbBuffer=0x11030601) returned 1 [0073.390] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0073.430] GetFileType (hFile=0x19c) returned 0x1 [0073.430] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.430] WriteFile (in: hFile=0x19c, lpBuffer=0x110c8000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110c8000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0073.431] GetFileType (hFile=0x19c) returned 0x1 [0073.431] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.431] GetFileType (hFile=0x19c) returned 0x1 [0073.431] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.431] WriteFile (in: hFile=0x19c, lpBuffer=0x11030500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11030500*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.431] GetFileType (hFile=0x19c) returned 0x1 [0073.431] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.431] GetFileType (hFile=0x19c) returned 0x1 [0073.431] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.431] WriteFile (in: hFile=0x19c, lpBuffer=0x11030700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11030700*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.431] GetFileType (hFile=0x19c) returned 0x1 [0073.431] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.431] GetFileType (hFile=0x19c) returned 0x1 [0073.431] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.431] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0073.431] GetFileType (hFile=0x19c) returned 0x1 [0073.431] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.432] CloseHandle (hObject=0x19c) returned 1 [0073.433] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.trapget"), dwFlags=0x1) returned 1 [0073.434] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd22d8 | out: lpFileInformation=0x10cd22d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0073.434] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0073.434] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0073.434] GetFileType (hFile=0x19c) returned 0x1 [0073.434] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0073.434] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e200 | out: pbBuffer=0x1108e200) returned 1 [0073.434] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e210 | out: pbBuffer=0x1108e210) returned 1 [0073.435] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11030801 | out: pbBuffer=0x11030801) returned 1 [0073.435] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11030a01 | out: pbBuffer=0x11030a01) returned 1 [0073.435] ReadFile (in: hFile=0x19c, lpBuffer=0x110da000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x110da000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0073.492] GetFileType (hFile=0x19c) returned 0x1 [0073.493] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.493] WriteFile (in: hFile=0x19c, lpBuffer=0x11050000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11050000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0073.495] GetFileType (hFile=0x19c) returned 0x1 [0073.495] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.495] GetFileType (hFile=0x19c) returned 0x1 [0073.495] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.495] WriteFile (in: hFile=0x19c, lpBuffer=0x11030900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11030900*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.497] GetFileType (hFile=0x19c) returned 0x1 [0073.497] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.498] GetFileType (hFile=0x19c) returned 0x1 [0073.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.498] WriteFile (in: hFile=0x19c, lpBuffer=0x11030b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11030b00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.508] GetFileType (hFile=0x19c) returned 0x1 [0073.508] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.508] GetFileType (hFile=0x19c) returned 0x1 [0073.508] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.508] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0073.508] GetFileType (hFile=0x19c) returned 0x1 [0073.508] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.508] CloseHandle (hObject=0x19c) returned 1 [0073.510] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0073.511] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2418 | out: lpFileInformation=0x10cd2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0073.511] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0073.511] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0073.511] GetFileType (hFile=0x19c) returned 0x1 [0073.511] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0073.511] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e2f0 | out: pbBuffer=0x1108e2f0) returned 1 [0073.511] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e300 | out: pbBuffer=0x1108e300) returned 1 [0073.512] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11030c01 | out: pbBuffer=0x11030c01) returned 1 [0073.512] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11030e01 | out: pbBuffer=0x11030e01) returned 1 [0073.512] ReadFile (in: hFile=0x19c, lpBuffer=0x11062000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x11062000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0073.585] GetFileType (hFile=0x19c) returned 0x1 [0073.585] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.585] WriteFile (in: hFile=0x19c, lpBuffer=0x10eda000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10eda000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0073.585] GetFileType (hFile=0x19c) returned 0x1 [0073.585] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.585] GetFileType (hFile=0x19c) returned 0x1 [0073.585] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.585] WriteFile (in: hFile=0x19c, lpBuffer=0x11030d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11030d00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.586] GetFileType (hFile=0x19c) returned 0x1 [0073.586] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.586] GetFileType (hFile=0x19c) returned 0x1 [0073.586] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.586] WriteFile (in: hFile=0x19c, lpBuffer=0x11030f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11030f00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.586] GetFileType (hFile=0x19c) returned 0x1 [0073.586] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.586] GetFileType (hFile=0x19c) returned 0x1 [0073.586] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.586] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0073.586] GetFileType (hFile=0x19c) returned 0x1 [0073.586] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.586] CloseHandle (hObject=0x19c) returned 1 [0073.588] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0073.589] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2558 | out: lpFileInformation=0x10cd2558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0073.589] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0073.589] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0073.589] GetFileType (hFile=0x19c) returned 0x1 [0073.589] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0073.589] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e3e0 | out: pbBuffer=0x1108e3e0) returned 1 [0073.589] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e3f0 | out: pbBuffer=0x1108e3f0) returned 1 [0073.589] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11031001 | out: pbBuffer=0x11031001) returned 1 [0073.590] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11031201 | out: pbBuffer=0x11031201) returned 1 [0073.590] ReadFile (in: hFile=0x19c, lpBuffer=0x10eec000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10eec000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0073.638] GetFileType (hFile=0x19c) returned 0x1 [0073.638] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.638] WriteFile (in: hFile=0x19c, lpBuffer=0x10efe000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10efe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0073.639] GetFileType (hFile=0x19c) returned 0x1 [0073.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.639] GetFileType (hFile=0x19c) returned 0x1 [0073.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.639] WriteFile (in: hFile=0x19c, lpBuffer=0x11031100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11031100*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.639] GetFileType (hFile=0x19c) returned 0x1 [0073.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.639] GetFileType (hFile=0x19c) returned 0x1 [0073.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.639] WriteFile (in: hFile=0x19c, lpBuffer=0x11031300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11031300*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.639] GetFileType (hFile=0x19c) returned 0x1 [0073.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.639] GetFileType (hFile=0x19c) returned 0x1 [0073.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.639] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0073.639] GetFileType (hFile=0x19c) returned 0x1 [0073.639] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.640] CloseHandle (hObject=0x19c) returned 1 [0073.681] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.trapget"), dwFlags=0x1) returned 1 [0073.682] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2698 | out: lpFileInformation=0x10cd2698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0073.682] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0073.682] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0073.682] GetFileType (hFile=0x19c) returned 0x1 [0073.682] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0073.682] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e4d0 | out: pbBuffer=0x1108e4d0) returned 1 [0073.682] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e4e0 | out: pbBuffer=0x1108e4e0) returned 1 [0073.682] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11031501 | out: pbBuffer=0x11031501) returned 1 [0073.683] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11031701 | out: pbBuffer=0x11031701) returned 1 [0073.683] ReadFile (in: hFile=0x19c, lpBuffer=0x10f10000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10f10000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0073.790] GetFileType (hFile=0x19c) returned 0x1 [0073.790] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.793] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f22000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0073.807] GetFileType (hFile=0x19c) returned 0x1 [0073.807] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.810] GetFileType (hFile=0x19c) returned 0x1 [0073.844] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.845] WriteFile (in: hFile=0x19c, lpBuffer=0x11031600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11031600*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.845] GetFileType (hFile=0x19c) returned 0x1 [0073.845] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.845] GetFileType (hFile=0x19c) returned 0x1 [0073.845] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.845] WriteFile (in: hFile=0x19c, lpBuffer=0x11031800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11031800*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.845] GetFileType (hFile=0x19c) returned 0x1 [0073.845] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.845] GetFileType (hFile=0x19c) returned 0x1 [0073.845] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.845] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0073.845] GetFileType (hFile=0x19c) returned 0x1 [0073.845] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.845] CloseHandle (hObject=0x19c) returned 1 [0073.847] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.trapget"), dwFlags=0x1) returned 1 [0073.848] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd27d8 | out: lpFileInformation=0x10cd27d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0073.918] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0073.918] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0073.918] GetFileType (hFile=0x19c) returned 0x1 [0073.918] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0073.918] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e5b0 | out: pbBuffer=0x1108e5b0) returned 1 [0073.918] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e5c0 | out: pbBuffer=0x1108e5c0) returned 1 [0073.918] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11031a01 | out: pbBuffer=0x11031a01) returned 1 [0073.919] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11031c01 | out: pbBuffer=0x11031c01) returned 1 [0073.919] ReadFile (in: hFile=0x19c, lpBuffer=0x10f44000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10f44000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0073.963] GetFileType (hFile=0x19c) returned 0x1 [0073.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.963] WriteFile (in: hFile=0x19c, lpBuffer=0x10f56000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f56000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0073.963] GetFileType (hFile=0x19c) returned 0x1 [0073.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.963] GetFileType (hFile=0x19c) returned 0x1 [0073.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.963] WriteFile (in: hFile=0x19c, lpBuffer=0x11031b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11031b00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.963] GetFileType (hFile=0x19c) returned 0x1 [0073.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.963] GetFileType (hFile=0x19c) returned 0x1 [0073.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.964] WriteFile (in: hFile=0x19c, lpBuffer=0x11031d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11031d00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0073.964] GetFileType (hFile=0x19c) returned 0x1 [0073.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.964] GetFileType (hFile=0x19c) returned 0x1 [0073.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.964] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0073.964] GetFileType (hFile=0x19c) returned 0x1 [0073.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0073.964] CloseHandle (hObject=0x19c) returned 1 [0073.966] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0073.967] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2918 | out: lpFileInformation=0x10cd2918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0074.051] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0074.051] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0074.052] GetFileType (hFile=0x19c) returned 0x1 [0074.052] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0074.052] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e6a0 | out: pbBuffer=0x1108e6a0) returned 1 [0074.052] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e6b0 | out: pbBuffer=0x1108e6b0) returned 1 [0074.052] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x11031e01 | out: pbBuffer=0x11031e01) returned 1 [0074.053] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ce0001 | out: pbBuffer=0x10ce0001) returned 1 [0074.053] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfa000, nNumberOfBytesToRead=0x101000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10cfa000*, lpNumberOfBytesRead=0x10c89cb8*=0x101000, lpOverlapped=0x0) returned 1 [0074.148] GetFileType (hFile=0x19c) returned 0x1 [0074.148] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0074.148] WriteFile (in: hFile=0x19c, lpBuffer=0x110f8000*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110f8000*, lpNumberOfBytesWritten=0x10c89cb8*=0x101000, lpOverlapped=0x10c89cbc) returned 1 [0074.153] GetFileType (hFile=0x19c) returned 0x1 [0074.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0074.153] GetFileType (hFile=0x19c) returned 0x1 [0074.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0074.153] WriteFile (in: hFile=0x19c, lpBuffer=0x11031f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x11031f00*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0074.153] GetFileType (hFile=0x19c) returned 0x1 [0074.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0074.153] GetFileType (hFile=0x19c) returned 0x1 [0074.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0074.153] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce0100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ce0100*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0074.153] GetFileType (hFile=0x19c) returned 0x1 [0074.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0074.153] GetFileType (hFile=0x19c) returned 0x1 [0074.154] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0074.154] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0074.154] GetFileType (hFile=0x19c) returned 0x1 [0074.154] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0074.154] CloseHandle (hObject=0x19c) returned 1 [0074.168] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0074.205] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6008 | out: lpFileInformation=0x110c6008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0074.221] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0074.260] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0074.260] GetFileType (hFile=0x19c) returned 0x1 [0074.260] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0074.260] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0074.260] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e050 | out: pbBuffer=0x10c6e050) returned 1 [0074.260] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107c001 | out: pbBuffer=0x1107c001) returned 1 [0074.260] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107c201 | out: pbBuffer=0x1107c201) returned 1 [0074.261] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6e000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10f6e000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0074.298] SetEvent (hEvent=0x170) returned 1 [0074.298] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0074.335] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0074.335] SetEvent (hEvent=0x170) returned 1 [0074.335] SetEvent (hEvent=0x158) returned 1 [0074.335] SetEvent (hEvent=0x12c) returned 1 [0074.335] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0074.362] SetEvent (hEvent=0x168) returned 1 [0074.362] SetEvent (hEvent=0x12c) returned 1 [0074.363] GetFileType (hFile=0x19c) returned 0x1 [0074.363] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.363] WriteFile (in: hFile=0x19c, lpBuffer=0x10f80000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10f80000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0074.363] GetFileType (hFile=0x19c) returned 0x1 [0074.363] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.363] GetFileType (hFile=0x19c) returned 0x1 [0074.363] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.363] WriteFile (in: hFile=0x19c, lpBuffer=0x1107c100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107c100*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.363] GetFileType (hFile=0x19c) returned 0x1 [0074.363] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.363] GetFileType (hFile=0x19c) returned 0x1 [0074.364] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.364] WriteFile (in: hFile=0x19c, lpBuffer=0x1107c400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107c400*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.364] GetFileType (hFile=0x19c) returned 0x1 [0074.364] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.364] GetFileType (hFile=0x19c) returned 0x1 [0074.364] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.364] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0074.364] GetFileType (hFile=0x19c) returned 0x1 [0074.364] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.364] CloseHandle (hObject=0x19c) returned 1 [0074.366] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0074.366] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6058 | out: lpFileInformation=0x110c6058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0074.366] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0074.367] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0074.367] GetFileType (hFile=0x19c) returned 0x1 [0074.367] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0074.367] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0074.367] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e060 | out: pbBuffer=0x10c6e060) returned 1 [0074.367] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107c001 | out: pbBuffer=0x1107c001) returned 1 [0074.367] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107c301 | out: pbBuffer=0x1107c301) returned 1 [0074.368] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0074.381] GetFileType (hFile=0x19c) returned 0x1 [0074.381] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.382] WriteFile (in: hFile=0x19c, lpBuffer=0x11092000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x11092000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0074.382] GetFileType (hFile=0x19c) returned 0x1 [0074.382] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.382] GetFileType (hFile=0x19c) returned 0x1 [0074.382] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.382] WriteFile (in: hFile=0x19c, lpBuffer=0x1107c200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107c200*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.382] GetFileType (hFile=0x19c) returned 0x1 [0074.382] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.382] GetFileType (hFile=0x19c) returned 0x1 [0074.382] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.382] WriteFile (in: hFile=0x19c, lpBuffer=0x1107c500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107c500*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.382] GetFileType (hFile=0x19c) returned 0x1 [0074.382] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.382] GetFileType (hFile=0x19c) returned 0x1 [0074.383] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.383] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0074.383] GetFileType (hFile=0x19c) returned 0x1 [0074.383] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.383] CloseHandle (hObject=0x19c) returned 1 [0074.385] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.trapget"), dwFlags=0x1) returned 1 [0074.385] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6198 | out: lpFileInformation=0x110c6198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0074.385] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0074.386] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0074.386] GetFileType (hFile=0x19c) returned 0x1 [0074.386] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0074.386] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e140 | out: pbBuffer=0x10c6e140) returned 1 [0074.386] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e150 | out: pbBuffer=0x10c6e150) returned 1 [0074.386] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107c801 | out: pbBuffer=0x1107c801) returned 1 [0074.386] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107ca01 | out: pbBuffer=0x1107ca01) returned 1 [0074.387] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0074.390] GetFileType (hFile=0x19c) returned 0x1 [0074.390] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.390] WriteFile (in: hFile=0x19c, lpBuffer=0x10f44000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10f44000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0074.390] GetFileType (hFile=0x19c) returned 0x1 [0074.390] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.390] GetFileType (hFile=0x19c) returned 0x1 [0074.390] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.391] WriteFile (in: hFile=0x19c, lpBuffer=0x1107c900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107c900*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.391] GetFileType (hFile=0x19c) returned 0x1 [0074.391] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.391] GetFileType (hFile=0x19c) returned 0x1 [0074.391] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.391] WriteFile (in: hFile=0x19c, lpBuffer=0x1107cb00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107cb00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.391] GetFileType (hFile=0x19c) returned 0x1 [0074.391] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.391] GetFileType (hFile=0x19c) returned 0x1 [0074.391] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.391] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0074.391] GetFileType (hFile=0x19c) returned 0x1 [0074.391] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.391] CloseHandle (hObject=0x19c) returned 1 [0074.393] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0074.394] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c62d8 | out: lpFileInformation=0x110c62d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0074.394] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0074.394] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0074.395] GetFileType (hFile=0x19c) returned 0x1 [0074.395] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0074.395] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e230 | out: pbBuffer=0x10c6e230) returned 1 [0074.395] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e240 | out: pbBuffer=0x10c6e240) returned 1 [0074.395] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107cd01 | out: pbBuffer=0x1107cd01) returned 1 [0074.395] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107cf01 | out: pbBuffer=0x1107cf01) returned 1 [0074.395] ReadFile (in: hFile=0x19c, lpBuffer=0x10f56000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10f56000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0074.404] GetFileType (hFile=0x19c) returned 0x1 [0074.404] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.404] WriteFile (in: hFile=0x19c, lpBuffer=0x110c8000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x110c8000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0074.405] GetFileType (hFile=0x19c) returned 0x1 [0074.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.405] GetFileType (hFile=0x19c) returned 0x1 [0074.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.405] WriteFile (in: hFile=0x19c, lpBuffer=0x1107ce00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107ce00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.405] GetFileType (hFile=0x19c) returned 0x1 [0074.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.405] GetFileType (hFile=0x19c) returned 0x1 [0074.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.405] WriteFile (in: hFile=0x19c, lpBuffer=0x1107d000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107d000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.405] GetFileType (hFile=0x19c) returned 0x1 [0074.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.405] GetFileType (hFile=0x19c) returned 0x1 [0074.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.405] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0074.405] GetFileType (hFile=0x19c) returned 0x1 [0074.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.406] CloseHandle (hObject=0x19c) returned 1 [0074.407] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.trapget"), dwFlags=0x1) returned 1 [0074.408] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6418 | out: lpFileInformation=0x110c6418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0074.408] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0074.408] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0074.408] GetFileType (hFile=0x19c) returned 0x1 [0074.408] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0074.408] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e320 | out: pbBuffer=0x10c6e320) returned 1 [0074.408] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e330 | out: pbBuffer=0x10c6e330) returned 1 [0074.409] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107d201 | out: pbBuffer=0x1107d201) returned 1 [0074.409] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107d401 | out: pbBuffer=0x1107d401) returned 1 [0074.409] ReadFile (in: hFile=0x19c, lpBuffer=0x110da000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x110da000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0074.425] GetFileType (hFile=0x19c) returned 0x1 [0074.425] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.425] WriteFile (in: hFile=0x19c, lpBuffer=0x10eda000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10eda000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0074.425] GetFileType (hFile=0x19c) returned 0x1 [0074.425] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.425] GetFileType (hFile=0x19c) returned 0x1 [0074.425] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.425] WriteFile (in: hFile=0x19c, lpBuffer=0x1107d300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107d300*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.425] GetFileType (hFile=0x19c) returned 0x1 [0074.426] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.426] GetFileType (hFile=0x19c) returned 0x1 [0074.426] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.426] WriteFile (in: hFile=0x19c, lpBuffer=0x1107d500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107d500*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.426] GetFileType (hFile=0x19c) returned 0x1 [0074.426] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.426] GetFileType (hFile=0x19c) returned 0x1 [0074.426] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.426] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0074.426] GetFileType (hFile=0x19c) returned 0x1 [0074.426] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.426] CloseHandle (hObject=0x19c) returned 1 [0074.428] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.trapget"), dwFlags=0x1) returned 1 [0074.429] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6558 | out: lpFileInformation=0x110c6558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1 [0074.429] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0074.429] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0074.429] GetFileType (hFile=0x19c) returned 0x1 [0074.429] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0074.429] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e410 | out: pbBuffer=0x10c6e410) returned 1 [0074.429] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e430 | out: pbBuffer=0x10c6e430) returned 1 [0074.429] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107d601 | out: pbBuffer=0x1107d601) returned 1 [0074.430] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107d801 | out: pbBuffer=0x1107d801) returned 1 [0074.430] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfa000, nNumberOfBytesToRead=0x101000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10cfa000*, lpNumberOfBytesRead=0x10c8fcb8*=0x101000, lpOverlapped=0x0) returned 1 [0074.463] GetFileType (hFile=0x19c) returned 0x1 [0074.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.464] WriteFile (in: hFile=0x19c, lpBuffer=0x110f8000*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x110f8000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x101000, lpOverlapped=0x10c8fcbc) returned 1 [0074.474] GetFileType (hFile=0x19c) returned 0x1 [0074.474] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.474] GetFileType (hFile=0x19c) returned 0x1 [0074.474] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.475] WriteFile (in: hFile=0x19c, lpBuffer=0x1107d700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107d700*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.475] GetFileType (hFile=0x19c) returned 0x1 [0074.475] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.475] GetFileType (hFile=0x19c) returned 0x1 [0074.475] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.475] WriteFile (in: hFile=0x19c, lpBuffer=0x1107d900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107d900*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.475] GetFileType (hFile=0x19c) returned 0x1 [0074.475] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.475] GetFileType (hFile=0x19c) returned 0x1 [0074.475] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.475] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0074.475] GetFileType (hFile=0x19c) returned 0x1 [0074.475] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x101000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.475] CloseHandle (hObject=0x19c) returned 1 [0074.489] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.trapget"), dwFlags=0x1) returned 1 [0074.491] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6698 | out: lpFileInformation=0x110c6698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0074.491] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0074.491] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0074.492] GetFileType (hFile=0x19c) returned 0x1 [0074.492] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0074.492] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e500 | out: pbBuffer=0x10c6e500) returned 1 [0074.492] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e510 | out: pbBuffer=0x10c6e510) returned 1 [0074.492] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107da01 | out: pbBuffer=0x1107da01) returned 1 [0074.492] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107dc01 | out: pbBuffer=0x1107dc01) returned 1 [0074.492] ReadFile (in: hFile=0x19c, lpBuffer=0x10eec000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10eec000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0074.498] GetFileType (hFile=0x19c) returned 0x1 [0074.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.498] WriteFile (in: hFile=0x19c, lpBuffer=0x10efe000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10efe000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0074.499] GetFileType (hFile=0x19c) returned 0x1 [0074.499] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.499] GetFileType (hFile=0x19c) returned 0x1 [0074.499] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.499] WriteFile (in: hFile=0x19c, lpBuffer=0x1107db00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107db00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.499] GetFileType (hFile=0x19c) returned 0x1 [0074.499] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.499] GetFileType (hFile=0x19c) returned 0x1 [0074.499] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.499] WriteFile (in: hFile=0x19c, lpBuffer=0x1107dd00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1107dd00*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.499] GetFileType (hFile=0x19c) returned 0x1 [0074.499] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.499] GetFileType (hFile=0x19c) returned 0x1 [0074.499] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.500] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0074.500] GetFileType (hFile=0x19c) returned 0x1 [0074.500] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.500] CloseHandle (hObject=0x19c) returned 1 [0074.502] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.TRAPGET" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.trapget"), dwFlags=0x1) returned 1 [0074.503] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c67d8 | out: lpFileInformation=0x110c67d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0074.503] CreateFileW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0074.503] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0074.503] GetFileType (hFile=0x19c) returned 0x1 [0074.503] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0074.503] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e5f0 | out: pbBuffer=0x10c6e5f0) returned 1 [0074.503] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e600 | out: pbBuffer=0x10c6e600) returned 1 [0074.503] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1107df01 | out: pbBuffer=0x1107df01) returned 1 [0074.504] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc101 | out: pbBuffer=0x10cdc101) returned 1 [0074.504] SetEvent (hEvent=0x158) returned 1 [0074.504] ReadFile (in: hFile=0x19c, lpBuffer=0x111fa000, nNumberOfBytesToRead=0x111000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x111fa000*, lpNumberOfBytesRead=0x10c8fcb8*=0x111000, lpOverlapped=0x0) returned 1 [0074.593] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0074.800] GetFileType (hFile=0x19c) returned 0x1 [0074.800] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.800] WriteFile (in: hFile=0x19c, lpBuffer=0x1130c000*, nNumberOfBytesToWrite=0x111000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x1130c000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x111000, lpOverlapped=0x10c8fcbc) returned 1 [0074.805] GetFileType (hFile=0x19c) returned 0x1 [0074.805] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.805] GetFileType (hFile=0x19c) returned 0x1 [0074.805] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.805] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10cdc000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.805] GetFileType (hFile=0x19c) returned 0x1 [0074.805] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.805] GetFileType (hFile=0x19c) returned 0x1 [0074.805] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.805] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10cdc200*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.805] GetFileType (hFile=0x19c) returned 0x1 [0074.805] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.806] GetFileType (hFile=0x19c) returned 0x1 [0074.806] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.806] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0074.806] GetFileType (hFile=0x19c) returned 0x1 [0074.806] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.806] CloseHandle (hObject=0x19c) returned 1 [0074.821] MoveFileExW (lpExistingFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), lpNewFileName="C:\\Logs\\Security.evtx.TRAPGET" (normalized: "c:\\logs\\security.evtx.trapget"), dwFlags=0x1) returned 1 [0074.869] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6008 | out: lpFileInformation=0x110c6008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0074.869] CreateFileW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0074.870] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0074.870] GetFileType (hFile=0x19c) returned 0x1 [0074.870] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0074.870] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0074.870] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e050 | out: pbBuffer=0x10c6e050) returned 1 [0074.870] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc101 | out: pbBuffer=0x10cdc101) returned 1 [0074.870] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc401 | out: pbBuffer=0x10cdc401) returned 1 [0074.870] ReadFile (in: hFile=0x19c, lpBuffer=0x11092000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x11092000*, lpNumberOfBytesRead=0x10c8fcb8*=0x11000, lpOverlapped=0x0) returned 1 [0074.907] GetFileType (hFile=0x19c) returned 0x1 [0074.907] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.907] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c8fcb8*=0x11000, lpOverlapped=0x10c8fcbc) returned 1 [0074.907] GetFileType (hFile=0x19c) returned 0x1 [0074.908] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.908] GetFileType (hFile=0x19c) returned 0x1 [0074.908] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.908] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10cdc300*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.908] GetFileType (hFile=0x19c) returned 0x1 [0074.908] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.908] GetFileType (hFile=0x19c) returned 0x1 [0074.908] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.908] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10cdc500*, lpNumberOfBytesWritten=0x10c8fcb8*=0x100, lpOverlapped=0x10c8fcbc) returned 1 [0074.908] GetFileType (hFile=0x19c) returned 0x1 [0074.908] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.908] GetFileType (hFile=0x19c) returned 0x1 [0074.908] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.908] WriteFile (in: hFile=0x19c, lpBuffer=0x10c8fdbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c8fcb8, lpOverlapped=0x10c8fcbc | out: lpBuffer=0x10c8fdbc*, lpNumberOfBytesWritten=0x10c8fcb8*=0x7, lpOverlapped=0x10c8fcbc) returned 1 [0074.908] GetFileType (hFile=0x19c) returned 0x1 [0074.908] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c8fca0 | out: lpNewFilePointer=0x0) returned 1 [0074.908] CloseHandle (hObject=0x19c) returned 1 [0074.910] MoveFileExW (lpExistingFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), lpNewFileName="C:\\Logs\\Setup.evtx.TRAPGET" (normalized: "c:\\logs\\setup.evtx.trapget"), dwFlags=0x1) returned 1 [0074.911] GetFileAttributesExW (in: lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6148 | out: lpFileInformation=0x110c6148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1 [0074.953] CreateFileW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0074.953] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c8fcc8 | out: lpMode=0x10c8fcc8) returned 0 [0074.953] GetFileType (hFile=0x19c) returned 0x1 [0074.953] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c8fcf8 | out: lpFileInformation=0x10c8fcf8) returned 1 [0074.953] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e120 | out: pbBuffer=0x10c6e120) returned 1 [0074.953] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e130 | out: pbBuffer=0x10c6e130) returned 1 [0074.953] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc601 | out: pbBuffer=0x10cdc601) returned 1 [0074.954] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc801 | out: pbBuffer=0x10cdc801) returned 1 [0074.954] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfa000, nNumberOfBytesToRead=0x111000, lpNumberOfBytesRead=0x10c8fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10cfa000*, lpNumberOfBytesRead=0x10c8fcb8*=0x111000, lpOverlapped=0x0) returned 1 [0075.001] SetEvent (hEvent=0x158) returned 1 [0075.002] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0075.037] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0075.037] SetEvent (hEvent=0x158) returned 1 [0075.037] SetEvent (hEvent=0x138) returned 1 [0075.037] SetEvent (hEvent=0x170) returned 1 [0075.037] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0075.111] SetEvent (hEvent=0x168) returned 1 [0075.111] SetEvent (hEvent=0x170) returned 1 [0075.124] GetFileType (hFile=0x19c) returned 0x1 [0075.124] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.124] WriteFile (in: hFile=0x19c, lpBuffer=0x10e0c000*, nNumberOfBytesToWrite=0x111000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e0c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x111000, lpOverlapped=0x10c89cbc) returned 1 [0075.128] GetFileType (hFile=0x19c) returned 0x1 [0075.128] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.128] GetFileType (hFile=0x19c) returned 0x1 [0075.128] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.128] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cdc700*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0075.129] GetFileType (hFile=0x19c) returned 0x1 [0075.129] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.129] GetFileType (hFile=0x19c) returned 0x1 [0075.129] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.129] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cdc900*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0075.129] GetFileType (hFile=0x19c) returned 0x1 [0075.129] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.129] GetFileType (hFile=0x19c) returned 0x1 [0075.129] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.129] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0075.129] GetFileType (hFile=0x19c) returned 0x1 [0075.129] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.129] CloseHandle (hObject=0x19c) returned 1 [0075.144] MoveFileExW (lpExistingFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), lpNewFileName="C:\\Logs\\System.evtx.TRAPGET" (normalized: "c:\\logs\\system.evtx.trapget"), dwFlags=0x1) returned 1 [0075.144] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0x110c6008 | out: lpFileInformation=0x110c6008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0075.155] CreateFileW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.155] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0075.155] GetFileType (hFile=0x19c) returned 0x1 [0075.155] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0075.155] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0075.155] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e050 | out: pbBuffer=0x10c6e050) returned 1 [0075.155] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc001 | out: pbBuffer=0x10cdc001) returned 1 [0075.156] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc201 | out: pbBuffer=0x10cdc201) returned 1 [0075.156] ReadFile (in: hFile=0x19c, lpBuffer=0x11092000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x11092000*, lpNumberOfBytesRead=0x10c89cb8*=0x11000, lpOverlapped=0x0) returned 1 [0075.207] GetFileType (hFile=0x19c) returned 0x1 [0075.207] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.207] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x11000, lpOverlapped=0x10c89cbc) returned 1 [0075.207] GetFileType (hFile=0x19c) returned 0x1 [0075.208] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.208] GetFileType (hFile=0x19c) returned 0x1 [0075.208] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.208] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cdc100*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0075.208] GetFileType (hFile=0x19c) returned 0x1 [0075.208] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.208] GetFileType (hFile=0x19c) returned 0x1 [0075.208] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.208] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cdc300*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0075.208] GetFileType (hFile=0x19c) returned 0x1 [0075.208] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.208] GetFileType (hFile=0x19c) returned 0x1 [0075.208] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.208] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0075.208] GetFileType (hFile=0x19c) returned 0x1 [0075.208] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.208] CloseHandle (hObject=0x19c) returned 1 [0075.210] MoveFileExW (lpExistingFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), lpNewFileName="C:\\Logs\\Windows PowerShell.evtx.TRAPGET" (normalized: "c:\\logs\\windows powershell.evtx.trapget"), dwFlags=0x1) returned 1 [0075.211] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), fInfoLevelId=0x0, lpFileInformation=0x110c6198 | out: lpFileInformation=0x110c6198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.252] CreateFileW (lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.253] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcf8 [0075.253] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.253] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.253] FindClose (in: hFindFile=0x7efcf8 | out: hFindFile=0x7efcf8) returned 1 [0075.253] CreateFileW (lpFileName="C:\\PerfLogs\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\perflogs\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.254] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d94 | out: lpMode=0x10c89d94) returned 0 [0075.254] GetFileType (hFile=0x19c) returned 0x1 [0075.254] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0075.254] WriteFile (in: hFile=0x19c, lpBuffer=0x10cbc480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d84, lpOverlapped=0x10c89d88 | out: lpBuffer=0x10cbc480*, lpNumberOfBytesWritten=0x10c89d84*=0x464, lpOverlapped=0x10c89d88) returned 1 [0075.254] GetFileType (hFile=0x19c) returned 0x1 [0075.254] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0075.254] CloseHandle (hObject=0x19c) returned 1 [0075.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files" (normalized: "c:\\program files"), fInfoLevelId=0x0, lpFileInformation=0x110c61e8 | out: lpFileInformation=0x110c61e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1d58e3e3, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x1d58e3e3, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0075.255] CreateFileW (lpFileName="C:\\Program Files" (normalized: "c:\\program files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.255] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1d58e3e3, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x1d58e3e3, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcb8 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1d58e3e3, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x1d58e3e3, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1081ebfd, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x1081ebfd, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x107d148f, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x107d148f, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x12a24d54, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x12a24d54, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x106ec61a, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x106ec61a, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1081ebfd, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x1081ebfd, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x107f7703, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x107f7703, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x107f7703, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x107f7703, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x10784f28, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x10784f28, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rempl", cAlternateFileName="")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x1081ebfd, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x1081ebfd, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x10712851, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x10712851, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x10738a90, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x10738a90, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0075.255] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x107f7703, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x107f7703, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x106ec61a, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x106ec61a, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x107d148f, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x107d148f, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c7efb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c8710, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x10869d75, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x10869d75, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x10738a90, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x10738a90, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92acc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x107f7703, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x107f7703, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.256] FindClose (in: hFindFile=0x7efcb8 | out: hFindFile=0x7efcb8) returned 1 [0075.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), fInfoLevelId=0x0, lpFileInformation=0x110c69b8 | out: lpFileInformation=0x110c69b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0075.256] CreateFileW (lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.256] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efdf8 [0075.256] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x107ab197, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x107ab197, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x106ec61a, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x106ec61a, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0075.256] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x10843a72, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x10843a72, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x10869d75, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x10869d75, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x106a01aa, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x106a01aa, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x49ecb94e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x49ecb94e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1081ebfd, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x1081ebfd, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~1")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x10843a72, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x10843a72, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x107ab197, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x107ab197, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbbf6e4, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xfbbf6e4, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x10784f28, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x10784f28, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x107ab197, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x107ab197, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc583dc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x10712851, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x10712851, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x107d148f, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x107d148f, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x10784f28, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x10784f28, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x10843a72, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x10843a72, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.257] FindClose (in: hFindFile=0x7efdf8 | out: hFindFile=0x7efdf8) returned 1 [0075.257] GetFileAttributesExW (in: lpFileName="C:\\ProgramData" (normalized: "c:\\programdata"), fInfoLevelId=0x0, lpFileInformation=0x110c7048 | out: lpFileInformation=0x110c7048*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0075.257] CreateFileW (lpFileName="C:\\ProgramData" (normalized: "c:\\programdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.257] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0178 [0075.257] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0075.257] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1 [0075.258] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.258] FindClose (in: hFindFile=0x7f0178 | out: hFindFile=0x7f0178) returned 1 [0075.258] GetFileAttributesExW (in: lpFileName="C:\\Recovery" (normalized: "c:\\recovery"), fInfoLevelId=0x0, lpFileInformation=0x110c7598 | out: lpFileInformation=0x110c7598*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.322] CreateFileW (lpFileName="C:\\Recovery" (normalized: "c:\\recovery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.322] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efc78 [0075.323] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.323] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0075.323] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1044dfc5, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReAgentOld.xml", cAlternateFileName="REAGEN~1.XML")) returned 1 [0075.323] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.323] FindClose (in: hFindFile=0x7efc78 | out: hFindFile=0x7efc78) returned 1 [0075.323] CreateFileW (lpFileName="C:\\Recovery\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\recovery\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.328] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d94 | out: lpMode=0x10c89d94) returned 0 [0075.329] GetFileType (hFile=0x19c) returned 0x1 [0075.329] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0075.329] WriteFile (in: hFile=0x19c, lpBuffer=0x10cbcd80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d84, lpOverlapped=0x10c89d88 | out: lpBuffer=0x10cbcd80*, lpNumberOfBytesWritten=0x10c89d84*=0x464, lpOverlapped=0x10c89d88) returned 1 [0075.329] GetFileType (hFile=0x19c) returned 0x1 [0075.329] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0075.329] CloseHandle (hObject=0x19c) returned 1 [0075.330] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\Logs" (normalized: "c:\\recovery\\logs"), fInfoLevelId=0x0, lpFileInformation=0x110c7688 | out: lpFileInformation=0x110c7688*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.330] CreateFileW (lpFileName="C:\\Recovery\\Logs" (normalized: "c:\\recovery\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.330] FindFirstFileW (in: lpFileName="C:\\Recovery\\Logs\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efef8 [0075.330] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.330] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.330] FindClose (in: hFindFile=0x7efef8 | out: hFindFile=0x7efef8) returned 1 [0075.330] CreateFileW (lpFileName="C:\\Recovery\\Logs\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\recovery\\logs\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.348] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0075.348] GetFileType (hFile=0x19c) returned 0x1 [0075.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0075.348] WriteFile (in: hFile=0x19c, lpBuffer=0x10cbd680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cbd680*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0075.349] GetFileType (hFile=0x19c) returned 0x1 [0075.349] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0075.349] CloseHandle (hObject=0x19c) returned 1 [0075.349] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\ReAgentOld.xml" (normalized: "c:\\recovery\\reagentold.xml"), fInfoLevelId=0x0, lpFileInformation=0x110c76d8 | out: lpFileInformation=0x110c76d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1044dfc5, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3ee)) returned 1 [0075.384] CreateFileW (lpFileName="C:\\Recovery\\ReAgentOld.xml" (normalized: "c:\\recovery\\reagentold.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.384] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0075.384] GetFileType (hFile=0x19c) returned 0x1 [0075.384] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0075.384] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e500 | out: pbBuffer=0x10c6e500) returned 1 [0075.384] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e510 | out: pbBuffer=0x10c6e510) returned 1 [0075.384] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc401 | out: pbBuffer=0x10cdc401) returned 1 [0075.385] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc601 | out: pbBuffer=0x10cdc601) returned 1 [0075.385] ReadFile (in: hFile=0x19c, lpBuffer=0x10cea000, nNumberOfBytesToRead=0x3ee, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10cea000*, lpNumberOfBytesRead=0x10c89cb8*=0x3ee, lpOverlapped=0x0) returned 1 [0075.403] GetFileType (hFile=0x19c) returned 0x1 [0075.403] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.407] WriteFile (in: hFile=0x19c, lpBuffer=0x10cea400*, nNumberOfBytesToWrite=0x3ee, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cea400*, lpNumberOfBytesWritten=0x10c89cb8*=0x3ee, lpOverlapped=0x10c89cbc) returned 1 [0075.408] GetFileType (hFile=0x19c) returned 0x1 [0075.408] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3ee, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.408] GetFileType (hFile=0x19c) returned 0x1 [0075.408] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.408] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cdc500*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0075.408] GetFileType (hFile=0x19c) returned 0x1 [0075.408] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3ee, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.408] GetFileType (hFile=0x19c) returned 0x1 [0075.408] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.408] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cdc800*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0075.408] GetFileType (hFile=0x19c) returned 0x1 [0075.408] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3ee, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.408] GetFileType (hFile=0x19c) returned 0x1 [0075.408] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.408] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0075.408] GetFileType (hFile=0x19c) returned 0x1 [0075.408] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3ee, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0075.408] CloseHandle (hObject=0x19c) returned 1 [0075.409] MoveFileExW (lpExistingFileName="C:\\Recovery\\ReAgentOld.xml" (normalized: "c:\\recovery\\reagentold.xml"), lpNewFileName="C:\\Recovery\\ReAgentOld.xml.TRAPGET" (normalized: "c:\\recovery\\reagentold.xml.trapget"), dwFlags=0x1) returned 1 [0075.410] GetFileAttributesExW (in: lpFileName="C:\\System Volume Information" (normalized: "c:\\system volume information"), fInfoLevelId=0x0, lpFileInformation=0x110c7818 | out: lpFileInformation=0x110c7818*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0075.410] CreateFileW (lpFileName="C:\\System Volume Information" (normalized: "c:\\system volume information"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.410] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.410] CreateFileW (lpFileName="C:\\System Volume Information\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\system volume information\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.410] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\TRAPGET-INSTRUCTION.txt\\*", lpFindFileData=0x10c89ac0 | out: lpFindFileData=0x10c89ac0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.410] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10cc4380*, nNumberOfCharsToWrite=0x38, lpNumberOfCharsWritten=0x10c898e8, lpReserved=0x0 | out: lpBuffer=0x10cc4380*, lpNumberOfCharsWritten=0x10c898e8*=0x38) returned 1 [0075.436] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x110c7868 | out: lpFileInformation=0x110c7868*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0075.437] CreateFileW (lpFileName="C:\\Users" (normalized: "c:\\users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.437] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efe78 [0075.438] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.440] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0075.440] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0075.440] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0075.440] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.migrated", cAlternateFileName="DEFAUL~1.MIG")) returned 1 [0075.447] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a9bc987, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f69dfa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0075.447] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 1 [0075.447] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0075.449] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.450] FindClose (in: hFindFile=0x7efe78 | out: hFindFile=0x7efe78) returned 1 [0075.450] CreateFileW (lpFileName="C:\\Users\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.454] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d94 | out: lpMode=0x10c89d94) returned 0 [0075.455] GetFileType (hFile=0x19c) returned 0x1 [0075.455] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0075.457] WriteFile (in: hFile=0x19c, lpBuffer=0x10cee000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d84, lpOverlapped=0x10c89d88 | out: lpBuffer=0x10cee000*, lpNumberOfBytesWritten=0x10c89d84*=0x464, lpOverlapped=0x10c89d88) returned 1 [0075.465] GetFileType (hFile=0x19c) returned 0x1 [0075.465] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d6c | out: lpNewFilePointer=0x0) returned 1 [0075.465] CloseHandle (hObject=0x19c) returned 1 [0075.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users" (normalized: "c:\\users\\all users"), fInfoLevelId=0x0, lpFileInformation=0x110c7ae8 | out: lpFileInformation=0x110c7ae8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.473] CreateFileW (lpFileName="C:\\Users\\All Users" (normalized: "c:\\users\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.474] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x10c899f4 | out: lpFindFileData=0x10c899f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efe78 [0075.481] FindClose (in: hFindFile=0x7efe78 | out: hFindFile=0x7efe78) returned 1 [0075.481] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c72640*, nNumberOfCharsToWrite=0x22, lpNumberOfCharsWritten=0x10c8981c, lpReserved=0x0 | out: lpBuffer=0x10c72640*, lpNumberOfCharsWritten=0x10c8981c*=0x22) returned 1 [0075.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default" (normalized: "c:\\users\\default"), fInfoLevelId=0x0, lpFileInformation=0x110c7b38 | out: lpFileInformation=0x110c7b38*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0075.519] CreateFileW (lpFileName="C:\\Users\\Default" (normalized: "c:\\users\\default"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.527] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd78 [0075.528] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.536] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0075.536] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0075.536] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0075.536] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0075.536] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0075.536] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0075.536] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0075.536] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0075.536] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0075.536] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0075.536] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0075.536] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4aac40, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x19fa8eb, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x19fa8eb, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7dab84ff, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855f639a, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7ddd9675, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de71fdf, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0x855d0141, ftLastAccessTime.dwHighDateTime=0x1d2fa07, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~2.BLF")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~3.REG")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b716935, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b716935, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~4.REG")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0075.537] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.537] FindClose (in: hFindFile=0x7efd78 | out: hFindFile=0x7efd78) returned 1 [0075.537] CreateFileW (lpFileName="C:\\Users\\Default\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\default\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.538] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0075.538] GetFileType (hFile=0x19c) returned 0x1 [0075.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0075.538] WriteFile (in: hFile=0x19c, lpBuffer=0x10cee900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cee900*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0075.539] GetFileType (hFile=0x19c) returned 0x1 [0075.539] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0075.539] CloseHandle (hObject=0x19c) returned 1 [0075.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData" (normalized: "c:\\users\\default\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x10cd2508 | out: lpFileInformation=0x10cd2508*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.540] CreateFileW (lpFileName="C:\\Users\\Default\\AppData" (normalized: "c:\\users\\default\\appdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.540] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efbf8 [0075.540] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.540] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0075.540] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8c01f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0075.540] FindNextFileW (in: hFindFile=0x7efbf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.540] FindClose (in: hFindFile=0x7efbf8 | out: hFindFile=0x7efbf8) returned 1 [0075.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Application Data" (normalized: "c:\\users\\default\\application data"), fInfoLevelId=0x0, lpFileInformation=0x10cd25f8 | out: lpFileInformation=0x10cd25f8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.541] CreateFileW (lpFileName="C:\\Users\\Default\\Application Data" (normalized: "c:\\users\\default\\application data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.541] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.541] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10cc43f0*, nNumberOfCharsToWrite=0x31, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10cc43f0*, lpNumberOfCharsWritten=0x10c897b8*=0x31) returned 1 [0075.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Cookies" (normalized: "c:\\users\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x10cd2648 | out: lpFileInformation=0x10cd2648*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.564] CreateFileW (lpFileName="C:\\Users\\Default\\Cookies" (normalized: "c:\\users\\default\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.564] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.564] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c72780*, nNumberOfCharsToWrite=0x28, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c72780*, lpNumberOfCharsWritten=0x10c897b8*=0x28) returned 1 [0075.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Desktop" (normalized: "c:\\users\\default\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x10cd2698 | out: lpFileInformation=0x10cd2698*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.566] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop" (normalized: "c:\\users\\default\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.566] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efeb8 [0075.567] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.567] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.567] FindClose (in: hFindFile=0x7efeb8 | out: hFindFile=0x7efeb8) returned 1 [0075.567] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\default\\desktop\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.567] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0075.567] GetFileType (hFile=0x19c) returned 0x1 [0075.567] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.567] WriteFile (in: hFile=0x19c, lpBuffer=0x10cef200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10cef200*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0075.568] GetFileType (hFile=0x19c) returned 0x1 [0075.568] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.568] CloseHandle (hObject=0x19c) returned 1 [0075.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents" (normalized: "c:\\users\\default\\documents"), fInfoLevelId=0x0, lpFileInformation=0x10cd26e8 | out: lpFileInformation=0x10cd26e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.569] CreateFileW (lpFileName="C:\\Users\\Default\\Documents" (normalized: "c:\\users\\default\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.569] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0278 [0075.573] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.573] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0075.574] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0075.574] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0075.574] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.574] FindClose (in: hFindFile=0x7f0278 | out: hFindFile=0x7f0278) returned 1 [0075.581] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\default\\documents\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.582] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0075.582] GetFileType (hFile=0x19c) returned 0x1 [0075.582] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.582] WriteFile (in: hFile=0x19c, lpBuffer=0x10cefb00*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10cefb00*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0075.583] GetFileType (hFile=0x19c) returned 0x1 [0075.583] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.583] CloseHandle (hObject=0x19c) returned 1 [0075.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music" (normalized: "c:\\users\\default\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x10cd2828 | out: lpFileInformation=0x10cd2828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.584] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Music" (normalized: "c:\\users\\default\\documents\\my music"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.584] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.585] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10cc4540*, nNumberOfCharsToWrite=0x33, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10cc4540*, lpNumberOfCharsWritten=0x10c89754*=0x33) returned 1 [0075.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures" (normalized: "c:\\users\\default\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x10cd2878 | out: lpFileInformation=0x10cd2878*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.589] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Pictures" (normalized: "c:\\users\\default\\documents\\my pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.589] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.590] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10cc45b0*, nNumberOfCharsToWrite=0x36, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10cc45b0*, lpNumberOfCharsWritten=0x10c89754*=0x36) returned 1 [0075.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos" (normalized: "c:\\users\\default\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x10cd28c8 | out: lpFileInformation=0x10cd28c8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.599] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Videos" (normalized: "c:\\users\\default\\documents\\my videos"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.599] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.599] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10cc4620*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10cc4620*, lpNumberOfCharsWritten=0x10c89754*=0x34) returned 1 [0075.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Downloads" (normalized: "c:\\users\\default\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x10cd2918 | out: lpFileInformation=0x10cd2918*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.621] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads" (normalized: "c:\\users\\default\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.621] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f00b8 [0075.621] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.621] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.621] FindClose (in: hFindFile=0x7f00b8 | out: hFindFile=0x7f00b8) returned 1 [0075.621] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\default\\downloads\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.624] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0075.624] GetFileType (hFile=0x19c) returned 0x1 [0075.624] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.624] WriteFile (in: hFile=0x19c, lpBuffer=0x110d2480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x110d2480*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0075.625] GetFileType (hFile=0x19c) returned 0x1 [0075.625] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.625] CloseHandle (hObject=0x19c) returned 1 [0075.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites" (normalized: "c:\\users\\default\\favorites"), fInfoLevelId=0x0, lpFileInformation=0x10cd2968 | out: lpFileInformation=0x10cd2968*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.627] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites" (normalized: "c:\\users\\default\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.627] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efe78 [0075.628] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.628] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.628] FindClose (in: hFindFile=0x7efe78 | out: hFindFile=0x7efe78) returned 1 [0075.628] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\default\\favorites\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.628] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0075.628] GetFileType (hFile=0x19c) returned 0x1 [0075.628] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.628] WriteFile (in: hFile=0x19c, lpBuffer=0x110d2d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x110d2d80*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0075.629] GetFileType (hFile=0x19c) returned 0x1 [0075.629] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.629] CloseHandle (hObject=0x19c) returned 1 [0075.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links" (normalized: "c:\\users\\default\\links"), fInfoLevelId=0x0, lpFileInformation=0x10cd29b8 | out: lpFileInformation=0x10cd29b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.630] CreateFileW (lpFileName="C:\\Users\\Default\\Links" (normalized: "c:\\users\\default\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.630] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f02f8 [0075.630] FindNextFileW (in: hFindFile=0x7f02f8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.630] FindNextFileW (in: hFindFile=0x7f02f8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.630] FindClose (in: hFindFile=0x7f02f8 | out: hFindFile=0x7f02f8) returned 1 [0075.630] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\default\\links\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.630] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0075.630] GetFileType (hFile=0x19c) returned 0x1 [0075.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.630] WriteFile (in: hFile=0x19c, lpBuffer=0x110d3680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x110d3680*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0075.631] GetFileType (hFile=0x19c) returned 0x1 [0075.631] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.631] CloseHandle (hObject=0x19c) returned 1 [0075.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Local Settings" (normalized: "c:\\users\\default\\local settings"), fInfoLevelId=0x0, lpFileInformation=0x10cd2a08 | out: lpFileInformation=0x10cd2a08*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.631] CreateFileW (lpFileName="C:\\Users\\Default\\Local Settings" (normalized: "c:\\users\\default\\local settings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.631] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.632] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92420*, nNumberOfCharsToWrite=0x2f, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92420*, lpNumberOfCharsWritten=0x10c897b8*=0x2f) returned 1 [0075.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Music" (normalized: "c:\\users\\default\\music"), fInfoLevelId=0x0, lpFileInformation=0x10cd2a58 | out: lpFileInformation=0x10cd2a58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.655] CreateFileW (lpFileName="C:\\Users\\Default\\Music" (normalized: "c:\\users\\default\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.656] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efc38 [0075.656] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.656] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.656] FindClose (in: hFindFile=0x7efc38 | out: hFindFile=0x7efc38) returned 1 [0075.656] CreateFileW (lpFileName="C:\\Users\\Default\\Music\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\default\\music\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.656] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0075.656] GetFileType (hFile=0x19c) returned 0x1 [0075.656] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.656] WriteFile (in: hFile=0x19c, lpBuffer=0x110d8000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x110d8000*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0075.657] GetFileType (hFile=0x19c) returned 0x1 [0075.657] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.657] CloseHandle (hObject=0x19c) returned 1 [0075.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\My Documents" (normalized: "c:\\users\\default\\my documents"), fInfoLevelId=0x0, lpFileInformation=0x10cd2aa8 | out: lpFileInformation=0x10cd2aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.658] CreateFileW (lpFileName="C:\\Users\\Default\\My Documents" (normalized: "c:\\users\\default\\my documents"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.658] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.658] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c924e0*, nNumberOfCharsToWrite=0x2d, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c924e0*, lpNumberOfCharsWritten=0x10c897b8*=0x2d) returned 1 [0075.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), fInfoLevelId=0x0, lpFileInformation=0x10cd2af8 | out: lpFileInformation=0x10cd2af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4aac40, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x19fa8eb, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x19fa8eb, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0075.672] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.673] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0075.673] GetFileType (hFile=0x19c) returned 0x1 [0075.673] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0075.673] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea70 | out: pbBuffer=0x10c6ea70) returned 1 [0075.673] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea80 | out: pbBuffer=0x10c6ea80) returned 1 [0075.673] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdca01 | out: pbBuffer=0x10cdca01) returned 1 [0075.673] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdcc01 | out: pbBuffer=0x10cdcc01) returned 1 [0075.674] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89c54*=0x40000, lpOverlapped=0x0) returned 1 [0075.680] GetFileType (hFile=0x19c) returned 0x1 [0075.680] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.680] WriteFile (in: hFile=0x19c, lpBuffer=0x1103e000*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x1103e000*, lpNumberOfBytesWritten=0x10c89c54*=0x40000, lpOverlapped=0x10c89c58) returned 1 [0075.681] GetFileType (hFile=0x19c) returned 0x1 [0075.681] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x40000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.681] GetFileType (hFile=0x19c) returned 0x1 [0075.681] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.681] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdcb00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdcb00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.682] GetFileType (hFile=0x19c) returned 0x1 [0075.682] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x40000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.682] GetFileType (hFile=0x19c) returned 0x1 [0075.682] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.682] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdcd00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdcd00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.684] GetFileType (hFile=0x19c) returned 0x1 [0075.684] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x40000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.684] GetFileType (hFile=0x19c) returned 0x1 [0075.684] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.684] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0075.685] GetFileType (hFile=0x19c) returned 0x1 [0075.685] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x40000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.685] CloseHandle (hObject=0x19c) returned 1 [0075.689] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.TRAPGET" (normalized: "c:\\users\\default\\ntuser.dat.trapget"), dwFlags=0x1) returned 1 [0075.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x10cd2c38 | out: lpFileInformation=0x10cd2c38*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0075.690] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.690] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0075.690] GetFileType (hFile=0x19c) returned 0x1 [0075.690] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0075.690] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eb60 | out: pbBuffer=0x10c6eb60) returned 1 [0075.690] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eb70 | out: pbBuffer=0x10c6eb70) returned 1 [0075.690] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdce01 | out: pbBuffer=0x10cdce01) returned 1 [0075.691] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdd001 | out: pbBuffer=0x10cdd001) returned 1 [0075.691] ReadFile (in: hFile=0x19c, lpBuffer=0x110e6000, nNumberOfBytesToRead=0x6000, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x110e6000*, lpNumberOfBytesRead=0x10c89c54*=0x6000, lpOverlapped=0x0) returned 1 [0075.699] GetFileType (hFile=0x19c) returned 0x1 [0075.699] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.699] WriteFile (in: hFile=0x19c, lpBuffer=0x110ec000*, nNumberOfBytesToWrite=0x6000, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110ec000*, lpNumberOfBytesWritten=0x10c89c54*=0x6000, lpOverlapped=0x10c89c58) returned 1 [0075.700] GetFileType (hFile=0x19c) returned 0x1 [0075.700] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.700] GetFileType (hFile=0x19c) returned 0x1 [0075.700] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.700] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdcf00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdcf00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.702] GetFileType (hFile=0x19c) returned 0x1 [0075.702] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.702] GetFileType (hFile=0x19c) returned 0x1 [0075.702] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.702] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdd200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdd200*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.702] GetFileType (hFile=0x19c) returned 0x1 [0075.702] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.702] GetFileType (hFile=0x19c) returned 0x1 [0075.702] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.702] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0075.702] GetFileType (hFile=0x19c) returned 0x1 [0075.702] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.702] CloseHandle (hObject=0x19c) returned 1 [0075.704] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1.TRAPGET" (normalized: "c:\\users\\default\\ntuser.dat.log1.trapget"), dwFlags=0x1) returned 1 [0075.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x10cd2d78 | out: lpFileInformation=0x10cd2d78*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0075.704] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.705] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0075.705] GetFileType (hFile=0x19c) returned 0x1 [0075.705] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0075.705] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ec50 | out: pbBuffer=0x10c6ec50) returned 1 [0075.705] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ec60 | out: pbBuffer=0x10c6ec60) returned 1 [0075.705] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdd301 | out: pbBuffer=0x10cdd301) returned 1 [0075.705] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdd501 | out: pbBuffer=0x10cdd501) returned 1 [0075.705] ReadFile (in: hFile=0x19c, lpBuffer=0x10f26000, nNumberOfBytesToRead=0x5000, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10f26000*, lpNumberOfBytesRead=0x10c89c54*=0x5000, lpOverlapped=0x0) returned 1 [0075.708] GetFileType (hFile=0x19c) returned 0x1 [0075.708] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.708] WriteFile (in: hFile=0x19c, lpBuffer=0x10f2b000*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10f2b000*, lpNumberOfBytesWritten=0x10c89c54*=0x5000, lpOverlapped=0x10c89c58) returned 1 [0075.708] GetFileType (hFile=0x19c) returned 0x1 [0075.708] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.708] GetFileType (hFile=0x19c) returned 0x1 [0075.708] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.708] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdd400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdd400*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.709] GetFileType (hFile=0x19c) returned 0x1 [0075.709] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.709] GetFileType (hFile=0x19c) returned 0x1 [0075.709] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.709] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdd600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdd600*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.709] GetFileType (hFile=0x19c) returned 0x1 [0075.709] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.709] GetFileType (hFile=0x19c) returned 0x1 [0075.709] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.709] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0075.709] GetFileType (hFile=0x19c) returned 0x1 [0075.709] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.709] CloseHandle (hObject=0x19c) returned 1 [0075.710] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2.TRAPGET" (normalized: "c:\\users\\default\\ntuser.dat.log2.trapget"), dwFlags=0x1) returned 1 [0075.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x10cd2eb8 | out: lpFileInformation=0x10cd2eb8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7dab84ff, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855f639a, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0075.711] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.711] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0075.711] GetFileType (hFile=0x19c) returned 0x1 [0075.711] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0075.711] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed30 | out: pbBuffer=0x10c6ed30) returned 1 [0075.711] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed40 | out: pbBuffer=0x10c6ed40) returned 1 [0075.711] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdd701 | out: pbBuffer=0x10cdd701) returned 1 [0075.712] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdd901 | out: pbBuffer=0x10cdd901) returned 1 [0075.712] ReadFile (in: hFile=0x19c, lpBuffer=0x10f38000, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10f38000*, lpNumberOfBytesRead=0x10c89c54*=0x10000, lpOverlapped=0x0) returned 1 [0075.719] GetFileType (hFile=0x19c) returned 0x1 [0075.719] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.719] WriteFile (in: hFile=0x19c, lpBuffer=0x10f48000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10f48000*, lpNumberOfBytesWritten=0x10c89c54*=0x10000, lpOverlapped=0x10c89c58) returned 1 [0075.719] GetFileType (hFile=0x19c) returned 0x1 [0075.720] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.720] GetFileType (hFile=0x19c) returned 0x1 [0075.720] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.720] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdd800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdd800*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.720] GetFileType (hFile=0x19c) returned 0x1 [0075.720] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.720] GetFileType (hFile=0x19c) returned 0x1 [0075.720] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.720] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdda00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdda00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.720] GetFileType (hFile=0x19c) returned 0x1 [0075.720] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.720] GetFileType (hFile=0x19c) returned 0x1 [0075.720] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.720] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0075.720] GetFileType (hFile=0x19c) returned 0x1 [0075.720] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.720] CloseHandle (hObject=0x19c) returned 1 [0075.722] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tm.blf"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf.TRAPGET" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tm.blf.trapget"), dwFlags=0x1) returned 1 [0075.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x10cd2ff8 | out: lpFileInformation=0x10cd2ff8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7ddd9675, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0075.727] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.727] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0075.727] GetFileType (hFile=0x19c) returned 0x1 [0075.727] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0075.727] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee20 | out: pbBuffer=0x10c6ee20) returned 1 [0075.727] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee30 | out: pbBuffer=0x10c6ee30) returned 1 [0075.727] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cddb01 | out: pbBuffer=0x10cddb01) returned 1 [0075.728] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cddd01 | out: pbBuffer=0x10cddd01) returned 1 [0075.728] SetEvent (hEvent=0x138) returned 1 [0075.728] ReadFile (in: hFile=0x19c, lpBuffer=0x10f64000, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10f64000*, lpNumberOfBytesRead=0x10c89c54*=0x80000, lpOverlapped=0x0) returned 1 [0075.739] GetFileType (hFile=0x19c) returned 0x1 [0075.739] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.739] WriteFile (in: hFile=0x19c, lpBuffer=0x110f8000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110f8000*, lpNumberOfBytesWritten=0x10c89c54*=0x80000, lpOverlapped=0x10c89c58) returned 1 [0075.740] GetFileType (hFile=0x19c) returned 0x1 [0075.740] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.741] GetFileType (hFile=0x19c) returned 0x1 [0075.741] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.741] WriteFile (in: hFile=0x19c, lpBuffer=0x10cddc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cddc00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.741] GetFileType (hFile=0x19c) returned 0x1 [0075.741] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.741] GetFileType (hFile=0x19c) returned 0x1 [0075.741] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.741] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdde00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdde00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.742] GetFileType (hFile=0x19c) returned 0x1 [0075.742] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.742] GetFileType (hFile=0x19c) returned 0x1 [0075.742] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.742] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0075.742] GetFileType (hFile=0x19c) returned 0x1 [0075.742] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.742] CloseHandle (hObject=0x19c) returned 1 [0075.756] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0075.815] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tmcontainer00000000000000000001.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms.TRAPGET" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tmcontainer00000000000000000001.regtrans-ms.trapget"), dwFlags=0x1) returned 1 [0075.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x110c6008 | out: lpFileInformation=0x110c6008*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de71fdf, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0x855d0141, ftLastAccessTime.dwHighDateTime=0x1d2fa07, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0075.816] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.816] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0075.816] GetFileType (hFile=0x19c) returned 0x1 [0075.816] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0075.817] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e030 | out: pbBuffer=0x1108e030) returned 1 [0075.817] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e040 | out: pbBuffer=0x1108e040) returned 1 [0075.817] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc001 | out: pbBuffer=0x10cdc001) returned 1 [0075.817] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc201 | out: pbBuffer=0x10cdc201) returned 1 [0075.817] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89c54*=0x80000, lpOverlapped=0x0) returned 1 [0075.827] GetFileType (hFile=0x19c) returned 0x1 [0075.827] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.827] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfa000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cfa000*, lpNumberOfBytesWritten=0x10c89c54*=0x80000, lpOverlapped=0x10c89c58) returned 1 [0075.828] GetFileType (hFile=0x19c) returned 0x1 [0075.828] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.828] GetFileType (hFile=0x19c) returned 0x1 [0075.828] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.829] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdc100*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.829] GetFileType (hFile=0x19c) returned 0x1 [0075.829] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.829] GetFileType (hFile=0x19c) returned 0x1 [0075.829] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.829] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdc300*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.829] GetFileType (hFile=0x19c) returned 0x1 [0075.829] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.830] GetFileType (hFile=0x19c) returned 0x1 [0075.830] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.830] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0075.830] GetFileType (hFile=0x19c) returned 0x1 [0075.830] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.830] CloseHandle (hObject=0x19c) returned 1 [0075.837] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tmcontainer00000000000000000002.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms.TRAPGET" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tmcontainer00000000000000000002.regtrans-ms.trapget"), dwFlags=0x1) returned 1 [0075.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x110c6148 | out: lpFileInformation=0x110c6148*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0075.843] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.844] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0075.844] GetFileType (hFile=0x19c) returned 0x1 [0075.844] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0075.844] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e110 | out: pbBuffer=0x1108e110) returned 1 [0075.844] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e120 | out: pbBuffer=0x1108e120) returned 1 [0075.844] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc401 | out: pbBuffer=0x10cdc401) returned 1 [0075.844] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc601 | out: pbBuffer=0x10cdc601) returned 1 [0075.845] ReadFile (in: hFile=0x19c, lpBuffer=0x11092000, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x11092000*, lpNumberOfBytesRead=0x10c89c54*=0x10000, lpOverlapped=0x0) returned 1 [0075.848] GetFileType (hFile=0x19c) returned 0x1 [0075.848] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.848] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89c54*=0x10000, lpOverlapped=0x10c89c58) returned 1 [0075.848] GetFileType (hFile=0x19c) returned 0x1 [0075.848] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.848] GetFileType (hFile=0x19c) returned 0x1 [0075.848] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.848] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdc500*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.849] GetFileType (hFile=0x19c) returned 0x1 [0075.849] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.849] GetFileType (hFile=0x19c) returned 0x1 [0075.849] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.849] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdc700*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.849] GetFileType (hFile=0x19c) returned 0x1 [0075.849] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.849] GetFileType (hFile=0x19c) returned 0x1 [0075.849] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.849] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0075.849] GetFileType (hFile=0x19c) returned 0x1 [0075.849] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.849] CloseHandle (hObject=0x19c) returned 1 [0075.851] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf.TRAPGET" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf.trapget"), dwFlags=0x1) returned 1 [0075.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x110c6288 | out: lpFileInformation=0x110c6288*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0075.852] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.852] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0075.852] GetFileType (hFile=0x19c) returned 0x1 [0075.852] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0075.852] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e200 | out: pbBuffer=0x1108e200) returned 1 [0075.852] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e210 | out: pbBuffer=0x1108e210) returned 1 [0075.852] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc801 | out: pbBuffer=0x10cdc801) returned 1 [0075.853] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdca01 | out: pbBuffer=0x10cdca01) returned 1 [0075.853] ReadFile (in: hFile=0x19c, lpBuffer=0x10d7a000, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10d7a000*, lpNumberOfBytesRead=0x10c89c54*=0x80000, lpOverlapped=0x0) returned 1 [0075.870] GetFileType (hFile=0x19c) returned 0x1 [0075.870] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.870] WriteFile (in: hFile=0x19c, lpBuffer=0x10dfa000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10dfa000*, lpNumberOfBytesWritten=0x10c89c54*=0x80000, lpOverlapped=0x10c89c58) returned 1 [0075.871] GetFileType (hFile=0x19c) returned 0x1 [0075.871] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.871] GetFileType (hFile=0x19c) returned 0x1 [0075.871] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.871] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdc900*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.872] GetFileType (hFile=0x19c) returned 0x1 [0075.872] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.872] GetFileType (hFile=0x19c) returned 0x1 [0075.872] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.872] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdcb00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdcb00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.872] GetFileType (hFile=0x19c) returned 0x1 [0075.872] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.872] GetFileType (hFile=0x19c) returned 0x1 [0075.873] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.873] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0075.873] GetFileType (hFile=0x19c) returned 0x1 [0075.873] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.873] CloseHandle (hObject=0x19c) returned 1 [0075.880] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tmcontainer00000000000000000001.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms.TRAPGET" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tmcontainer00000000000000000001.regtrans-ms.trapget"), dwFlags=0x1) returned 1 [0075.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x110c63c8 | out: lpFileInformation=0x110c63c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b716935, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b716935, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0075.881] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.881] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0075.881] GetFileType (hFile=0x19c) returned 0x1 [0075.881] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0075.881] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e2f0 | out: pbBuffer=0x1108e2f0) returned 1 [0075.881] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e300 | out: pbBuffer=0x1108e300) returned 1 [0075.882] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdcc01 | out: pbBuffer=0x10cdcc01) returned 1 [0075.882] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdce01 | out: pbBuffer=0x10cdce01) returned 1 [0075.882] SetEvent (hEvent=0x138) returned 1 [0075.882] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7a000, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10e7a000*, lpNumberOfBytesRead=0x10c89c54*=0x80000, lpOverlapped=0x0) returned 1 [0075.893] GetFileType (hFile=0x19c) returned 0x1 [0075.893] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.893] WriteFile (in: hFile=0x19c, lpBuffer=0x11178000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x11178000*, lpNumberOfBytesWritten=0x10c89c54*=0x80000, lpOverlapped=0x10c89c58) returned 1 [0075.894] GetFileType (hFile=0x19c) returned 0x1 [0075.894] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.894] GetFileType (hFile=0x19c) returned 0x1 [0075.894] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.895] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdcd00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdcd00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.895] GetFileType (hFile=0x19c) returned 0x1 [0075.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.895] GetFileType (hFile=0x19c) returned 0x1 [0075.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.895] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdcf00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10cdcf00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0075.895] GetFileType (hFile=0x19c) returned 0x1 [0075.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.896] GetFileType (hFile=0x19c) returned 0x1 [0075.896] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.896] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0075.896] GetFileType (hFile=0x19c) returned 0x1 [0075.896] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0075.896] CloseHandle (hObject=0x19c) returned 1 [0075.908] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0075.918] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tmcontainer00000000000000000002.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms.TRAPGET" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tmcontainer00000000000000000002.regtrans-ms.trapget"), dwFlags=0x1) returned 1 [0075.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NetHood" (normalized: "c:\\users\\default\\nethood"), fInfoLevelId=0x0, lpFileInformation=0x110c6008 | out: lpFileInformation=0x110c6008*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.919] CreateFileW (lpFileName="C:\\Users\\Default\\NetHood" (normalized: "c:\\users\\default\\nethood"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.919] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.919] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c720a0*, nNumberOfCharsToWrite=0x28, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c720a0*, lpNumberOfCharsWritten=0x10c897b8*=0x28) returned 1 [0075.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Pictures" (normalized: "c:\\users\\default\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x110c6058 | out: lpFileInformation=0x110c6058*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.964] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures" (normalized: "c:\\users\\default\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.964] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0078 [0075.965] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.965] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.965] FindClose (in: hFindFile=0x7f0078 | out: hFindFile=0x7f0078) returned 1 [0075.965] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\default\\pictures\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0075.982] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0075.982] GetFileType (hFile=0x19c) returned 0x1 [0075.982] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.982] WriteFile (in: hFile=0x19c, lpBuffer=0x10c94480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10c94480*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0075.983] GetFileType (hFile=0x19c) returned 0x1 [0075.983] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0075.983] CloseHandle (hObject=0x19c) returned 1 [0075.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\PrintHood" (normalized: "c:\\users\\default\\printhood"), fInfoLevelId=0x0, lpFileInformation=0x110c60a8 | out: lpFileInformation=0x110c60a8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.984] CreateFileW (lpFileName="C:\\Users\\Default\\PrintHood" (normalized: "c:\\users\\default\\printhood"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.984] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.984] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92000*, nNumberOfCharsToWrite=0x2a, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92000*, lpNumberOfCharsWritten=0x10c897b8*=0x2a) returned 1 [0075.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Recent" (normalized: "c:\\users\\default\\recent"), fInfoLevelId=0x0, lpFileInformation=0x110c60f8 | out: lpFileInformation=0x110c60f8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.993] CreateFileW (lpFileName="C:\\Users\\Default\\Recent" (normalized: "c:\\users\\default\\recent"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.993] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.993] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c720f0*, nNumberOfCharsToWrite=0x27, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c720f0*, lpNumberOfCharsWritten=0x10c897b8*=0x27) returned 1 [0076.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Saved Games" (normalized: "c:\\users\\default\\saved games"), fInfoLevelId=0x0, lpFileInformation=0x110c6148 | out: lpFileInformation=0x110c6148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.001] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games" (normalized: "c:\\users\\default\\saved games"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.001] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0238 [0076.001] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.001] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.001] FindClose (in: hFindFile=0x7f0238 | out: hFindFile=0x7f0238) returned 1 [0076.002] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\default\\saved games\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.002] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0076.002] GetFileType (hFile=0x19c) returned 0x1 [0076.002] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0076.002] WriteFile (in: hFile=0x19c, lpBuffer=0x10c94d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10c94d80*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0076.003] GetFileType (hFile=0x19c) returned 0x1 [0076.003] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0076.003] CloseHandle (hObject=0x19c) returned 1 [0076.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\SendTo" (normalized: "c:\\users\\default\\sendto"), fInfoLevelId=0x0, lpFileInformation=0x110c6198 | out: lpFileInformation=0x110c6198*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.006] CreateFileW (lpFileName="C:\\Users\\Default\\SendTo" (normalized: "c:\\users\\default\\sendto"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.006] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0076.006] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c72140*, nNumberOfCharsToWrite=0x27, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c72140*, lpNumberOfCharsWritten=0x10c897b8*=0x27) returned 1 [0076.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Start Menu" (normalized: "c:\\users\\default\\start menu"), fInfoLevelId=0x0, lpFileInformation=0x110c61e8 | out: lpFileInformation=0x110c61e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.020] CreateFileW (lpFileName="C:\\Users\\Default\\Start Menu" (normalized: "c:\\users\\default\\start menu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.020] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0076.021] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92060*, nNumberOfCharsToWrite=0x2b, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92060*, lpNumberOfCharsWritten=0x10c897b8*=0x2b) returned 1 [0076.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Templates" (normalized: "c:\\users\\default\\templates"), fInfoLevelId=0x0, lpFileInformation=0x110c6238 | out: lpFileInformation=0x110c6238*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.028] CreateFileW (lpFileName="C:\\Users\\Default\\Templates" (normalized: "c:\\users\\default\\templates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.028] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0076.028] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c920c0*, nNumberOfCharsToWrite=0x2a, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c920c0*, lpNumberOfCharsWritten=0x10c897b8*=0x2a) returned 1 [0076.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Videos" (normalized: "c:\\users\\default\\videos"), fInfoLevelId=0x0, lpFileInformation=0x110c6288 | out: lpFileInformation=0x110c6288*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.038] CreateFileW (lpFileName="C:\\Users\\Default\\Videos" (normalized: "c:\\users\\default\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.039] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd78 [0076.039] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.039] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.039] FindClose (in: hFindFile=0x7efd78 | out: hFindFile=0x7efd78) returned 1 [0076.039] CreateFileW (lpFileName="C:\\Users\\Default\\Videos\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\default\\videos\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.044] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0076.044] GetFileType (hFile=0x19c) returned 0x1 [0076.044] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0076.044] WriteFile (in: hFile=0x19c, lpBuffer=0x10c95680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10c95680*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0076.045] GetFileType (hFile=0x19c) returned 0x1 [0076.045] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0076.045] CloseHandle (hObject=0x19c) returned 1 [0076.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default User" (normalized: "c:\\users\\default user"), fInfoLevelId=0x0, lpFileInformation=0x110c62d8 | out: lpFileInformation=0x110c62d8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.046] CreateFileW (lpFileName="C:\\Users\\Default User" (normalized: "c:\\users\\default user"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.046] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0x10c899f4 | out: lpFindFileData=0x10c899f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0076.046] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c72190*, nNumberOfCharsToWrite=0x25, lpNumberOfCharsWritten=0x10c8981c, lpReserved=0x0 | out: lpBuffer=0x10c72190*, lpNumberOfCharsWritten=0x10c8981c*=0x25) returned 1 [0076.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default.migrated" (normalized: "c:\\users\\default.migrated"), fInfoLevelId=0x0, lpFileInformation=0x110c6328 | out: lpFileInformation=0x110c6328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.059] CreateFileW (lpFileName="C:\\Users\\Default.migrated" (normalized: "c:\\users\\default.migrated"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.059] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efeb8 [0076.068] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.068] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0076.068] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0076.068] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.068] FindClose (in: hFindFile=0x7efeb8 | out: hFindFile=0x7efeb8) returned 1 [0076.069] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\default.migrated\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.069] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0076.070] GetFileType (hFile=0x19c) returned 0x1 [0076.070] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0076.070] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb8000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cb8000*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0076.070] GetFileType (hFile=0x19c) returned 0x1 [0076.070] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0076.070] CloseHandle (hObject=0x19c) returned 1 [0076.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default.migrated\\AppData" (normalized: "c:\\users\\default.migrated\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x110c6468 | out: lpFileInformation=0x110c6468*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.071] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\AppData" (normalized: "c:\\users\\default.migrated\\appdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.071] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0378 [0076.071] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.071] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0076.071] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.071] FindClose (in: hFindFile=0x7f0378 | out: hFindFile=0x7f0378) returned 1 [0076.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default.migrated\\Documents" (normalized: "c:\\users\\default.migrated\\documents"), fInfoLevelId=0x0, lpFileInformation=0x110c6508 | out: lpFileInformation=0x110c6508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.072] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\Documents" (normalized: "c:\\users\\default.migrated\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.072] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0076.076] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.077] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99a3d0f, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99a3d0f, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99a3d0f, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0076.077] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0076.077] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0076.077] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.077] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0076.077] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\Documents\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\default.migrated\\documents\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.078] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0076.078] GetFileType (hFile=0x19c) returned 0x1 [0076.078] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0076.078] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb8900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10cb8900*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0076.079] GetFileType (hFile=0x19c) returned 0x1 [0076.079] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0076.079] CloseHandle (hObject=0x19c) returned 1 [0076.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Music" (normalized: "c:\\users\\default.migrated\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x110c6648 | out: lpFileInformation=0x110c6648*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99a3d0f, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99a3d0f, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99a3d0f, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.079] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\Documents\\My Music" (normalized: "c:\\users\\default.migrated\\documents\\my music"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.079] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Music\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0076.080] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c9e280*, nNumberOfCharsToWrite=0x3c, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10c9e280*, lpNumberOfCharsWritten=0x10c89754*=0x3c) returned 1 [0076.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Pictures" (normalized: "c:\\users\\default.migrated\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x110c6698 | out: lpFileInformation=0x110c6698*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.094] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\Documents\\My Pictures" (normalized: "c:\\users\\default.migrated\\documents\\my pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.094] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Pictures\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0076.094] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c9e300*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10c9e300*, lpNumberOfCharsWritten=0x10c89754*=0x3f) returned 1 [0076.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Videos" (normalized: "c:\\users\\default.migrated\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x110c66e8 | out: lpFileInformation=0x110c66e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.106] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\Documents\\My Videos" (normalized: "c:\\users\\default.migrated\\documents\\my videos"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.106] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Videos\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0076.106] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c9e380*, nNumberOfCharsToWrite=0x3d, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10c9e380*, lpNumberOfCharsWritten=0x10c89754*=0x3d) returned 1 [0076.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy"), fInfoLevelId=0x0, lpFileInformation=0x110c6738 | out: lpFileInformation=0x110c6738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0076.119] CreateFileW (lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.119] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f00f8 [0076.119] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.119] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0076.119] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0076.119] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0076.119] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0076.119] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xed9f371f, ftLastAccessTime.dwHighDateTime=0x1d69115, ftLastWriteTime.dwLowDateTime=0xed9f371f, ftLastWriteTime.dwHighDateTime=0x1d69115, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0076.119] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf76fa7f, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf76fa7f, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0076.119] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0076.119] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0076.119] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0076.119] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0076.120] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7b95ea, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7b95ea, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0076.120] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0076.120] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0076.120] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x6c4d382c, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6c4d382c, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0076.120] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0076.120] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0076.120] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0076.120] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0076.121] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0076.121] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xc1adea7d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc1adea7d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc1adea7d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0076.121] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0076.121] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf8c45da, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf8c45da, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0076.121] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0076.121] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0076.121] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0076.121] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0076.121] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0076.121] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0076.121] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0076.121] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf851ec3, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf851ec3, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0076.121] FindNextFileW (in: hFindFile=0x7f00f8, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.122] FindClose (in: hFindFile=0x7f00f8 | out: hFindFile=0x7f00f8) returned 1 [0076.122] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.134] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0076.134] GetFileType (hFile=0x19c) returned 0x1 [0076.134] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0076.134] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb9200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10cb9200*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0076.135] GetFileType (hFile=0x19c) returned 0x1 [0076.135] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0076.135] CloseHandle (hObject=0x19c) returned 1 [0076.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData" (normalized: "c:\\users\\fd1hvy\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x110c70e8 | out: lpFileInformation=0x110c70e8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.135] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData" (normalized: "c:\\users\\fd1hvy\\appdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.136] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efc38 [0076.136] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.136] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb6f6a4d1, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb6f6a4d1, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0076.136] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34f2b3d6, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb373310b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb373310b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0076.136] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xf910a68, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf910a68, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0076.136] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.136] FindClose (in: hFindFile=0x7efc38 | out: hFindFile=0x7efc38) returned 1 [0076.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Application Data" (normalized: "c:\\users\\fd1hvy\\application data"), fInfoLevelId=0x0, lpFileInformation=0x110c7228 | out: lpFileInformation=0x110c7228*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.136] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Application Data" (normalized: "c:\\users\\fd1hvy\\application data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.136] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Application Data\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0076.136] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92720*, nNumberOfCharsToWrite=0x30, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92720*, lpNumberOfCharsWritten=0x10c897b8*=0x30) returned 1 [0076.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts" (normalized: "c:\\users\\fd1hvy\\contacts"), fInfoLevelId=0x0, lpFileInformation=0x110c7278 | out: lpFileInformation=0x110c7278*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.149] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Contacts" (normalized: "c:\\users\\fd1hvy\\contacts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.149] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0078 [0076.149] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.149] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0076.149] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.149] FindClose (in: hFindFile=0x7f0078 | out: hFindFile=0x7f0078) returned 1 [0076.149] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Contacts\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\contacts\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.150] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0076.150] GetFileType (hFile=0x19c) returned 0x1 [0076.150] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0076.150] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb9b00*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10cb9b00*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0076.151] GetFileType (hFile=0x19c) returned 0x1 [0076.151] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0076.151] CloseHandle (hObject=0x19c) returned 1 [0076.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\contacts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x110c7318 | out: lpFileInformation=0x110c7318*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c)) returned 1 [0076.151] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Contacts\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\contacts\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.152] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.152] GetFileType (hFile=0x19c) returned 0x1 [0076.152] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.152] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e4a0 | out: pbBuffer=0x10c6e4a0) returned 1 [0076.152] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e4b0 | out: pbBuffer=0x10c6e4b0) returned 1 [0076.152] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc001 | out: pbBuffer=0x10cdc001) returned 1 [0076.152] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc201 | out: pbBuffer=0x10cdc201) returned 1 [0076.152] ReadFile (in: hFile=0x19c, lpBuffer=0x10cec340, nNumberOfBytesToRead=0x19c, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10cec340*, lpNumberOfBytesRead=0x10c89bf0*=0x19c, lpOverlapped=0x0) returned 1 [0076.153] GetFileType (hFile=0x19c) returned 0x1 [0076.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.153] WriteFile (in: hFile=0x19c, lpBuffer=0x10cec4e0*, nNumberOfBytesToWrite=0x19c, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cec4e0*, lpNumberOfBytesWritten=0x10c89bf0*=0x19c, lpOverlapped=0x10c89bf4) returned 1 [0076.153] GetFileType (hFile=0x19c) returned 0x1 [0076.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x19c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.153] GetFileType (hFile=0x19c) returned 0x1 [0076.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.153] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdc100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.153] GetFileType (hFile=0x19c) returned 0x1 [0076.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x19c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.154] GetFileType (hFile=0x19c) returned 0x1 [0076.154] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.154] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdc300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.158] GetFileType (hFile=0x19c) returned 0x1 [0076.158] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x19c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.158] GetFileType (hFile=0x19c) returned 0x1 [0076.158] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.158] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.158] GetFileType (hFile=0x19c) returned 0x1 [0076.158] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x19c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.158] CloseHandle (hObject=0x19c) returned 1 [0076.162] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Contacts\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\contacts\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Contacts\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\contacts\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0076.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Cookies" (normalized: "c:\\users\\fd1hvy\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x110c7458 | out: lpFileInformation=0x110c7458*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Cookies" (normalized: "c:\\users\\fd1hvy\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.163] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Cookies\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0076.163] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c725f0*, nNumberOfCharsToWrite=0x27, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c725f0*, lpNumberOfCharsWritten=0x10c897b8*=0x27) returned 1 [0076.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x110c74a8 | out: lpFileInformation=0x110c74a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xed9f371f, ftLastAccessTime.dwHighDateTime=0x1d69115, ftLastWriteTime.dwLowDateTime=0xed9f371f, ftLastWriteTime.dwHighDateTime=0x1d69115, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0076.175] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.175] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xed9f371f, ftLastAccessTime.dwHighDateTime=0x1d69115, ftLastWriteTime.dwLowDateTime=0xed9f371f, ftLastWriteTime.dwHighDateTime=0x1d69115, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0038 [0076.175] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xed9f371f, ftLastAccessTime.dwHighDateTime=0x1d69115, ftLastWriteTime.dwLowDateTime=0xed9f371f, ftLastWriteTime.dwHighDateTime=0x1d69115, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.175] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76effc30, ftCreationTime.dwHighDateTime=0x1d62385, ftLastAccessTime.dwLowDateTime=0xb9303c90, ftLastAccessTime.dwHighDateTime=0x1d62871, ftLastWriteTime.dwLowDateTime=0xb9303c90, ftLastWriteTime.dwHighDateTime=0x1d62871, nFileSizeHigh=0x0, nFileSizeLow=0x11a78, dwReserved0=0x0, dwReserved1=0x0, cFileName="-57wLZ.rtf", cAlternateFileName="")) returned 1 [0076.175] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89448760, ftCreationTime.dwHighDateTime=0x1d626c9, ftLastAccessTime.dwLowDateTime=0xa7d96620, ftLastAccessTime.dwHighDateTime=0x1d6231b, ftLastWriteTime.dwLowDateTime=0xa7d96620, ftLastWriteTime.dwHighDateTime=0x1d6231b, nFileSizeHigh=0x0, nFileSizeLow=0x14d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="-PlQwM2uVxE9sfoqk6h3.jpg", cAlternateFileName="-PLQWM~1.JPG")) returned 1 [0076.175] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf70440, ftCreationTime.dwHighDateTime=0x1d62480, ftLastAccessTime.dwLowDateTime=0xf5cbc500, ftLastAccessTime.dwHighDateTime=0x1d62882, ftLastWriteTime.dwLowDateTime=0xf5cbc500, ftLastWriteTime.dwHighDateTime=0x1d62882, nFileSizeHigh=0x0, nFileSizeLow=0x1163a, dwReserved0=0x0, dwReserved1=0x0, cFileName="03a8XaH-poJg.jpg", cAlternateFileName="03A8XA~1.JPG")) returned 1 [0076.175] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23171a0, ftCreationTime.dwHighDateTime=0x1d62b6c, ftLastAccessTime.dwLowDateTime=0xf2407680, ftLastAccessTime.dwHighDateTime=0x1d62731, ftLastWriteTime.dwLowDateTime=0xf2407680, ftLastWriteTime.dwHighDateTime=0x1d62731, nFileSizeHigh=0x0, nFileSizeLow=0xd96, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Rq8AH.wav", cAlternateFileName="")) returned 1 [0076.175] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dacc8b0, ftCreationTime.dwHighDateTime=0x1d62b24, ftLastAccessTime.dwLowDateTime=0x80dcade0, ftLastAccessTime.dwHighDateTime=0x1d62409, ftLastWriteTime.dwLowDateTime=0x80dcade0, ftLastWriteTime.dwHighDateTime=0x1d62409, nFileSizeHigh=0x0, nFileSizeLow=0xb4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1HazNLYr657481KVf_zV.mp3", cAlternateFileName="1HAZNL~1.MP3")) returned 1 [0076.175] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93ce03a0, ftCreationTime.dwHighDateTime=0x1d626b0, ftLastAccessTime.dwLowDateTime=0x749809f0, ftLastAccessTime.dwHighDateTime=0x1d63311, ftLastWriteTime.dwLowDateTime=0x749809f0, ftLastWriteTime.dwHighDateTime=0x1d63311, nFileSizeHigh=0x0, nFileSizeLow=0x9784, dwReserved0=0x0, dwReserved1=0x0, cFileName="5C4shagLlRI5BsyQO7.avi", cAlternateFileName="5C4SHA~1.AVI")) returned 1 [0076.175] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x117eddc0, ftCreationTime.dwHighDateTime=0x1d629fd, ftLastAccessTime.dwLowDateTime=0x7ea7d3a0, ftLastAccessTime.dwHighDateTime=0x1d624a5, ftLastWriteTime.dwLowDateTime=0x7ea7d3a0, ftLastWriteTime.dwHighDateTime=0x1d624a5, nFileSizeHigh=0x0, nFileSizeLow=0xeb9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="6CQ9noyTH3z3H5.flv", cAlternateFileName="6CQ9NO~1.FLV")) returned 1 [0076.175] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9beb9af0, ftCreationTime.dwHighDateTime=0x1d62f95, ftLastAccessTime.dwLowDateTime=0x91241850, ftLastAccessTime.dwHighDateTime=0x1d6307f, ftLastWriteTime.dwLowDateTime=0x91241850, ftLastWriteTime.dwHighDateTime=0x1d6307f, nFileSizeHigh=0x0, nFileSizeLow=0xd111, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3735y2rPZ.m4a", cAlternateFileName="A3735Y~1.M4A")) returned 1 [0076.175] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932d41b0, ftCreationTime.dwHighDateTime=0x1d62e01, ftLastAccessTime.dwLowDateTime=0xfa95c950, ftLastAccessTime.dwHighDateTime=0x1d6310b, ftLastWriteTime.dwLowDateTime=0xfa95c950, ftLastWriteTime.dwHighDateTime=0x1d6310b, nFileSizeHigh=0x0, nFileSizeLow=0xc7b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ceYbwDK-Ygvspux-.bmp", cAlternateFileName="CEYBWD~1.BMP")) returned 1 [0076.175] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3054f0, ftCreationTime.dwHighDateTime=0x1d62f39, ftLastAccessTime.dwLowDateTime=0x38acf9f0, ftLastAccessTime.dwHighDateTime=0x1d63249, ftLastWriteTime.dwLowDateTime=0x38acf9f0, ftLastWriteTime.dwHighDateTime=0x1d63249, nFileSizeHigh=0x0, nFileSizeLow=0x147bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="d-aD5KS9Ip1RsRBJ.bmp", cAlternateFileName="D-AD5K~1.BMP")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66d34660, ftCreationTime.dwHighDateTime=0x1d62e28, ftLastAccessTime.dwLowDateTime=0x5ba70190, ftLastAccessTime.dwHighDateTime=0x1d62519, ftLastWriteTime.dwLowDateTime=0x5ba70190, ftLastWriteTime.dwHighDateTime=0x1d62519, nFileSizeHigh=0x0, nFileSizeLow=0xb6b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="dscYzmVv.gif", cAlternateFileName="")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9e7940, ftCreationTime.dwHighDateTime=0x1d623e4, ftLastAccessTime.dwLowDateTime=0xe8ff2e0, ftLastAccessTime.dwHighDateTime=0x1d62465, ftLastWriteTime.dwLowDateTime=0xe8ff2e0, ftLastWriteTime.dwHighDateTime=0x1d62465, nFileSizeHigh=0x0, nFileSizeLow=0x137ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="EhMSntHa4AWWw_SjCQ.wav", cAlternateFileName="EHMSNT~1.WAV")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b5dc240, ftCreationTime.dwHighDateTime=0x1d62e01, ftLastAccessTime.dwLowDateTime=0x358da480, ftLastAccessTime.dwHighDateTime=0x1d62a25, ftLastWriteTime.dwLowDateTime=0x358da480, ftLastWriteTime.dwHighDateTime=0x1d62a25, nFileSizeHigh=0x0, nFileSizeLow=0x13e3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ehVKb5O.xlsx", cAlternateFileName="EHVKB5~1.XLS")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf47760, ftCreationTime.dwHighDateTime=0x1d62714, ftLastAccessTime.dwLowDateTime=0x8942e550, ftLastAccessTime.dwHighDateTime=0x1d625fb, ftLastWriteTime.dwLowDateTime=0x8942e550, ftLastWriteTime.dwHighDateTime=0x1d625fb, nFileSizeHigh=0x0, nFileSizeLow=0x84b, dwReserved0=0x0, dwReserved1=0x0, cFileName="hIxN4R8t.swf", cAlternateFileName="")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b912ac0, ftCreationTime.dwHighDateTime=0x1d623c8, ftLastAccessTime.dwLowDateTime=0x1e3f7290, ftLastAccessTime.dwHighDateTime=0x1d622c3, ftLastWriteTime.dwLowDateTime=0x1e3f7290, ftLastWriteTime.dwHighDateTime=0x1d622c3, nFileSizeHigh=0x0, nFileSizeLow=0x1841d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IO3lSyfQHV.docx", cAlternateFileName="IO3LSY~1.DOC")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda7d6500, ftCreationTime.dwHighDateTime=0x1d69115, ftLastAccessTime.dwLowDateTime=0xda7d6500, ftLastAccessTime.dwHighDateTime=0x1d69115, ftLastWriteTime.dwLowDateTime=0x9472d200, ftLastWriteTime.dwHighDateTime=0x1d69112, nFileSizeHigh=0x0, nFileSizeLow=0x290550, dwReserved0=0x0, dwReserved1=0x0, cFileName="look (uploaded by Matt Browning (via weblink) Sep 22 2020 11-03-47 UTC).exe", cAlternateFileName="LOOK(U~1.EXE")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfba973a0, ftCreationTime.dwHighDateTime=0x1d62ab2, ftLastAccessTime.dwLowDateTime=0x864d2780, ftLastAccessTime.dwHighDateTime=0x1d628c5, ftLastWriteTime.dwLowDateTime=0x864d2780, ftLastWriteTime.dwHighDateTime=0x1d628c5, nFileSizeHigh=0x0, nFileSizeLow=0x7a31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MuoZgG.bmp", cAlternateFileName="")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb54b0, ftCreationTime.dwHighDateTime=0x1d62b2c, ftLastAccessTime.dwLowDateTime=0x9f7879a0, ftLastAccessTime.dwHighDateTime=0x1d62c10, ftLastWriteTime.dwLowDateTime=0x9f7879a0, ftLastWriteTime.dwHighDateTime=0x1d62c10, nFileSizeHigh=0x0, nFileSizeLow=0x1050d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NnxHmb8TmXdZ7qPesZ.rtf", cAlternateFileName="NNXHMB~1.RTF")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0822c0, ftCreationTime.dwHighDateTime=0x1d6312d, ftLastAccessTime.dwLowDateTime=0xd35b3e20, ftLastAccessTime.dwHighDateTime=0x1d628cc, ftLastWriteTime.dwLowDateTime=0xd35b3e20, ftLastWriteTime.dwHighDateTime=0x1d628cc, nFileSizeHigh=0x0, nFileSizeLow=0xdd63, dwReserved0=0x0, dwReserved1=0x0, cFileName="NSOzAz-WrG2cPuD.pdf", cAlternateFileName="NSOZAZ~1.PDF")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59eefc10, ftCreationTime.dwHighDateTime=0x1d6253f, ftLastAccessTime.dwLowDateTime=0x2a418870, ftLastAccessTime.dwHighDateTime=0x1d627b5, ftLastWriteTime.dwLowDateTime=0x2a418870, ftLastWriteTime.dwHighDateTime=0x1d627b5, nFileSizeHigh=0x0, nFileSizeLow=0x18557, dwReserved0=0x0, dwReserved1=0x0, cFileName="OvcAOu1HCzt.swf", cAlternateFileName="OVCAOU~1.SWF")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6bdf2d0, ftCreationTime.dwHighDateTime=0x1d63193, ftLastAccessTime.dwLowDateTime=0x13f37a30, ftLastAccessTime.dwHighDateTime=0x1d63032, ftLastWriteTime.dwLowDateTime=0x13f37a30, ftLastWriteTime.dwHighDateTime=0x1d63032, nFileSizeHigh=0x0, nFileSizeLow=0xf8ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="p2qFZgdmlfQX.jpg", cAlternateFileName="P2QFZG~1.JPG")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x425e5d10, ftCreationTime.dwHighDateTime=0x1d6306c, ftLastAccessTime.dwLowDateTime=0xd99d1cb0, ftLastAccessTime.dwHighDateTime=0x1d62fa5, ftLastWriteTime.dwLowDateTime=0xd99d1cb0, ftLastWriteTime.dwHighDateTime=0x1d62fa5, nFileSizeHigh=0x0, nFileSizeLow=0x14707, dwReserved0=0x0, dwReserved1=0x0, cFileName="p7Hkou.avi", cAlternateFileName="")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe682ff50, ftCreationTime.dwHighDateTime=0x1d625a3, ftLastAccessTime.dwLowDateTime=0xef13e2f0, ftLastAccessTime.dwHighDateTime=0x1d62e69, ftLastWriteTime.dwLowDateTime=0xef13e2f0, ftLastWriteTime.dwHighDateTime=0x1d62e69, nFileSizeHigh=0x0, nFileSizeLow=0x188be, dwReserved0=0x0, dwReserved1=0x0, cFileName="pEkcT3lc.rtf", cAlternateFileName="")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24cfe0, ftCreationTime.dwHighDateTime=0x1d62c68, ftLastAccessTime.dwLowDateTime=0xcd63d30, ftLastAccessTime.dwHighDateTime=0x1d6236e, ftLastWriteTime.dwLowDateTime=0xcd63d30, ftLastWriteTime.dwHighDateTime=0x1d6236e, nFileSizeHigh=0x0, nFileSizeLow=0xc41, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH-W.flv", cAlternateFileName="")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa210d7b0, ftCreationTime.dwHighDateTime=0x1d631b6, ftLastAccessTime.dwLowDateTime=0x201463a0, ftLastAccessTime.dwHighDateTime=0x1d624c6, ftLastWriteTime.dwLowDateTime=0x201463a0, ftLastWriteTime.dwHighDateTime=0x1d624c6, nFileSizeHigh=0x0, nFileSizeLow=0x14b73, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pi7NGWFT2yA.odp", cAlternateFileName="PI7NGW~1.ODP")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ef811c0, ftCreationTime.dwHighDateTime=0x1d625eb, ftLastAccessTime.dwLowDateTime=0x45fed0c0, ftLastAccessTime.dwHighDateTime=0x1d62ec9, ftLastWriteTime.dwLowDateTime=0x45fed0c0, ftLastWriteTime.dwHighDateTime=0x1d62ec9, nFileSizeHigh=0x0, nFileSizeLow=0xeb2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plKqlnWGYZhS.mp4", cAlternateFileName="PLKQLN~1.MP4")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe216dc80, ftCreationTime.dwHighDateTime=0x1d62cff, ftLastAccessTime.dwLowDateTime=0xd1dd2460, ftLastAccessTime.dwHighDateTime=0x1d62e84, ftLastWriteTime.dwLowDateTime=0xd1dd2460, ftLastWriteTime.dwHighDateTime=0x1d62e84, nFileSizeHigh=0x0, nFileSizeLow=0x17bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="q0uLuwp2Go1Kuzvc78.xls", cAlternateFileName="Q0ULUW~1.XLS")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad83cdf0, ftCreationTime.dwHighDateTime=0x1d62315, ftLastAccessTime.dwLowDateTime=0x3c7f0be0, ftLastAccessTime.dwHighDateTime=0x1d62c3b, ftLastWriteTime.dwLowDateTime=0x3c7f0be0, ftLastWriteTime.dwHighDateTime=0x1d62c3b, nFileSizeHigh=0x0, nFileSizeLow=0xf541, dwReserved0=0x0, dwReserved1=0x0, cFileName="QO5H.mp3", cAlternateFileName="")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f55300, ftCreationTime.dwHighDateTime=0x1d629f9, ftLastAccessTime.dwLowDateTime=0x95e14780, ftLastAccessTime.dwHighDateTime=0x1d62424, ftLastWriteTime.dwLowDateTime=0x95e14780, ftLastWriteTime.dwHighDateTime=0x1d62424, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="stu88O9", cAlternateFileName="")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb966b890, ftCreationTime.dwHighDateTime=0x1d62742, ftLastAccessTime.dwLowDateTime=0x7e308080, ftLastAccessTime.dwHighDateTime=0x1d62c97, ftLastWriteTime.dwLowDateTime=0x7e308080, ftLastWriteTime.dwHighDateTime=0x1d62c97, nFileSizeHigh=0x0, nFileSizeLow=0x11cd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="tFQy0.avi", cAlternateFileName="")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bc25f0, ftCreationTime.dwHighDateTime=0x1d6280e, ftLastAccessTime.dwLowDateTime=0xbdac02c0, ftLastAccessTime.dwHighDateTime=0x1d62a08, ftLastWriteTime.dwLowDateTime=0xbdac02c0, ftLastWriteTime.dwHighDateTime=0x1d62a08, nFileSizeHigh=0x0, nFileSizeLow=0xad3, dwReserved0=0x0, dwReserved1=0x0, cFileName="tKpAK6co83Lo.wav", cAlternateFileName="TKPAK6~1.WAV")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bc7990, ftCreationTime.dwHighDateTime=0x1d6288d, ftLastAccessTime.dwLowDateTime=0x1dcae3b0, ftLastAccessTime.dwHighDateTime=0x1d628f6, ftLastWriteTime.dwLowDateTime=0x1dcae3b0, ftLastWriteTime.dwHighDateTime=0x1d628f6, nFileSizeHigh=0x0, nFileSizeLow=0x9052, dwReserved0=0x0, dwReserved1=0x0, cFileName="V6IiH9pC.avi", cAlternateFileName="")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a379790, ftCreationTime.dwHighDateTime=0x1d626bc, ftLastAccessTime.dwLowDateTime=0xec29efd0, ftLastAccessTime.dwHighDateTime=0x1d63242, ftLastWriteTime.dwLowDateTime=0xec29efd0, ftLastWriteTime.dwHighDateTime=0x1d63242, nFileSizeHigh=0x0, nFileSizeLow=0x1cdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="VD7Q taqZbUqytAng_.odt", cAlternateFileName="VD7QTA~1.ODT")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe269c060, ftCreationTime.dwHighDateTime=0x1d62fd1, ftLastAccessTime.dwLowDateTime=0x5fdd2da0, ftLastAccessTime.dwHighDateTime=0x1d6273c, ftLastWriteTime.dwLowDateTime=0x5fdd2da0, ftLastWriteTime.dwHighDateTime=0x1d6273c, nFileSizeHigh=0x0, nFileSizeLow=0x12790, dwReserved0=0x0, dwReserved1=0x0, cFileName="vdzywWs3jzfJK5kh.png", cAlternateFileName="VDZYWW~1.PNG")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812606f0, ftCreationTime.dwHighDateTime=0x1d62e51, ftLastAccessTime.dwLowDateTime=0x539a0ba0, ftLastAccessTime.dwHighDateTime=0x1d632a7, ftLastWriteTime.dwLowDateTime=0x539a0ba0, ftLastWriteTime.dwHighDateTime=0x1d632a7, nFileSizeHigh=0x0, nFileSizeLow=0xdc91, dwReserved0=0x0, dwReserved1=0x0, cFileName="XDQ8u7R88MAr0-4qKN.mp4", cAlternateFileName="XDQ8U7~1.MP4")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efe5320, ftCreationTime.dwHighDateTime=0x1d623a3, ftLastAccessTime.dwLowDateTime=0x4f126850, ftLastAccessTime.dwHighDateTime=0x1d629ee, ftLastWriteTime.dwLowDateTime=0x4f126850, ftLastWriteTime.dwHighDateTime=0x1d629ee, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="xh4NuQicJgTbMEKr.gif", cAlternateFileName="XH4NUQ~1.GIF")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93382e20, ftCreationTime.dwHighDateTime=0x1d62d04, ftLastAccessTime.dwLowDateTime=0x64ed2520, ftLastAccessTime.dwHighDateTime=0x1d62831, ftLastWriteTime.dwLowDateTime=0x64ed2520, ftLastWriteTime.dwHighDateTime=0x1d62831, nFileSizeHigh=0x0, nFileSizeLow=0x17445, dwReserved0=0x0, dwReserved1=0x0, cFileName="yoPormvcjnR.pps", cAlternateFileName="YOPORM~1.PPS")) returned 1 [0076.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781389a0, ftCreationTime.dwHighDateTime=0x1d6266f, ftLastAccessTime.dwLowDateTime=0x4ce132c0, ftLastAccessTime.dwHighDateTime=0x1d62393, ftLastWriteTime.dwLowDateTime=0x4ce132c0, ftLastWriteTime.dwHighDateTime=0x1d62393, nFileSizeHigh=0x0, nFileSizeLow=0x1122d, dwReserved0=0x0, dwReserved1=0x0, cFileName="yUKfW.mp4", cAlternateFileName="")) returned 1 [0076.178] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.178] FindClose (in: hFindFile=0x7f0038 | out: hFindFile=0x7f0038) returned 1 [0076.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.180] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0076.180] GetFileType (hFile=0x19c) returned 0x1 [0076.180] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0076.180] WriteFile (in: hFile=0x19c, lpBuffer=0x110a0480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x110a0480*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0076.181] GetFileType (hFile=0x19c) returned 0x1 [0076.181] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0076.181] CloseHandle (hObject=0x19c) returned 1 [0076.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-57wLZ.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\-57wlz.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10cd2238 | out: lpFileInformation=0x10cd2238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76effc30, ftCreationTime.dwHighDateTime=0x1d62385, ftLastAccessTime.dwLowDateTime=0xb9303c90, ftLastAccessTime.dwHighDateTime=0x1d62871, ftLastWriteTime.dwLowDateTime=0xb9303c90, ftLastWriteTime.dwHighDateTime=0x1d62871, nFileSizeHigh=0x0, nFileSizeLow=0x11a78)) returned 1 [0076.185] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\-57wLZ.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\-57wlz.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.185] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.185] GetFileType (hFile=0x19c) returned 0x1 [0076.185] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.185] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e860 | out: pbBuffer=0x10c6e860) returned 1 [0076.185] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e870 | out: pbBuffer=0x10c6e870) returned 1 [0076.185] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc401 | out: pbBuffer=0x10cdc401) returned 1 [0076.186] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc601 | out: pbBuffer=0x10cdc601) returned 1 [0076.186] ReadFile (in: hFile=0x19c, lpBuffer=0x110ae000, nNumberOfBytesToRead=0x11a78, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x110ae000*, lpNumberOfBytesRead=0x10c89bf0*=0x11a78, lpOverlapped=0x0) returned 1 [0076.188] GetFileType (hFile=0x19c) returned 0x1 [0076.188] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.188] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x11a78, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89bf0*=0x11a78, lpOverlapped=0x10c89bf4) returned 1 [0076.188] GetFileType (hFile=0x19c) returned 0x1 [0076.188] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a78, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.188] GetFileType (hFile=0x19c) returned 0x1 [0076.188] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.188] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdc500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.188] GetFileType (hFile=0x19c) returned 0x1 [0076.188] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a78, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.188] GetFileType (hFile=0x19c) returned 0x1 [0076.188] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.188] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdc700*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.188] GetFileType (hFile=0x19c) returned 0x1 [0076.188] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a78, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.188] GetFileType (hFile=0x19c) returned 0x1 [0076.189] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.189] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.189] GetFileType (hFile=0x19c) returned 0x1 [0076.189] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a78, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.189] CloseHandle (hObject=0x19c) returned 1 [0076.197] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\-57wLZ.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\-57wlz.rtf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\-57wLZ.rtf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\-57wlz.rtf.trapget"), dwFlags=0x1) returned 1 [0076.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-PlQwM2uVxE9sfoqk6h3.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\-plqwm2uvxe9sfoqk6h3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x10cd2378 | out: lpFileInformation=0x10cd2378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89448760, ftCreationTime.dwHighDateTime=0x1d626c9, ftLastAccessTime.dwLowDateTime=0xa7d96620, ftLastAccessTime.dwHighDateTime=0x1d6231b, ftLastWriteTime.dwLowDateTime=0xa7d96620, ftLastWriteTime.dwHighDateTime=0x1d6231b, nFileSizeHigh=0x0, nFileSizeLow=0x14d1)) returned 1 [0076.203] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\-PlQwM2uVxE9sfoqk6h3.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\-plqwm2uvxe9sfoqk6h3.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.203] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.203] GetFileType (hFile=0x19c) returned 0x1 [0076.203] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.203] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e950 | out: pbBuffer=0x10c6e950) returned 1 [0076.203] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e960 | out: pbBuffer=0x10c6e960) returned 1 [0076.203] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdc801 | out: pbBuffer=0x10cdc801) returned 1 [0076.203] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdca01 | out: pbBuffer=0x10cdca01) returned 1 [0076.204] ReadFile (in: hFile=0x19c, lpBuffer=0x11016000, nNumberOfBytesToRead=0x14d1, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x11016000*, lpNumberOfBytesRead=0x10c89bf0*=0x14d1, lpOverlapped=0x0) returned 1 [0076.204] GetFileType (hFile=0x19c) returned 0x1 [0076.204] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.204] WriteFile (in: hFile=0x19c, lpBuffer=0x11017500*, nNumberOfBytesToWrite=0x14d1, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x11017500*, lpNumberOfBytesWritten=0x10c89bf0*=0x14d1, lpOverlapped=0x10c89bf4) returned 1 [0076.205] GetFileType (hFile=0x19c) returned 0x1 [0076.205] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14d1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.205] GetFileType (hFile=0x19c) returned 0x1 [0076.205] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.205] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdc900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdc900*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.205] GetFileType (hFile=0x19c) returned 0x1 [0076.205] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14d1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.205] GetFileType (hFile=0x19c) returned 0x1 [0076.205] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.205] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdcb00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdcb00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.205] GetFileType (hFile=0x19c) returned 0x1 [0076.205] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14d1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.205] GetFileType (hFile=0x19c) returned 0x1 [0076.205] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.205] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.209] GetFileType (hFile=0x19c) returned 0x1 [0076.209] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14d1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.209] CloseHandle (hObject=0x19c) returned 1 [0076.217] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\-PlQwM2uVxE9sfoqk6h3.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\-plqwm2uvxe9sfoqk6h3.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\-PlQwM2uVxE9sfoqk6h3.jpg.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\-plqwm2uvxe9sfoqk6h3.jpg.trapget"), dwFlags=0x1) returned 1 [0076.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\03a8XaH-poJg.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\03a8xah-pojg.jpg"), fInfoLevelId=0x0, lpFileInformation=0x10cd24b8 | out: lpFileInformation=0x10cd24b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf70440, ftCreationTime.dwHighDateTime=0x1d62480, ftLastAccessTime.dwLowDateTime=0xf5cbc500, ftLastAccessTime.dwHighDateTime=0x1d62882, ftLastWriteTime.dwLowDateTime=0xf5cbc500, ftLastWriteTime.dwHighDateTime=0x1d62882, nFileSizeHigh=0x0, nFileSizeLow=0x1163a)) returned 1 [0076.222] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\03a8XaH-poJg.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\03a8xah-pojg.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.222] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.222] GetFileType (hFile=0x19c) returned 0x1 [0076.222] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.223] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea30 | out: pbBuffer=0x10c6ea30) returned 1 [0076.223] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea40 | out: pbBuffer=0x10c6ea40) returned 1 [0076.223] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdcc01 | out: pbBuffer=0x10cdcc01) returned 1 [0076.223] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdd001 | out: pbBuffer=0x10cdd001) returned 1 [0076.224] ReadFile (in: hFile=0x19c, lpBuffer=0x11020000, nNumberOfBytesToRead=0x1163a, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x11020000*, lpNumberOfBytesRead=0x10c89bf0*=0x1163a, lpOverlapped=0x0) returned 1 [0076.225] GetFileType (hFile=0x19c) returned 0x1 [0076.225] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.225] WriteFile (in: hFile=0x19c, lpBuffer=0x11032000*, nNumberOfBytesToWrite=0x1163a, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x11032000*, lpNumberOfBytesWritten=0x10c89bf0*=0x1163a, lpOverlapped=0x10c89bf4) returned 1 [0076.225] GetFileType (hFile=0x19c) returned 0x1 [0076.225] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1163a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.225] GetFileType (hFile=0x19c) returned 0x1 [0076.226] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.226] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdce00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdce00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.226] GetFileType (hFile=0x19c) returned 0x1 [0076.226] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1163a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.226] GetFileType (hFile=0x19c) returned 0x1 [0076.226] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.226] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdd100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdd100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.226] GetFileType (hFile=0x19c) returned 0x1 [0076.226] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1163a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.226] GetFileType (hFile=0x19c) returned 0x1 [0076.226] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.226] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.226] GetFileType (hFile=0x19c) returned 0x1 [0076.226] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1163a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.226] CloseHandle (hObject=0x19c) returned 1 [0076.235] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\03a8XaH-poJg.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\03a8xah-pojg.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\03a8XaH-poJg.jpg.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\03a8xah-pojg.jpg.trapget"), dwFlags=0x1) returned 1 [0076.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0Rq8AH.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\0rq8ah.wav"), fInfoLevelId=0x0, lpFileInformation=0x10cd25f8 | out: lpFileInformation=0x10cd25f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23171a0, ftCreationTime.dwHighDateTime=0x1d62b6c, ftLastAccessTime.dwLowDateTime=0xf2407680, ftLastAccessTime.dwHighDateTime=0x1d62731, ftLastWriteTime.dwLowDateTime=0xf2407680, ftLastWriteTime.dwHighDateTime=0x1d62731, nFileSizeHigh=0x0, nFileSizeLow=0xd96)) returned 1 [0076.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\0Rq8AH.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\0rq8ah.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.239] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.239] GetFileType (hFile=0x19c) returned 0x1 [0076.239] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.239] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eb20 | out: pbBuffer=0x10c6eb20) returned 1 [0076.239] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eb30 | out: pbBuffer=0x10c6eb30) returned 1 [0076.239] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdd201 | out: pbBuffer=0x10cdd201) returned 1 [0076.240] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdd401 | out: pbBuffer=0x10cdd401) returned 1 [0076.240] ReadFile (in: hFile=0x19c, lpBuffer=0x11050000, nNumberOfBytesToRead=0xd96, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x11050000*, lpNumberOfBytesRead=0x10c89bf0*=0xd96, lpOverlapped=0x0) returned 1 [0076.241] GetFileType (hFile=0x19c) returned 0x1 [0076.241] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.241] WriteFile (in: hFile=0x19c, lpBuffer=0x11051000*, nNumberOfBytesToWrite=0xd96, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x11051000*, lpNumberOfBytesWritten=0x10c89bf0*=0xd96, lpOverlapped=0x10c89bf4) returned 1 [0076.241] GetFileType (hFile=0x19c) returned 0x1 [0076.241] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd96, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.241] GetFileType (hFile=0x19c) returned 0x1 [0076.241] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.241] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdd300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdd300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.241] GetFileType (hFile=0x19c) returned 0x1 [0076.241] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd96, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.241] GetFileType (hFile=0x19c) returned 0x1 [0076.241] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.241] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdd500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdd500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.242] GetFileType (hFile=0x19c) returned 0x1 [0076.242] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd96, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.242] GetFileType (hFile=0x19c) returned 0x1 [0076.242] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.242] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.242] GetFileType (hFile=0x19c) returned 0x1 [0076.242] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd96, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.242] CloseHandle (hObject=0x19c) returned 1 [0076.247] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\0Rq8AH.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\0rq8ah.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\0Rq8AH.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\0rq8ah.wav.trapget"), dwFlags=0x1) returned 1 [0076.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1HazNLYr657481KVf_zV.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\1haznlyr657481kvf_zv.mp3"), fInfoLevelId=0x0, lpFileInformation=0x10cd2738 | out: lpFileInformation=0x10cd2738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dacc8b0, ftCreationTime.dwHighDateTime=0x1d62b24, ftLastAccessTime.dwLowDateTime=0x80dcade0, ftLastAccessTime.dwHighDateTime=0x1d62409, ftLastWriteTime.dwLowDateTime=0x80dcade0, ftLastWriteTime.dwHighDateTime=0x1d62409, nFileSizeHigh=0x0, nFileSizeLow=0xb4e8)) returned 1 [0076.251] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\1HazNLYr657481KVf_zV.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\1haznlyr657481kvf_zv.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.251] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.251] GetFileType (hFile=0x19c) returned 0x1 [0076.251] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.251] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ec10 | out: pbBuffer=0x10c6ec10) returned 1 [0076.251] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ec20 | out: pbBuffer=0x10c6ec20) returned 1 [0076.251] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdd601 | out: pbBuffer=0x10cdd601) returned 1 [0076.252] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdd801 | out: pbBuffer=0x10cdd801) returned 1 [0076.252] ReadFile (in: hFile=0x19c, lpBuffer=0x1105a000, nNumberOfBytesToRead=0xb4e8, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x1105a000*, lpNumberOfBytesRead=0x10c89bf0*=0xb4e8, lpOverlapped=0x0) returned 1 [0076.253] GetFileType (hFile=0x19c) returned 0x1 [0076.253] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.253] WriteFile (in: hFile=0x19c, lpBuffer=0x11066000*, nNumberOfBytesToWrite=0xb4e8, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x11066000*, lpNumberOfBytesWritten=0x10c89bf0*=0xb4e8, lpOverlapped=0x10c89bf4) returned 1 [0076.253] GetFileType (hFile=0x19c) returned 0x1 [0076.253] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb4e8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.253] GetFileType (hFile=0x19c) returned 0x1 [0076.254] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.254] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdd700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdd700*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.254] GetFileType (hFile=0x19c) returned 0x1 [0076.254] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb4e8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.254] GetFileType (hFile=0x19c) returned 0x1 [0076.254] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.254] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdd900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdd900*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.254] GetFileType (hFile=0x19c) returned 0x1 [0076.254] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb4e8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.254] GetFileType (hFile=0x19c) returned 0x1 [0076.254] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.254] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.254] GetFileType (hFile=0x19c) returned 0x1 [0076.254] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb4e8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.254] CloseHandle (hObject=0x19c) returned 1 [0076.263] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\1HazNLYr657481KVf_zV.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\1haznlyr657481kvf_zv.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\1HazNLYr657481KVf_zV.mp3.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\1haznlyr657481kvf_zv.mp3.trapget"), dwFlags=0x1) returned 1 [0076.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5C4shagLlRI5BsyQO7.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\5c4shagllri5bsyqo7.avi"), fInfoLevelId=0x0, lpFileInformation=0x10cd2878 | out: lpFileInformation=0x10cd2878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93ce03a0, ftCreationTime.dwHighDateTime=0x1d626b0, ftLastAccessTime.dwLowDateTime=0x749809f0, ftLastAccessTime.dwHighDateTime=0x1d63311, ftLastWriteTime.dwLowDateTime=0x749809f0, ftLastWriteTime.dwHighDateTime=0x1d63311, nFileSizeHigh=0x0, nFileSizeLow=0x9784)) returned 1 [0076.267] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5C4shagLlRI5BsyQO7.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\5c4shagllri5bsyqo7.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.267] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.267] GetFileType (hFile=0x19c) returned 0x1 [0076.267] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.267] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed00 | out: pbBuffer=0x10c6ed00) returned 1 [0076.267] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed10 | out: pbBuffer=0x10c6ed10) returned 1 [0076.267] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdda01 | out: pbBuffer=0x10cdda01) returned 1 [0076.268] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cddc01 | out: pbBuffer=0x10cddc01) returned 1 [0076.268] ReadFile (in: hFile=0x19c, lpBuffer=0x1107a000, nNumberOfBytesToRead=0x9784, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x1107a000*, lpNumberOfBytesRead=0x10c89bf0*=0x9784, lpOverlapped=0x0) returned 1 [0076.269] GetFileType (hFile=0x19c) returned 0x1 [0076.269] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.269] WriteFile (in: hFile=0x19c, lpBuffer=0x110cc000*, nNumberOfBytesToWrite=0x9784, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110cc000*, lpNumberOfBytesWritten=0x10c89bf0*=0x9784, lpOverlapped=0x10c89bf4) returned 1 [0076.269] GetFileType (hFile=0x19c) returned 0x1 [0076.269] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9784, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.269] GetFileType (hFile=0x19c) returned 0x1 [0076.269] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.269] WriteFile (in: hFile=0x19c, lpBuffer=0x10cddb00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cddb00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.269] GetFileType (hFile=0x19c) returned 0x1 [0076.270] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9784, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.270] GetFileType (hFile=0x19c) returned 0x1 [0076.270] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.270] WriteFile (in: hFile=0x19c, lpBuffer=0x10cddd00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cddd00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.270] GetFileType (hFile=0x19c) returned 0x1 [0076.270] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9784, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.270] GetFileType (hFile=0x19c) returned 0x1 [0076.270] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.270] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.270] GetFileType (hFile=0x19c) returned 0x1 [0076.270] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9784, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.270] CloseHandle (hObject=0x19c) returned 1 [0076.278] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\5C4shagLlRI5BsyQO7.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\5c4shagllri5bsyqo7.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\5C4shagLlRI5BsyQO7.avi.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\5c4shagllri5bsyqo7.avi.trapget"), dwFlags=0x1) returned 1 [0076.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\6CQ9noyTH3z3H5.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\6cq9noyth3z3h5.flv"), fInfoLevelId=0x0, lpFileInformation=0x10cd29b8 | out: lpFileInformation=0x10cd29b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x117eddc0, ftCreationTime.dwHighDateTime=0x1d629fd, ftLastAccessTime.dwLowDateTime=0x7ea7d3a0, ftLastAccessTime.dwHighDateTime=0x1d624a5, ftLastWriteTime.dwLowDateTime=0x7ea7d3a0, ftLastWriteTime.dwHighDateTime=0x1d624a5, nFileSizeHigh=0x0, nFileSizeLow=0xeb9c)) returned 1 [0076.287] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\6CQ9noyTH3z3H5.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\6cq9noyth3z3h5.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.288] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.288] GetFileType (hFile=0x19c) returned 0x1 [0076.288] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.288] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ede0 | out: pbBuffer=0x10c6ede0) returned 1 [0076.288] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6edf0 | out: pbBuffer=0x10c6edf0) returned 1 [0076.288] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdde01 | out: pbBuffer=0x10cdde01) returned 1 [0076.288] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110da001 | out: pbBuffer=0x110da001) returned 1 [0076.288] ReadFile (in: hFile=0x19c, lpBuffer=0x110de000, nNumberOfBytesToRead=0xeb9c, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x110de000*, lpNumberOfBytesRead=0x10c89bf0*=0xeb9c, lpOverlapped=0x0) returned 1 [0076.290] GetFileType (hFile=0x19c) returned 0x1 [0076.290] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.290] WriteFile (in: hFile=0x19c, lpBuffer=0x110ee000*, nNumberOfBytesToWrite=0xeb9c, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110ee000*, lpNumberOfBytesWritten=0x10c89bf0*=0xeb9c, lpOverlapped=0x10c89bf4) returned 1 [0076.290] GetFileType (hFile=0x19c) returned 0x1 [0076.290] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeb9c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.290] GetFileType (hFile=0x19c) returned 0x1 [0076.290] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.290] WriteFile (in: hFile=0x19c, lpBuffer=0x10cddf00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cddf00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.290] GetFileType (hFile=0x19c) returned 0x1 [0076.290] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeb9c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.290] GetFileType (hFile=0x19c) returned 0x1 [0076.290] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.291] WriteFile (in: hFile=0x19c, lpBuffer=0x110da100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110da100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.291] GetFileType (hFile=0x19c) returned 0x1 [0076.291] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeb9c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.291] GetFileType (hFile=0x19c) returned 0x1 [0076.291] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.291] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.291] GetFileType (hFile=0x19c) returned 0x1 [0076.291] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeb9c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.291] CloseHandle (hObject=0x19c) returned 1 [0076.297] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\6CQ9noyTH3z3H5.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\6cq9noyth3z3h5.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\6CQ9noyTH3z3H5.flv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\6cq9noyth3z3h5.flv.trapget"), dwFlags=0x1) returned 1 [0076.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\A3735y2rPZ.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\a3735y2rpz.m4a"), fInfoLevelId=0x0, lpFileInformation=0x10cd2af8 | out: lpFileInformation=0x10cd2af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9beb9af0, ftCreationTime.dwHighDateTime=0x1d62f95, ftLastAccessTime.dwLowDateTime=0x91241850, ftLastAccessTime.dwHighDateTime=0x1d6307f, ftLastWriteTime.dwLowDateTime=0x91241850, ftLastWriteTime.dwHighDateTime=0x1d6307f, nFileSizeHigh=0x0, nFileSizeLow=0xd111)) returned 1 [0076.299] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\A3735y2rPZ.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\a3735y2rpz.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.299] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.299] GetFileType (hFile=0x19c) returned 0x1 [0076.299] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.299] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eed0 | out: pbBuffer=0x10c6eed0) returned 1 [0076.299] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eee0 | out: pbBuffer=0x10c6eee0) returned 1 [0076.299] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110da201 | out: pbBuffer=0x110da201) returned 1 [0076.300] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110da401 | out: pbBuffer=0x110da401) returned 1 [0076.300] ReadFile (in: hFile=0x19c, lpBuffer=0x1110c000, nNumberOfBytesToRead=0xd111, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x1110c000*, lpNumberOfBytesRead=0x10c89bf0*=0xd111, lpOverlapped=0x0) returned 1 [0076.301] GetFileType (hFile=0x19c) returned 0x1 [0076.301] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.301] WriteFile (in: hFile=0x19c, lpBuffer=0x1111a000*, nNumberOfBytesToWrite=0xd111, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x1111a000*, lpNumberOfBytesWritten=0x10c89bf0*=0xd111, lpOverlapped=0x10c89bf4) returned 1 [0076.301] GetFileType (hFile=0x19c) returned 0x1 [0076.302] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd111, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.302] GetFileType (hFile=0x19c) returned 0x1 [0076.302] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.302] WriteFile (in: hFile=0x19c, lpBuffer=0x110da300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110da300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.302] GetFileType (hFile=0x19c) returned 0x1 [0076.302] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd111, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.302] GetFileType (hFile=0x19c) returned 0x1 [0076.302] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.302] WriteFile (in: hFile=0x19c, lpBuffer=0x110da500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110da500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.302] GetFileType (hFile=0x19c) returned 0x1 [0076.302] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd111, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.302] GetFileType (hFile=0x19c) returned 0x1 [0076.302] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.302] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.302] GetFileType (hFile=0x19c) returned 0x1 [0076.302] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd111, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.302] CloseHandle (hObject=0x19c) returned 1 [0076.304] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\A3735y2rPZ.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\a3735y2rpz.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\A3735y2rPZ.m4a.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\a3735y2rpz.m4a.trapget"), dwFlags=0x1) returned 1 [0076.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EhMSntHa4AWWw_SjCQ.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\ehmsntha4awww_sjcq.wav"), fInfoLevelId=0x0, lpFileInformation=0x10cd2c38 | out: lpFileInformation=0x10cd2c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9e7940, ftCreationTime.dwHighDateTime=0x1d623e4, ftLastAccessTime.dwLowDateTime=0xe8ff2e0, ftLastAccessTime.dwHighDateTime=0x1d62465, ftLastWriteTime.dwLowDateTime=0xe8ff2e0, ftLastWriteTime.dwHighDateTime=0x1d62465, nFileSizeHigh=0x0, nFileSizeLow=0x137ef)) returned 1 [0076.305] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\EhMSntHa4AWWw_SjCQ.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\ehmsntha4awww_sjcq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.305] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.305] GetFileType (hFile=0x19c) returned 0x1 [0076.306] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.306] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6efc0 | out: pbBuffer=0x10c6efc0) returned 1 [0076.306] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6efd0 | out: pbBuffer=0x10c6efd0) returned 1 [0076.306] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110da601 | out: pbBuffer=0x110da601) returned 1 [0076.306] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110da801 | out: pbBuffer=0x110da801) returned 1 [0076.307] ReadFile (in: hFile=0x19c, lpBuffer=0x11134000, nNumberOfBytesToRead=0x137ef, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x11134000*, lpNumberOfBytesRead=0x10c89bf0*=0x137ef, lpOverlapped=0x0) returned 1 [0076.309] GetFileType (hFile=0x19c) returned 0x1 [0076.309] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.309] WriteFile (in: hFile=0x19c, lpBuffer=0x11148000*, nNumberOfBytesToWrite=0x137ef, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x11148000*, lpNumberOfBytesWritten=0x10c89bf0*=0x137ef, lpOverlapped=0x10c89bf4) returned 1 [0076.310] GetFileType (hFile=0x19c) returned 0x1 [0076.310] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x137ef, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.310] GetFileType (hFile=0x19c) returned 0x1 [0076.310] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.310] WriteFile (in: hFile=0x19c, lpBuffer=0x110da700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110da700*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.310] GetFileType (hFile=0x19c) returned 0x1 [0076.310] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x137ef, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.310] GetFileType (hFile=0x19c) returned 0x1 [0076.310] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.310] WriteFile (in: hFile=0x19c, lpBuffer=0x110da900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110da900*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.311] GetFileType (hFile=0x19c) returned 0x1 [0076.311] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x137ef, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.311] GetFileType (hFile=0x19c) returned 0x1 [0076.311] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.311] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.311] GetFileType (hFile=0x19c) returned 0x1 [0076.311] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x137ef, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.311] CloseHandle (hObject=0x19c) returned 1 [0076.314] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\EhMSntHa4AWWw_SjCQ.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\ehmsntha4awww_sjcq.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\EhMSntHa4AWWw_SjCQ.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\ehmsntha4awww_sjcq.wav.trapget"), dwFlags=0x1) returned 1 [0076.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IO3lSyfQHV.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\io3lsyfqhv.docx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2d78 | out: lpFileInformation=0x10cd2d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b912ac0, ftCreationTime.dwHighDateTime=0x1d623c8, ftLastAccessTime.dwLowDateTime=0x1e3f7290, ftLastAccessTime.dwHighDateTime=0x1d622c3, ftLastWriteTime.dwLowDateTime=0x1e3f7290, ftLastWriteTime.dwHighDateTime=0x1d622c3, nFileSizeHigh=0x0, nFileSizeLow=0x1841d)) returned 1 [0076.314] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\IO3lSyfQHV.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\io3lsyfqhv.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.315] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.315] GetFileType (hFile=0x19c) returned 0x1 [0076.315] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.315] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f0b0 | out: pbBuffer=0x10c6f0b0) returned 1 [0076.315] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f0c0 | out: pbBuffer=0x10c6f0c0) returned 1 [0076.315] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110daa01 | out: pbBuffer=0x110daa01) returned 1 [0076.315] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110dac01 | out: pbBuffer=0x110dac01) returned 1 [0076.316] ReadFile (in: hFile=0x19c, lpBuffer=0x10efa000, nNumberOfBytesToRead=0x1841d, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10efa000*, lpNumberOfBytesRead=0x10c89bf0*=0x1841d, lpOverlapped=0x0) returned 1 [0076.318] GetFileType (hFile=0x19c) returned 0x1 [0076.318] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.318] WriteFile (in: hFile=0x19c, lpBuffer=0x10f14000*, nNumberOfBytesToWrite=0x1841d, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f14000*, lpNumberOfBytesWritten=0x10c89bf0*=0x1841d, lpOverlapped=0x10c89bf4) returned 1 [0076.319] GetFileType (hFile=0x19c) returned 0x1 [0076.319] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1841d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.319] GetFileType (hFile=0x19c) returned 0x1 [0076.319] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.319] WriteFile (in: hFile=0x19c, lpBuffer=0x110dab00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110dab00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.319] GetFileType (hFile=0x19c) returned 0x1 [0076.319] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1841d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.319] GetFileType (hFile=0x19c) returned 0x1 [0076.319] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.319] WriteFile (in: hFile=0x19c, lpBuffer=0x110dad00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110dad00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.319] GetFileType (hFile=0x19c) returned 0x1 [0076.319] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1841d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.319] GetFileType (hFile=0x19c) returned 0x1 [0076.319] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.319] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.319] GetFileType (hFile=0x19c) returned 0x1 [0076.319] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1841d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.319] CloseHandle (hObject=0x19c) returned 1 [0076.322] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\IO3lSyfQHV.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\io3lsyfqhv.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\IO3lSyfQHV.docx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\io3lsyfqhv.docx.trapget"), dwFlags=0x1) returned 1 [0076.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MuoZgG.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\muozgg.bmp"), fInfoLevelId=0x0, lpFileInformation=0x10cd2eb8 | out: lpFileInformation=0x10cd2eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfba973a0, ftCreationTime.dwHighDateTime=0x1d62ab2, ftLastAccessTime.dwLowDateTime=0x864d2780, ftLastAccessTime.dwHighDateTime=0x1d628c5, ftLastWriteTime.dwLowDateTime=0x864d2780, ftLastWriteTime.dwHighDateTime=0x1d628c5, nFileSizeHigh=0x0, nFileSizeLow=0x7a31)) returned 1 [0076.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\MuoZgG.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\muozgg.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.323] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.323] GetFileType (hFile=0x19c) returned 0x1 [0076.324] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.324] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f190 | out: pbBuffer=0x10c6f190) returned 1 [0076.324] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f1a0 | out: pbBuffer=0x10c6f1a0) returned 1 [0076.324] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110dae01 | out: pbBuffer=0x110dae01) returned 1 [0076.324] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110db001 | out: pbBuffer=0x110db001) returned 1 [0076.325] ReadFile (in: hFile=0x19c, lpBuffer=0x11170000, nNumberOfBytesToRead=0x7a31, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x11170000*, lpNumberOfBytesRead=0x10c89bf0*=0x7a31, lpOverlapped=0x0) returned 1 [0076.326] GetFileType (hFile=0x19c) returned 0x1 [0076.326] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.326] WriteFile (in: hFile=0x19c, lpBuffer=0x10f2e000*, nNumberOfBytesToWrite=0x7a31, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f2e000*, lpNumberOfBytesWritten=0x10c89bf0*=0x7a31, lpOverlapped=0x10c89bf4) returned 1 [0076.327] GetFileType (hFile=0x19c) returned 0x1 [0076.327] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7a31, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.327] GetFileType (hFile=0x19c) returned 0x1 [0076.327] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.327] WriteFile (in: hFile=0x19c, lpBuffer=0x110daf00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110daf00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.327] GetFileType (hFile=0x19c) returned 0x1 [0076.327] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7a31, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.327] GetFileType (hFile=0x19c) returned 0x1 [0076.327] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.327] WriteFile (in: hFile=0x19c, lpBuffer=0x110db100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110db100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.327] GetFileType (hFile=0x19c) returned 0x1 [0076.327] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7a31, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.327] GetFileType (hFile=0x19c) returned 0x1 [0076.327] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.328] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.328] GetFileType (hFile=0x19c) returned 0x1 [0076.328] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7a31, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.328] CloseHandle (hObject=0x19c) returned 1 [0076.329] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\MuoZgG.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\muozgg.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\MuoZgG.bmp.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\muozgg.bmp.trapget"), dwFlags=0x1) returned 1 [0076.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\NSOzAz-WrG2cPuD.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\nsozaz-wrg2cpud.pdf"), fInfoLevelId=0x0, lpFileInformation=0x10cd2ff8 | out: lpFileInformation=0x10cd2ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0822c0, ftCreationTime.dwHighDateTime=0x1d6312d, ftLastAccessTime.dwLowDateTime=0xd35b3e20, ftLastAccessTime.dwHighDateTime=0x1d628cc, ftLastWriteTime.dwLowDateTime=0xd35b3e20, ftLastWriteTime.dwHighDateTime=0x1d628cc, nFileSizeHigh=0x0, nFileSizeLow=0xdd63)) returned 1 [0076.330] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\NSOzAz-WrG2cPuD.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\nsozaz-wrg2cpud.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.330] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.330] GetFileType (hFile=0x19c) returned 0x1 [0076.330] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.330] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f280 | out: pbBuffer=0x10c6f280) returned 1 [0076.330] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f290 | out: pbBuffer=0x10c6f290) returned 1 [0076.330] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110db201 | out: pbBuffer=0x110db201) returned 1 [0076.330] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110db401 | out: pbBuffer=0x110db401) returned 1 [0076.331] ReadFile (in: hFile=0x19c, lpBuffer=0x10f3e000, nNumberOfBytesToRead=0xdd63, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f3e000*, lpNumberOfBytesRead=0x10c89bf0*=0xdd63, lpOverlapped=0x0) returned 1 [0076.332] GetFileType (hFile=0x19c) returned 0x1 [0076.332] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.332] WriteFile (in: hFile=0x19c, lpBuffer=0x10f4c000*, nNumberOfBytesToWrite=0xdd63, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f4c000*, lpNumberOfBytesWritten=0x10c89bf0*=0xdd63, lpOverlapped=0x10c89bf4) returned 1 [0076.332] GetFileType (hFile=0x19c) returned 0x1 [0076.332] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdd63, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.332] GetFileType (hFile=0x19c) returned 0x1 [0076.332] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.332] WriteFile (in: hFile=0x19c, lpBuffer=0x110db300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110db300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.332] GetFileType (hFile=0x19c) returned 0x1 [0076.332] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdd63, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.332] GetFileType (hFile=0x19c) returned 0x1 [0076.333] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.333] WriteFile (in: hFile=0x19c, lpBuffer=0x110db500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110db500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.333] GetFileType (hFile=0x19c) returned 0x1 [0076.333] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdd63, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.333] GetFileType (hFile=0x19c) returned 0x1 [0076.333] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.333] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.333] GetFileType (hFile=0x19c) returned 0x1 [0076.333] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdd63, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.333] CloseHandle (hObject=0x19c) returned 1 [0076.333] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\NSOzAz-WrG2cPuD.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\nsozaz-wrg2cpud.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\NSOzAz-WrG2cPuD.pdf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\nsozaz-wrg2cpud.pdf.trapget"), dwFlags=0x1) returned 1 [0076.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\NnxHmb8TmXdZ7qPesZ.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\nnxhmb8tmxdz7qpesz.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10cd3138 | out: lpFileInformation=0x10cd3138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb54b0, ftCreationTime.dwHighDateTime=0x1d62b2c, ftLastAccessTime.dwLowDateTime=0x9f7879a0, ftLastAccessTime.dwHighDateTime=0x1d62c10, ftLastWriteTime.dwLowDateTime=0x9f7879a0, ftLastWriteTime.dwHighDateTime=0x1d62c10, nFileSizeHigh=0x0, nFileSizeLow=0x1050d)) returned 1 [0076.339] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\NnxHmb8TmXdZ7qPesZ.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\nnxhmb8tmxdz7qpesz.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.339] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.339] GetFileType (hFile=0x19c) returned 0x1 [0076.339] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.339] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f370 | out: pbBuffer=0x10c6f370) returned 1 [0076.339] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f380 | out: pbBuffer=0x10c6f380) returned 1 [0076.339] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110db601 | out: pbBuffer=0x110db601) returned 1 [0076.340] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110db801 | out: pbBuffer=0x110db801) returned 1 [0076.340] ReadFile (in: hFile=0x19c, lpBuffer=0x10f66000, nNumberOfBytesToRead=0x1050d, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f66000*, lpNumberOfBytesRead=0x10c89bf0*=0x1050d, lpOverlapped=0x0) returned 1 [0076.341] GetFileType (hFile=0x19c) returned 0x1 [0076.341] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.341] WriteFile (in: hFile=0x19c, lpBuffer=0x10f78000*, nNumberOfBytesToWrite=0x1050d, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f78000*, lpNumberOfBytesWritten=0x10c89bf0*=0x1050d, lpOverlapped=0x10c89bf4) returned 1 [0076.342] GetFileType (hFile=0x19c) returned 0x1 [0076.342] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1050d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.342] GetFileType (hFile=0x19c) returned 0x1 [0076.342] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.342] WriteFile (in: hFile=0x19c, lpBuffer=0x110db700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110db700*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.342] GetFileType (hFile=0x19c) returned 0x1 [0076.342] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1050d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.342] GetFileType (hFile=0x19c) returned 0x1 [0076.342] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.342] WriteFile (in: hFile=0x19c, lpBuffer=0x110db900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110db900*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.342] GetFileType (hFile=0x19c) returned 0x1 [0076.342] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1050d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.342] GetFileType (hFile=0x19c) returned 0x1 [0076.342] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.342] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.342] GetFileType (hFile=0x19c) returned 0x1 [0076.342] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1050d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.342] CloseHandle (hObject=0x19c) returned 1 [0076.347] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\NnxHmb8TmXdZ7qPesZ.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\nnxhmb8tmxdz7qpesz.rtf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\NnxHmb8TmXdZ7qPesZ.rtf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\nnxhmb8tmxdz7qpesz.rtf.trapget"), dwFlags=0x1) returned 1 [0076.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\OvcAOu1HCzt.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\ovcaou1hczt.swf"), fInfoLevelId=0x0, lpFileInformation=0x10cd3278 | out: lpFileInformation=0x10cd3278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59eefc10, ftCreationTime.dwHighDateTime=0x1d6253f, ftLastAccessTime.dwLowDateTime=0x2a418870, ftLastAccessTime.dwHighDateTime=0x1d627b5, ftLastWriteTime.dwLowDateTime=0x2a418870, ftLastWriteTime.dwHighDateTime=0x1d627b5, nFileSizeHigh=0x0, nFileSizeLow=0x18557)) returned 1 [0076.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\OvcAOu1HCzt.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\ovcaou1hczt.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.359] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.359] GetFileType (hFile=0x19c) returned 0x1 [0076.359] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.359] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f460 | out: pbBuffer=0x10c6f460) returned 1 [0076.359] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f470 | out: pbBuffer=0x10c6f470) returned 1 [0076.359] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110dba01 | out: pbBuffer=0x110dba01) returned 1 [0076.360] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110dbc01 | out: pbBuffer=0x110dbc01) returned 1 [0076.360] ReadFile (in: hFile=0x19c, lpBuffer=0x10f90000, nNumberOfBytesToRead=0x18557, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f90000*, lpNumberOfBytesRead=0x10c89bf0*=0x18557, lpOverlapped=0x0) returned 1 [0076.362] GetFileType (hFile=0x19c) returned 0x1 [0076.362] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.362] WriteFile (in: hFile=0x19c, lpBuffer=0x10faa000*, nNumberOfBytesToWrite=0x18557, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10faa000*, lpNumberOfBytesWritten=0x10c89bf0*=0x18557, lpOverlapped=0x10c89bf4) returned 1 [0076.362] GetFileType (hFile=0x19c) returned 0x1 [0076.362] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x18557, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.362] GetFileType (hFile=0x19c) returned 0x1 [0076.362] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.362] WriteFile (in: hFile=0x19c, lpBuffer=0x110dbb00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110dbb00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.362] GetFileType (hFile=0x19c) returned 0x1 [0076.362] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x18557, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.362] GetFileType (hFile=0x19c) returned 0x1 [0076.363] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.363] WriteFile (in: hFile=0x19c, lpBuffer=0x110dbd00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110dbd00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.363] GetFileType (hFile=0x19c) returned 0x1 [0076.363] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x18557, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.363] GetFileType (hFile=0x19c) returned 0x1 [0076.363] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.363] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.363] GetFileType (hFile=0x19c) returned 0x1 [0076.363] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x18557, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.363] CloseHandle (hObject=0x19c) returned 1 [0076.367] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\OvcAOu1HCzt.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\ovcaou1hczt.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\OvcAOu1HCzt.swf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\ovcaou1hczt.swf.trapget"), dwFlags=0x1) returned 1 [0076.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PH-W.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\ph-w.flv"), fInfoLevelId=0x0, lpFileInformation=0x10cd33b8 | out: lpFileInformation=0x10cd33b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24cfe0, ftCreationTime.dwHighDateTime=0x1d62c68, ftLastAccessTime.dwLowDateTime=0xcd63d30, ftLastAccessTime.dwHighDateTime=0x1d6236e, ftLastWriteTime.dwLowDateTime=0xcd63d30, ftLastWriteTime.dwHighDateTime=0x1d6236e, nFileSizeHigh=0x0, nFileSizeLow=0xc41)) returned 1 [0076.373] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\PH-W.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\ph-w.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.373] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.373] GetFileType (hFile=0x19c) returned 0x1 [0076.373] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.373] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f540 | out: pbBuffer=0x10c6f540) returned 1 [0076.373] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f550 | out: pbBuffer=0x10c6f550) returned 1 [0076.373] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110dbe01 | out: pbBuffer=0x110dbe01) returned 1 [0076.374] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc8001 | out: pbBuffer=0x10fc8001) returned 1 [0076.374] ReadFile (in: hFile=0x19c, lpBuffer=0x10fd2000, nNumberOfBytesToRead=0xc41, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fd2000*, lpNumberOfBytesRead=0x10c89bf0*=0xc41, lpOverlapped=0x0) returned 1 [0076.375] GetFileType (hFile=0x19c) returned 0x1 [0076.375] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.375] WriteFile (in: hFile=0x19c, lpBuffer=0x10fd2c80*, nNumberOfBytesToWrite=0xc41, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fd2c80*, lpNumberOfBytesWritten=0x10c89bf0*=0xc41, lpOverlapped=0x10c89bf4) returned 1 [0076.375] GetFileType (hFile=0x19c) returned 0x1 [0076.375] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc41, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.375] GetFileType (hFile=0x19c) returned 0x1 [0076.375] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.375] WriteFile (in: hFile=0x19c, lpBuffer=0x110dbf00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110dbf00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.375] GetFileType (hFile=0x19c) returned 0x1 [0076.375] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc41, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.375] GetFileType (hFile=0x19c) returned 0x1 [0076.375] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.375] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc8100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc8100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.375] GetFileType (hFile=0x19c) returned 0x1 [0076.375] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc41, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.375] GetFileType (hFile=0x19c) returned 0x1 [0076.375] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.375] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.375] GetFileType (hFile=0x19c) returned 0x1 [0076.375] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc41, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.375] CloseHandle (hObject=0x19c) returned 1 [0076.380] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\PH-W.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\ph-w.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\PH-W.flv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\ph-w.flv.trapget"), dwFlags=0x1) returned 1 [0076.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Pi7NGWFT2yA.odp" (normalized: "c:\\users\\fd1hvy\\desktop\\pi7ngwft2ya.odp"), fInfoLevelId=0x0, lpFileInformation=0x10cd34f8 | out: lpFileInformation=0x10cd34f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa210d7b0, ftCreationTime.dwHighDateTime=0x1d631b6, ftLastAccessTime.dwLowDateTime=0x201463a0, ftLastAccessTime.dwHighDateTime=0x1d624c6, ftLastWriteTime.dwLowDateTime=0x201463a0, ftLastWriteTime.dwHighDateTime=0x1d624c6, nFileSizeHigh=0x0, nFileSizeLow=0x14b73)) returned 1 [0076.385] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Pi7NGWFT2yA.odp" (normalized: "c:\\users\\fd1hvy\\desktop\\pi7ngwft2ya.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.386] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.386] GetFileType (hFile=0x19c) returned 0x1 [0076.386] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.386] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f630 | out: pbBuffer=0x10c6f630) returned 1 [0076.386] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f640 | out: pbBuffer=0x10c6f640) returned 1 [0076.386] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc8201 | out: pbBuffer=0x10fc8201) returned 1 [0076.386] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc8401 | out: pbBuffer=0x10fc8401) returned 1 [0076.387] ReadFile (in: hFile=0x19c, lpBuffer=0x10fdc000, nNumberOfBytesToRead=0x14b73, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fdc000*, lpNumberOfBytesRead=0x10c89bf0*=0x14b73, lpOverlapped=0x0) returned 1 [0076.388] GetFileType (hFile=0x19c) returned 0x1 [0076.388] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.388] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfa000*, nNumberOfBytesToWrite=0x14b73, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cfa000*, lpNumberOfBytesWritten=0x10c89bf0*=0x14b73, lpOverlapped=0x10c89bf4) returned 1 [0076.389] GetFileType (hFile=0x19c) returned 0x1 [0076.389] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14b73, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.389] GetFileType (hFile=0x19c) returned 0x1 [0076.389] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.389] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc8300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc8300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.389] GetFileType (hFile=0x19c) returned 0x1 [0076.389] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14b73, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.389] GetFileType (hFile=0x19c) returned 0x1 [0076.389] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.389] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc8500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc8500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.389] GetFileType (hFile=0x19c) returned 0x1 [0076.389] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14b73, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.389] GetFileType (hFile=0x19c) returned 0x1 [0076.389] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.389] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.389] GetFileType (hFile=0x19c) returned 0x1 [0076.389] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14b73, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.389] CloseHandle (hObject=0x19c) returned 1 [0076.393] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Pi7NGWFT2yA.odp" (normalized: "c:\\users\\fd1hvy\\desktop\\pi7ngwft2ya.odp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\Pi7NGWFT2yA.odp.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\pi7ngwft2ya.odp.trapget"), dwFlags=0x1) returned 1 [0076.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\QO5H.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\qo5h.mp3"), fInfoLevelId=0x0, lpFileInformation=0x10cd3638 | out: lpFileInformation=0x10cd3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad83cdf0, ftCreationTime.dwHighDateTime=0x1d62315, ftLastAccessTime.dwLowDateTime=0x3c7f0be0, ftLastAccessTime.dwHighDateTime=0x1d62c3b, ftLastWriteTime.dwLowDateTime=0x3c7f0be0, ftLastWriteTime.dwHighDateTime=0x1d62c3b, nFileSizeHigh=0x0, nFileSizeLow=0xf541)) returned 1 [0076.399] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\QO5H.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\qo5h.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.399] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.399] GetFileType (hFile=0x19c) returned 0x1 [0076.399] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.399] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f720 | out: pbBuffer=0x10c6f720) returned 1 [0076.399] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f730 | out: pbBuffer=0x10c6f730) returned 1 [0076.399] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc8601 | out: pbBuffer=0x10fc8601) returned 1 [0076.399] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc8801 | out: pbBuffer=0x10fc8801) returned 1 [0076.400] ReadFile (in: hFile=0x19c, lpBuffer=0x10d10000, nNumberOfBytesToRead=0xf541, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d10000*, lpNumberOfBytesRead=0x10c89bf0*=0xf541, lpOverlapped=0x0) returned 1 [0076.401] GetFileType (hFile=0x19c) returned 0x1 [0076.401] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.401] WriteFile (in: hFile=0x19c, lpBuffer=0x10d20000*, nNumberOfBytesToWrite=0xf541, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d20000*, lpNumberOfBytesWritten=0x10c89bf0*=0xf541, lpOverlapped=0x10c89bf4) returned 1 [0076.401] GetFileType (hFile=0x19c) returned 0x1 [0076.401] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf541, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.402] GetFileType (hFile=0x19c) returned 0x1 [0076.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.402] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc8700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc8700*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.402] GetFileType (hFile=0x19c) returned 0x1 [0076.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf541, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.402] GetFileType (hFile=0x19c) returned 0x1 [0076.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.402] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc8900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc8900*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.402] GetFileType (hFile=0x19c) returned 0x1 [0076.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf541, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.402] GetFileType (hFile=0x19c) returned 0x1 [0076.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.402] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.402] GetFileType (hFile=0x19c) returned 0x1 [0076.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf541, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.402] CloseHandle (hObject=0x19c) returned 1 [0076.404] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\QO5H.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\qo5h.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\QO5H.mp3.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\qo5h.mp3.trapget"), dwFlags=0x1) returned 1 [0076.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\V6IiH9pC.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\v6iih9pc.avi"), fInfoLevelId=0x0, lpFileInformation=0x10cd3778 | out: lpFileInformation=0x10cd3778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bc7990, ftCreationTime.dwHighDateTime=0x1d6288d, ftLastAccessTime.dwLowDateTime=0x1dcae3b0, ftLastAccessTime.dwHighDateTime=0x1d628f6, ftLastWriteTime.dwLowDateTime=0x1dcae3b0, ftLastWriteTime.dwHighDateTime=0x1d628f6, nFileSizeHigh=0x0, nFileSizeLow=0x9052)) returned 1 [0076.408] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\V6IiH9pC.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\v6iih9pc.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.408] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.408] GetFileType (hFile=0x19c) returned 0x1 [0076.408] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.408] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f810 | out: pbBuffer=0x10c6f810) returned 1 [0076.408] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f820 | out: pbBuffer=0x10c6f820) returned 1 [0076.408] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc8a01 | out: pbBuffer=0x10fc8a01) returned 1 [0076.408] SetEvent (hEvent=0x138) returned 1 [0076.409] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0076.412] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0076.412] SetEvent (hEvent=0x138) returned 1 [0076.412] SetEvent (hEvent=0x170) returned 1 [0076.412] SetEvent (hEvent=0x158) returned 1 [0076.412] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0076.419] SetEvent (hEvent=0x168) returned 1 [0076.419] SetEvent (hEvent=0x158) returned 1 [0076.419] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc8101 | out: pbBuffer=0x10fc8101) returned 1 [0076.420] ReadFile (in: hFile=0x19c, lpBuffer=0x1107a000, nNumberOfBytesToRead=0x9052, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x1107a000*, lpNumberOfBytesRead=0x10c89bf0*=0x9052, lpOverlapped=0x0) returned 1 [0076.421] GetFileType (hFile=0x19c) returned 0x1 [0076.421] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.421] WriteFile (in: hFile=0x19c, lpBuffer=0x110cc000*, nNumberOfBytesToWrite=0x9052, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110cc000*, lpNumberOfBytesWritten=0x10c89bf0*=0x9052, lpOverlapped=0x10c89bf4) returned 1 [0076.421] GetFileType (hFile=0x19c) returned 0x1 [0076.421] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9052, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.421] GetFileType (hFile=0x19c) returned 0x1 [0076.421] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.421] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc8000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc8000*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.421] GetFileType (hFile=0x19c) returned 0x1 [0076.421] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9052, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.421] GetFileType (hFile=0x19c) returned 0x1 [0076.421] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.421] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc8200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc8200*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.422] GetFileType (hFile=0x19c) returned 0x1 [0076.422] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9052, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.422] GetFileType (hFile=0x19c) returned 0x1 [0076.422] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.422] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.422] GetFileType (hFile=0x19c) returned 0x1 [0076.422] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9052, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.422] CloseHandle (hObject=0x19c) returned 1 [0076.428] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\V6IiH9pC.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\v6iih9pc.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\V6IiH9pC.avi.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\v6iih9pc.avi.trapget"), dwFlags=0x1) returned 1 [0076.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\VD7Q taqZbUqytAng_.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\vd7q taqzbuqytang_.odt"), fInfoLevelId=0x0, lpFileInformation=0x10cd20a8 | out: lpFileInformation=0x10cd20a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a379790, ftCreationTime.dwHighDateTime=0x1d626bc, ftLastAccessTime.dwLowDateTime=0xec29efd0, ftLastAccessTime.dwHighDateTime=0x1d63242, ftLastWriteTime.dwLowDateTime=0xec29efd0, ftLastWriteTime.dwHighDateTime=0x1d63242, nFileSizeHigh=0x0, nFileSizeLow=0x1cdf)) returned 1 [0076.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\VD7Q taqZbUqytAng_.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\vd7q taqzbuqytang_.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.434] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.434] GetFileType (hFile=0x19c) returned 0x1 [0076.434] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.434] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e0a0 | out: pbBuffer=0x10c6e0a0) returned 1 [0076.434] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e0b0 | out: pbBuffer=0x10c6e0b0) returned 1 [0076.434] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc8301 | out: pbBuffer=0x10fc8301) returned 1 [0076.434] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc8501 | out: pbBuffer=0x10fc8501) returned 1 [0076.435] ReadFile (in: hFile=0x19c, lpBuffer=0x10cf6000, nNumberOfBytesToRead=0x1cdf, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10cf6000*, lpNumberOfBytesRead=0x10c89bf0*=0x1cdf, lpOverlapped=0x0) returned 1 [0076.435] GetFileType (hFile=0x19c) returned 0x1 [0076.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.435] WriteFile (in: hFile=0x19c, lpBuffer=0x11092000*, nNumberOfBytesToWrite=0x1cdf, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x11092000*, lpNumberOfBytesWritten=0x10c89bf0*=0x1cdf, lpOverlapped=0x10c89bf4) returned 1 [0076.435] GetFileType (hFile=0x19c) returned 0x1 [0076.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1cdf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.436] GetFileType (hFile=0x19c) returned 0x1 [0076.436] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.436] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc8400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc8400*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.436] GetFileType (hFile=0x19c) returned 0x1 [0076.436] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1cdf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.436] GetFileType (hFile=0x19c) returned 0x1 [0076.436] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.436] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc8600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc8600*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.436] GetFileType (hFile=0x19c) returned 0x1 [0076.436] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1cdf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.436] GetFileType (hFile=0x19c) returned 0x1 [0076.436] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.436] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.436] GetFileType (hFile=0x19c) returned 0x1 [0076.436] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1cdf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.436] CloseHandle (hObject=0x19c) returned 1 [0076.442] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\VD7Q taqZbUqytAng_.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\vd7q taqzbuqytang_.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\VD7Q taqZbUqytAng_.odt.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\vd7q taqzbuqytang_.odt.trapget"), dwFlags=0x1) returned 1 [0076.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\XDQ8u7R88MAr0-4qKN.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\xdq8u7r88mar0-4qkn.mp4"), fInfoLevelId=0x0, lpFileInformation=0x10cd21e8 | out: lpFileInformation=0x10cd21e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812606f0, ftCreationTime.dwHighDateTime=0x1d62e51, ftLastAccessTime.dwLowDateTime=0x539a0ba0, ftLastAccessTime.dwHighDateTime=0x1d632a7, ftLastWriteTime.dwLowDateTime=0x539a0ba0, ftLastWriteTime.dwHighDateTime=0x1d632a7, nFileSizeHigh=0x0, nFileSizeLow=0xdc91)) returned 1 [0076.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\XDQ8u7R88MAr0-4qKN.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\xdq8u7r88mar0-4qkn.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.445] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.445] GetFileType (hFile=0x19c) returned 0x1 [0076.445] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.445] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e180 | out: pbBuffer=0x10c6e180) returned 1 [0076.445] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e190 | out: pbBuffer=0x10c6e190) returned 1 [0076.445] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc8701 | out: pbBuffer=0x10fc8701) returned 1 [0076.446] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc8901 | out: pbBuffer=0x10fc8901) returned 1 [0076.446] ReadFile (in: hFile=0x19c, lpBuffer=0x10fca000, nNumberOfBytesToRead=0xdc91, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fca000*, lpNumberOfBytesRead=0x10c89bf0*=0xdc91, lpOverlapped=0x0) returned 1 [0076.448] GetFileType (hFile=0x19c) returned 0x1 [0076.448] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.448] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0xdc91, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89bf0*=0xdc91, lpOverlapped=0x10c89bf4) returned 1 [0076.448] GetFileType (hFile=0x19c) returned 0x1 [0076.448] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdc91, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.448] GetFileType (hFile=0x19c) returned 0x1 [0076.448] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.448] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc8800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc8800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.448] GetFileType (hFile=0x19c) returned 0x1 [0076.448] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdc91, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.448] GetFileType (hFile=0x19c) returned 0x1 [0076.448] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.448] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc8b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc8b00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.448] GetFileType (hFile=0x19c) returned 0x1 [0076.448] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdc91, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.448] GetFileType (hFile=0x19c) returned 0x1 [0076.449] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.449] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.449] GetFileType (hFile=0x19c) returned 0x1 [0076.449] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdc91, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.449] CloseHandle (hObject=0x19c) returned 1 [0076.453] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\XDQ8u7R88MAr0-4qKN.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\xdq8u7r88mar0-4qkn.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\XDQ8u7R88MAr0-4qKN.mp4.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\xdq8u7r88mar0-4qkn.mp4.trapget"), dwFlags=0x1) returned 1 [0076.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ceYbwDK-Ygvspux-.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\ceybwdk-ygvspux-.bmp"), fInfoLevelId=0x0, lpFileInformation=0x10cd2328 | out: lpFileInformation=0x10cd2328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932d41b0, ftCreationTime.dwHighDateTime=0x1d62e01, ftLastAccessTime.dwLowDateTime=0xfa95c950, ftLastAccessTime.dwHighDateTime=0x1d6310b, ftLastWriteTime.dwLowDateTime=0xfa95c950, ftLastWriteTime.dwHighDateTime=0x1d6310b, nFileSizeHigh=0x0, nFileSizeLow=0xc7b9)) returned 1 [0076.460] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ceYbwDK-Ygvspux-.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\ceybwdk-ygvspux-.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.460] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.460] GetFileType (hFile=0x19c) returned 0x1 [0076.460] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.460] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e3e0 | out: pbBuffer=0x10c6e3e0) returned 1 [0076.460] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e3f0 | out: pbBuffer=0x10c6e3f0) returned 1 [0076.460] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc8c01 | out: pbBuffer=0x10fc8c01) returned 1 [0076.461] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc8e01 | out: pbBuffer=0x10fc8e01) returned 1 [0076.461] ReadFile (in: hFile=0x19c, lpBuffer=0x10fda000, nNumberOfBytesToRead=0xc7b9, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fda000*, lpNumberOfBytesRead=0x10c89bf0*=0xc7b9, lpOverlapped=0x0) returned 1 [0076.462] GetFileType (hFile=0x19c) returned 0x1 [0076.462] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.462] WriteFile (in: hFile=0x19c, lpBuffer=0x10f38000*, nNumberOfBytesToWrite=0xc7b9, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f38000*, lpNumberOfBytesWritten=0x10c89bf0*=0xc7b9, lpOverlapped=0x10c89bf4) returned 1 [0076.462] GetFileType (hFile=0x19c) returned 0x1 [0076.462] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc7b9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.463] GetFileType (hFile=0x19c) returned 0x1 [0076.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.463] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc8d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc8d00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.463] GetFileType (hFile=0x19c) returned 0x1 [0076.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc7b9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.463] GetFileType (hFile=0x19c) returned 0x1 [0076.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.463] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc8f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc8f00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.463] GetFileType (hFile=0x19c) returned 0x1 [0076.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc7b9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.463] GetFileType (hFile=0x19c) returned 0x1 [0076.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.463] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.463] GetFileType (hFile=0x19c) returned 0x1 [0076.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc7b9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.463] CloseHandle (hObject=0x19c) returned 1 [0076.496] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\ceYbwDK-Ygvspux-.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\ceybwdk-ygvspux-.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\ceYbwDK-Ygvspux-.bmp.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\ceybwdk-ygvspux-.bmp.trapget"), dwFlags=0x1) returned 1 [0076.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\d-aD5KS9Ip1RsRBJ.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\d-ad5ks9ip1rsrbj.bmp"), fInfoLevelId=0x0, lpFileInformation=0x10cd2468 | out: lpFileInformation=0x10cd2468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3054f0, ftCreationTime.dwHighDateTime=0x1d62f39, ftLastAccessTime.dwLowDateTime=0x38acf9f0, ftLastAccessTime.dwHighDateTime=0x1d63249, ftLastWriteTime.dwLowDateTime=0x38acf9f0, ftLastWriteTime.dwHighDateTime=0x1d63249, nFileSizeHigh=0x0, nFileSizeLow=0x147bf)) returned 1 [0076.499] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\d-aD5KS9Ip1RsRBJ.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\d-ad5ks9ip1rsrbj.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.500] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.500] GetFileType (hFile=0x19c) returned 0x1 [0076.500] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.500] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e4d0 | out: pbBuffer=0x10c6e4d0) returned 1 [0076.500] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e4e0 | out: pbBuffer=0x10c6e4e0) returned 1 [0076.500] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc9001 | out: pbBuffer=0x10fc9001) returned 1 [0076.500] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc9201 | out: pbBuffer=0x10fc9201) returned 1 [0076.501] ReadFile (in: hFile=0x19c, lpBuffer=0x10f46000, nNumberOfBytesToRead=0x147bf, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f46000*, lpNumberOfBytesRead=0x10c89bf0*=0x147bf, lpOverlapped=0x0) returned 1 [0076.502] GetFileType (hFile=0x19c) returned 0x1 [0076.502] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.502] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfa000*, nNumberOfBytesToWrite=0x147bf, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cfa000*, lpNumberOfBytesWritten=0x10c89bf0*=0x147bf, lpOverlapped=0x10c89bf4) returned 1 [0076.503] GetFileType (hFile=0x19c) returned 0x1 [0076.503] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x147bf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.503] GetFileType (hFile=0x19c) returned 0x1 [0076.503] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.503] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc9100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc9100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.503] GetFileType (hFile=0x19c) returned 0x1 [0076.503] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x147bf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.503] GetFileType (hFile=0x19c) returned 0x1 [0076.503] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.503] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc9300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc9300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.503] GetFileType (hFile=0x19c) returned 0x1 [0076.503] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x147bf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.503] GetFileType (hFile=0x19c) returned 0x1 [0076.503] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.503] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.503] GetFileType (hFile=0x19c) returned 0x1 [0076.503] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x147bf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.503] CloseHandle (hObject=0x19c) returned 1 [0076.509] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\d-aD5KS9Ip1RsRBJ.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\d-ad5ks9ip1rsrbj.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\d-aD5KS9Ip1RsRBJ.bmp.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\d-ad5ks9ip1rsrbj.bmp.trapget"), dwFlags=0x1) returned 1 [0076.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd25a8 | out: lpFileInformation=0x10cd25a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0076.514] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\desktop\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.514] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.514] GetFileType (hFile=0x19c) returned 0x1 [0076.514] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.514] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e6f0 | out: pbBuffer=0x10c6e6f0) returned 1 [0076.514] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e700 | out: pbBuffer=0x10c6e700) returned 1 [0076.514] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc9401 | out: pbBuffer=0x10fc9401) returned 1 [0076.515] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc9601 | out: pbBuffer=0x10fc9601) returned 1 [0076.515] ReadFile (in: hFile=0x19c, lpBuffer=0x10ceaa20, nNumberOfBytesToRead=0x11a, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10ceaa20*, lpNumberOfBytesRead=0x10c89bf0*=0x11a, lpOverlapped=0x0) returned 1 [0076.515] GetFileType (hFile=0x19c) returned 0x1 [0076.515] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.515] WriteFile (in: hFile=0x19c, lpBuffer=0x10ceab40*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ceab40*, lpNumberOfBytesWritten=0x10c89bf0*=0x11a, lpOverlapped=0x10c89bf4) returned 1 [0076.516] GetFileType (hFile=0x19c) returned 0x1 [0076.516] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.516] GetFileType (hFile=0x19c) returned 0x1 [0076.516] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.516] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc9500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc9500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.516] GetFileType (hFile=0x19c) returned 0x1 [0076.516] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.516] GetFileType (hFile=0x19c) returned 0x1 [0076.516] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.516] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc9700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc9700*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.522] GetFileType (hFile=0x19c) returned 0x1 [0076.522] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.522] GetFileType (hFile=0x19c) returned 0x1 [0076.522] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.522] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.522] GetFileType (hFile=0x19c) returned 0x1 [0076.522] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.522] CloseHandle (hObject=0x19c) returned 1 [0076.524] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\desktop\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0076.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dscYzmVv.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\dscyzmvv.gif"), fInfoLevelId=0x0, lpFileInformation=0x10cd26e8 | out: lpFileInformation=0x10cd26e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66d34660, ftCreationTime.dwHighDateTime=0x1d62e28, ftLastAccessTime.dwLowDateTime=0x5ba70190, ftLastAccessTime.dwHighDateTime=0x1d62519, ftLastWriteTime.dwLowDateTime=0x5ba70190, ftLastWriteTime.dwHighDateTime=0x1d62519, nFileSizeHigh=0x0, nFileSizeLow=0xb6b5)) returned 1 [0076.532] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\dscYzmVv.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\dscyzmvv.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.532] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.532] GetFileType (hFile=0x19c) returned 0x1 [0076.532] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.532] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e7d0 | out: pbBuffer=0x10c6e7d0) returned 1 [0076.532] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e7e0 | out: pbBuffer=0x10c6e7e0) returned 1 [0076.532] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc9801 | out: pbBuffer=0x10fc9801) returned 1 [0076.532] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc9a01 | out: pbBuffer=0x10fc9a01) returned 1 [0076.533] ReadFile (in: hFile=0x19c, lpBuffer=0x110ba000, nNumberOfBytesToRead=0xb6b5, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x110ba000*, lpNumberOfBytesRead=0x10c89bf0*=0xb6b5, lpOverlapped=0x0) returned 1 [0076.534] GetFileType (hFile=0x19c) returned 0x1 [0076.534] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.534] WriteFile (in: hFile=0x19c, lpBuffer=0x10d10000*, nNumberOfBytesToWrite=0xb6b5, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d10000*, lpNumberOfBytesWritten=0x10c89bf0*=0xb6b5, lpOverlapped=0x10c89bf4) returned 1 [0076.534] GetFileType (hFile=0x19c) returned 0x1 [0076.534] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb6b5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.534] GetFileType (hFile=0x19c) returned 0x1 [0076.534] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.534] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc9900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc9900*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.534] GetFileType (hFile=0x19c) returned 0x1 [0076.534] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb6b5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.535] GetFileType (hFile=0x19c) returned 0x1 [0076.535] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.535] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc9b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc9b00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.535] GetFileType (hFile=0x19c) returned 0x1 [0076.535] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb6b5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.535] GetFileType (hFile=0x19c) returned 0x1 [0076.535] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.535] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.535] GetFileType (hFile=0x19c) returned 0x1 [0076.535] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb6b5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.535] CloseHandle (hObject=0x19c) returned 1 [0076.542] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\dscYzmVv.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\dscyzmvv.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\dscYzmVv.gif.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\dscyzmvv.gif.trapget"), dwFlags=0x1) returned 1 [0076.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ehVKb5O.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\ehvkb5o.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2828 | out: lpFileInformation=0x10cd2828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b5dc240, ftCreationTime.dwHighDateTime=0x1d62e01, ftLastAccessTime.dwLowDateTime=0x358da480, ftLastAccessTime.dwHighDateTime=0x1d62a25, ftLastWriteTime.dwLowDateTime=0x358da480, ftLastWriteTime.dwHighDateTime=0x1d62a25, nFileSizeHigh=0x0, nFileSizeLow=0x13e3b)) returned 1 [0076.550] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ehVKb5O.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\ehvkb5o.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.550] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.550] GetFileType (hFile=0x19c) returned 0x1 [0076.550] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.550] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e8f0 | out: pbBuffer=0x10c6e8f0) returned 1 [0076.551] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e900 | out: pbBuffer=0x10c6e900) returned 1 [0076.551] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc9c01 | out: pbBuffer=0x10fc9c01) returned 1 [0076.551] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fc9e01 | out: pbBuffer=0x10fc9e01) returned 1 [0076.552] ReadFile (in: hFile=0x19c, lpBuffer=0x10d1c000, nNumberOfBytesToRead=0x13e3b, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d1c000*, lpNumberOfBytesRead=0x10c89bf0*=0x13e3b, lpOverlapped=0x0) returned 1 [0076.554] GetFileType (hFile=0x19c) returned 0x1 [0076.555] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.555] WriteFile (in: hFile=0x19c, lpBuffer=0x10f5e000*, nNumberOfBytesToWrite=0x13e3b, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f5e000*, lpNumberOfBytesWritten=0x10c89bf0*=0x13e3b, lpOverlapped=0x10c89bf4) returned 1 [0076.555] GetFileType (hFile=0x19c) returned 0x1 [0076.555] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13e3b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.555] GetFileType (hFile=0x19c) returned 0x1 [0076.555] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.555] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc9d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc9d00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.555] GetFileType (hFile=0x19c) returned 0x1 [0076.555] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13e3b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.555] GetFileType (hFile=0x19c) returned 0x1 [0076.556] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.556] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc9f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc9f00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.556] GetFileType (hFile=0x19c) returned 0x1 [0076.556] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13e3b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.556] GetFileType (hFile=0x19c) returned 0x1 [0076.556] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.556] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.556] GetFileType (hFile=0x19c) returned 0x1 [0076.556] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13e3b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.556] CloseHandle (hObject=0x19c) returned 1 [0076.566] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\ehVKb5O.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\ehvkb5o.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\ehVKb5O.xlsx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\ehvkb5o.xlsx.trapget"), dwFlags=0x1) returned 1 [0076.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\hIxN4R8t.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\hixn4r8t.swf"), fInfoLevelId=0x0, lpFileInformation=0x10cd2968 | out: lpFileInformation=0x10cd2968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf47760, ftCreationTime.dwHighDateTime=0x1d62714, ftLastAccessTime.dwLowDateTime=0x8942e550, ftLastAccessTime.dwHighDateTime=0x1d625fb, ftLastWriteTime.dwLowDateTime=0x8942e550, ftLastWriteTime.dwHighDateTime=0x1d625fb, nFileSizeHigh=0x0, nFileSizeLow=0x84b)) returned 1 [0076.572] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\hIxN4R8t.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\hixn4r8t.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.572] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.572] GetFileType (hFile=0x19c) returned 0x1 [0076.572] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.572] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e9e0 | out: pbBuffer=0x10c6e9e0) returned 1 [0076.572] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e9f0 | out: pbBuffer=0x10c6e9f0) returned 1 [0076.572] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f72001 | out: pbBuffer=0x10f72001) returned 1 [0076.573] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f72201 | out: pbBuffer=0x10f72201) returned 1 [0076.573] ReadFile (in: hFile=0x19c, lpBuffer=0x10f7c000, nNumberOfBytesToRead=0x84b, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f7c000*, lpNumberOfBytesRead=0x10c89bf0*=0x84b, lpOverlapped=0x0) returned 1 [0076.573] GetFileType (hFile=0x19c) returned 0x1 [0076.573] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.573] WriteFile (in: hFile=0x19c, lpBuffer=0x10f7c900*, nNumberOfBytesToWrite=0x84b, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f7c900*, lpNumberOfBytesWritten=0x10c89bf0*=0x84b, lpOverlapped=0x10c89bf4) returned 1 [0076.574] GetFileType (hFile=0x19c) returned 0x1 [0076.574] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x84b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.574] GetFileType (hFile=0x19c) returned 0x1 [0076.574] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.574] WriteFile (in: hFile=0x19c, lpBuffer=0x10f72100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f72100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.574] GetFileType (hFile=0x19c) returned 0x1 [0076.574] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x84b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.574] GetFileType (hFile=0x19c) returned 0x1 [0076.574] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.574] WriteFile (in: hFile=0x19c, lpBuffer=0x10f72300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f72300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.574] GetFileType (hFile=0x19c) returned 0x1 [0076.574] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x84b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.574] GetFileType (hFile=0x19c) returned 0x1 [0076.574] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.574] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.574] GetFileType (hFile=0x19c) returned 0x1 [0076.574] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x84b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.574] CloseHandle (hObject=0x19c) returned 1 [0076.580] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\hIxN4R8t.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\hixn4r8t.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\hIxN4R8t.swf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\hixn4r8t.swf.trapget"), dwFlags=0x1) returned 1 [0076.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\look (uploaded by Matt Browning (via weblink) Sep 22 2020 11-03-47 UTC).exe" (normalized: "c:\\users\\fd1hvy\\desktop\\look (uploaded by matt browning (via weblink) sep 22 2020 11-03-47 utc).exe"), fInfoLevelId=0x0, lpFileInformation=0x10cd2aa8 | out: lpFileInformation=0x10cd2aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda7d6500, ftCreationTime.dwHighDateTime=0x1d69115, ftLastAccessTime.dwLowDateTime=0xda7d6500, ftLastAccessTime.dwHighDateTime=0x1d69115, ftLastWriteTime.dwLowDateTime=0x9472d200, ftLastWriteTime.dwHighDateTime=0x1d69112, nFileSizeHigh=0x0, nFileSizeLow=0x290550)) returned 1 [0076.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\p2qFZgdmlfQX.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\p2qfzgdmlfqx.jpg"), fInfoLevelId=0x0, lpFileInformation=0x10cd2af8 | out: lpFileInformation=0x10cd2af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6bdf2d0, ftCreationTime.dwHighDateTime=0x1d63193, ftLastAccessTime.dwLowDateTime=0x13f37a30, ftLastAccessTime.dwHighDateTime=0x1d63032, ftLastWriteTime.dwLowDateTime=0x13f37a30, ftLastWriteTime.dwHighDateTime=0x1d63032, nFileSizeHigh=0x0, nFileSizeLow=0xf8ed)) returned 1 [0076.585] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\p2qFZgdmlfQX.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\p2qfzgdmlfqx.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.585] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.585] GetFileType (hFile=0x19c) returned 0x1 [0076.585] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.585] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ead0 | out: pbBuffer=0x10c6ead0) returned 1 [0076.585] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eae0 | out: pbBuffer=0x10c6eae0) returned 1 [0076.585] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f72401 | out: pbBuffer=0x10f72401) returned 1 [0076.586] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f72601 | out: pbBuffer=0x10f72601) returned 1 [0076.586] ReadFile (in: hFile=0x19c, lpBuffer=0x10f90000, nNumberOfBytesToRead=0xf8ed, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f90000*, lpNumberOfBytesRead=0x10c89bf0*=0xf8ed, lpOverlapped=0x0) returned 1 [0076.587] GetFileType (hFile=0x19c) returned 0x1 [0076.587] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.588] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa0000*, nNumberOfBytesToWrite=0xf8ed, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fa0000*, lpNumberOfBytesWritten=0x10c89bf0*=0xf8ed, lpOverlapped=0x10c89bf4) returned 1 [0076.588] GetFileType (hFile=0x19c) returned 0x1 [0076.588] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf8ed, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.588] GetFileType (hFile=0x19c) returned 0x1 [0076.588] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.588] WriteFile (in: hFile=0x19c, lpBuffer=0x10f72500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f72500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.588] GetFileType (hFile=0x19c) returned 0x1 [0076.588] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf8ed, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.588] GetFileType (hFile=0x19c) returned 0x1 [0076.588] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.588] WriteFile (in: hFile=0x19c, lpBuffer=0x10f72700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f72700*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.588] GetFileType (hFile=0x19c) returned 0x1 [0076.588] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf8ed, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.588] GetFileType (hFile=0x19c) returned 0x1 [0076.588] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.588] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.588] GetFileType (hFile=0x19c) returned 0x1 [0076.588] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf8ed, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.588] CloseHandle (hObject=0x19c) returned 1 [0076.595] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\p2qFZgdmlfQX.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\p2qfzgdmlfqx.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\p2qFZgdmlfQX.jpg.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\p2qfzgdmlfqx.jpg.trapget"), dwFlags=0x1) returned 1 [0076.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\p7Hkou.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\p7hkou.avi"), fInfoLevelId=0x0, lpFileInformation=0x10cd2c38 | out: lpFileInformation=0x10cd2c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x425e5d10, ftCreationTime.dwHighDateTime=0x1d6306c, ftLastAccessTime.dwLowDateTime=0xd99d1cb0, ftLastAccessTime.dwHighDateTime=0x1d62fa5, ftLastWriteTime.dwLowDateTime=0xd99d1cb0, ftLastWriteTime.dwHighDateTime=0x1d62fa5, nFileSizeHigh=0x0, nFileSizeLow=0x14707)) returned 1 [0076.597] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\p7Hkou.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\p7hkou.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.597] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.597] GetFileType (hFile=0x19c) returned 0x1 [0076.598] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.598] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ebb0 | out: pbBuffer=0x10c6ebb0) returned 1 [0076.598] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ebc0 | out: pbBuffer=0x10c6ebc0) returned 1 [0076.598] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f72801 | out: pbBuffer=0x10f72801) returned 1 [0076.598] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f72a01 | out: pbBuffer=0x10f72a01) returned 1 [0076.598] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x14707, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89bf0*=0x14707, lpOverlapped=0x0) returned 1 [0076.600] GetFileType (hFile=0x19c) returned 0x1 [0076.600] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.600] WriteFile (in: hFile=0x19c, lpBuffer=0x11014000*, nNumberOfBytesToWrite=0x14707, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x11014000*, lpNumberOfBytesWritten=0x10c89bf0*=0x14707, lpOverlapped=0x10c89bf4) returned 1 [0076.600] GetFileType (hFile=0x19c) returned 0x1 [0076.600] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14707, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.600] GetFileType (hFile=0x19c) returned 0x1 [0076.600] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.600] WriteFile (in: hFile=0x19c, lpBuffer=0x10f72900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f72900*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.601] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14707, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.601] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.601] WriteFile (in: hFile=0x19c, lpBuffer=0x10f72b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f72b00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.601] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14707, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.601] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.601] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.601] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14707, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.601] CloseHandle (hObject=0x19c) returned 1 [0076.603] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\p7Hkou.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\p7hkou.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\p7Hkou.avi.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\p7hkou.avi.trapget"), dwFlags=0x1) returned 1 [0076.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pEkcT3lc.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\pekct3lc.rtf"), fInfoLevelId=0x0, lpFileInformation=0x10cd2d78 | out: lpFileInformation=0x10cd2d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe682ff50, ftCreationTime.dwHighDateTime=0x1d625a3, ftLastAccessTime.dwLowDateTime=0xef13e2f0, ftLastAccessTime.dwHighDateTime=0x1d62e69, ftLastWriteTime.dwLowDateTime=0xef13e2f0, ftLastWriteTime.dwHighDateTime=0x1d62e69, nFileSizeHigh=0x0, nFileSizeLow=0x188be)) returned 1 [0076.608] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\pEkcT3lc.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\pekct3lc.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.608] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.609] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eca0 | out: pbBuffer=0x10c6eca0) returned 1 [0076.609] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ecb0 | out: pbBuffer=0x10c6ecb0) returned 1 [0076.609] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f72c01 | out: pbBuffer=0x10f72c01) returned 1 [0076.609] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f72e01 | out: pbBuffer=0x10f72e01) returned 1 [0076.610] ReadFile (in: hFile=0x19c, lpBuffer=0x1102a000, nNumberOfBytesToRead=0x188be, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x1102a000*, lpNumberOfBytesRead=0x10c89bf0*=0x188be, lpOverlapped=0x0) returned 1 [0076.612] GetFileType (hFile=0x19c) returned 0x1 [0076.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.612] WriteFile (in: hFile=0x19c, lpBuffer=0x11044000*, nNumberOfBytesToWrite=0x188be, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x11044000*, lpNumberOfBytesWritten=0x10c89bf0*=0x188be, lpOverlapped=0x10c89bf4) returned 1 [0076.612] GetFileType (hFile=0x19c) returned 0x1 [0076.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x188be, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.612] GetFileType (hFile=0x19c) returned 0x1 [0076.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.612] WriteFile (in: hFile=0x19c, lpBuffer=0x10f72d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f72d00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.612] GetFileType (hFile=0x19c) returned 0x1 [0076.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x188be, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.612] GetFileType (hFile=0x19c) returned 0x1 [0076.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.612] WriteFile (in: hFile=0x19c, lpBuffer=0x10f72f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f72f00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.613] GetFileType (hFile=0x19c) returned 0x1 [0076.613] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x188be, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.613] GetFileType (hFile=0x19c) returned 0x1 [0076.613] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.613] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.613] GetFileType (hFile=0x19c) returned 0x1 [0076.613] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x188be, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.613] CloseHandle (hObject=0x19c) returned 1 [0076.617] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\pEkcT3lc.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\pekct3lc.rtf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\pEkcT3lc.rtf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\pekct3lc.rtf.trapget"), dwFlags=0x1) returned 1 [0076.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\plKqlnWGYZhS.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\plkqlnwgyzhs.mp4"), fInfoLevelId=0x0, lpFileInformation=0x10cd2eb8 | out: lpFileInformation=0x10cd2eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ef811c0, ftCreationTime.dwHighDateTime=0x1d625eb, ftLastAccessTime.dwLowDateTime=0x45fed0c0, ftLastAccessTime.dwHighDateTime=0x1d62ec9, ftLastWriteTime.dwLowDateTime=0x45fed0c0, ftLastWriteTime.dwHighDateTime=0x1d62ec9, nFileSizeHigh=0x0, nFileSizeLow=0xeb2b)) returned 1 [0076.627] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\plKqlnWGYZhS.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\plkqlnwgyzhs.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.627] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.627] GetFileType (hFile=0x19c) returned 0x1 [0076.627] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.627] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed90 | out: pbBuffer=0x10c6ed90) returned 1 [0076.627] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eda0 | out: pbBuffer=0x10c6eda0) returned 1 [0076.627] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f73001 | out: pbBuffer=0x10f73001) returned 1 [0076.627] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f73201 | out: pbBuffer=0x10f73201) returned 1 [0076.628] ReadFile (in: hFile=0x19c, lpBuffer=0x1105e000, nNumberOfBytesToRead=0xeb2b, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x1105e000*, lpNumberOfBytesRead=0x10c89bf0*=0xeb2b, lpOverlapped=0x0) returned 1 [0076.629] GetFileType (hFile=0x19c) returned 0x1 [0076.629] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.629] WriteFile (in: hFile=0x19c, lpBuffer=0x110d6000*, nNumberOfBytesToWrite=0xeb2b, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110d6000*, lpNumberOfBytesWritten=0x10c89bf0*=0xeb2b, lpOverlapped=0x10c89bf4) returned 1 [0076.630] GetFileType (hFile=0x19c) returned 0x1 [0076.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeb2b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.630] GetFileType (hFile=0x19c) returned 0x1 [0076.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.630] WriteFile (in: hFile=0x19c, lpBuffer=0x10f73100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f73100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.630] GetFileType (hFile=0x19c) returned 0x1 [0076.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeb2b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.630] GetFileType (hFile=0x19c) returned 0x1 [0076.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.630] WriteFile (in: hFile=0x19c, lpBuffer=0x10f73300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f73300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.630] GetFileType (hFile=0x19c) returned 0x1 [0076.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeb2b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.630] GetFileType (hFile=0x19c) returned 0x1 [0076.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.630] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.630] GetFileType (hFile=0x19c) returned 0x1 [0076.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeb2b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.630] CloseHandle (hObject=0x19c) returned 1 [0076.636] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\plKqlnWGYZhS.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\plkqlnwgyzhs.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\plKqlnWGYZhS.mp4.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\plkqlnwgyzhs.mp4.trapget"), dwFlags=0x1) returned 1 [0076.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\q0uLuwp2Go1Kuzvc78.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\q0uluwp2go1kuzvc78.xls"), fInfoLevelId=0x0, lpFileInformation=0x10cd2ff8 | out: lpFileInformation=0x10cd2ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe216dc80, ftCreationTime.dwHighDateTime=0x1d62cff, ftLastAccessTime.dwLowDateTime=0xd1dd2460, ftLastAccessTime.dwHighDateTime=0x1d62e84, ftLastWriteTime.dwLowDateTime=0xd1dd2460, ftLastWriteTime.dwHighDateTime=0x1d62e84, nFileSizeHigh=0x0, nFileSizeLow=0x17bf6)) returned 1 [0076.638] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\q0uLuwp2Go1Kuzvc78.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\q0uluwp2go1kuzvc78.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.638] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.638] GetFileType (hFile=0x19c) returned 0x1 [0076.638] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.638] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee80 | out: pbBuffer=0x10c6ee80) returned 1 [0076.638] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee90 | out: pbBuffer=0x10c6ee90) returned 1 [0076.638] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f73401 | out: pbBuffer=0x10f73401) returned 1 [0076.639] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f73601 | out: pbBuffer=0x10f73601) returned 1 [0076.639] ReadFile (in: hFile=0x19c, lpBuffer=0x110ea000, nNumberOfBytesToRead=0x17bf6, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x110ea000*, lpNumberOfBytesRead=0x10c89bf0*=0x17bf6, lpOverlapped=0x0) returned 1 [0076.641] GetFileType (hFile=0x19c) returned 0x1 [0076.641] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.641] WriteFile (in: hFile=0x19c, lpBuffer=0x11102000*, nNumberOfBytesToWrite=0x17bf6, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x11102000*, lpNumberOfBytesWritten=0x10c89bf0*=0x17bf6, lpOverlapped=0x10c89bf4) returned 1 [0076.641] GetFileType (hFile=0x19c) returned 0x1 [0076.641] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17bf6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.641] GetFileType (hFile=0x19c) returned 0x1 [0076.641] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.641] WriteFile (in: hFile=0x19c, lpBuffer=0x10f73500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f73500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.642] GetFileType (hFile=0x19c) returned 0x1 [0076.642] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17bf6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.642] GetFileType (hFile=0x19c) returned 0x1 [0076.642] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.642] WriteFile (in: hFile=0x19c, lpBuffer=0x10f73700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f73700*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.642] GetFileType (hFile=0x19c) returned 0x1 [0076.642] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17bf6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.642] GetFileType (hFile=0x19c) returned 0x1 [0076.642] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.642] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.642] GetFileType (hFile=0x19c) returned 0x1 [0076.642] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17bf6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.642] CloseHandle (hObject=0x19c) returned 1 [0076.648] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\q0uLuwp2Go1Kuzvc78.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\q0uluwp2go1kuzvc78.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\q0uLuwp2Go1Kuzvc78.xls.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\q0uluwp2go1kuzvc78.xls.trapget"), dwFlags=0x1) returned 1 [0076.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9"), fInfoLevelId=0x0, lpFileInformation=0x10cd3138 | out: lpFileInformation=0x10cd3138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f55300, ftCreationTime.dwHighDateTime=0x1d629f9, ftLastAccessTime.dwLowDateTime=0x95e14780, ftLastAccessTime.dwHighDateTime=0x1d62424, ftLastWriteTime.dwLowDateTime=0x95e14780, ftLastWriteTime.dwHighDateTime=0x1d62424, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0076.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.651] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f55300, ftCreationTime.dwHighDateTime=0x1d629f9, ftLastAccessTime.dwLowDateTime=0x95e14780, ftLastAccessTime.dwHighDateTime=0x1d62424, ftLastWriteTime.dwLowDateTime=0x95e14780, ftLastWriteTime.dwHighDateTime=0x1d62424, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f02b8 [0076.652] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f55300, ftCreationTime.dwHighDateTime=0x1d629f9, ftLastAccessTime.dwLowDateTime=0x95e14780, ftLastAccessTime.dwHighDateTime=0x1d62424, ftLastWriteTime.dwLowDateTime=0x95e14780, ftLastWriteTime.dwHighDateTime=0x1d62424, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.652] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa03f2840, ftCreationTime.dwHighDateTime=0x1d6266e, ftLastAccessTime.dwLowDateTime=0x56095b10, ftLastAccessTime.dwHighDateTime=0x1d62ecf, ftLastWriteTime.dwLowDateTime=0x56095b10, ftLastWriteTime.dwHighDateTime=0x1d62ecf, nFileSizeHigh=0x0, nFileSizeLow=0x795a, dwReserved0=0x0, dwReserved1=0x0, cFileName="1_rUP4yYJk.swf", cAlternateFileName="1_RUP4~1.SWF")) returned 1 [0076.652] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2acf3f80, ftCreationTime.dwHighDateTime=0x1d631e7, ftLastAccessTime.dwLowDateTime=0xb3ed11a0, ftLastAccessTime.dwHighDateTime=0x1d630f4, ftLastWriteTime.dwLowDateTime=0xb3ed11a0, ftLastWriteTime.dwHighDateTime=0x1d630f4, nFileSizeHigh=0x0, nFileSizeLow=0xa021, dwReserved0=0x0, dwReserved1=0x0, cFileName="4lnY7iIc.gif", cAlternateFileName="")) returned 1 [0076.652] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0846ca0, ftCreationTime.dwHighDateTime=0x1d629b8, ftLastAccessTime.dwLowDateTime=0x6ac88ae0, ftLastAccessTime.dwHighDateTime=0x1d624b0, ftLastWriteTime.dwLowDateTime=0x6ac88ae0, ftLastWriteTime.dwHighDateTime=0x1d624b0, nFileSizeHigh=0x0, nFileSizeLow=0x9a2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8gAlIqHNEiCd5T.swf", cAlternateFileName="8GALIQ~1.SWF")) returned 1 [0076.652] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28478bb0, ftCreationTime.dwHighDateTime=0x1d6241c, ftLastAccessTime.dwLowDateTime=0x4952110, ftLastAccessTime.dwHighDateTime=0x1d630be, ftLastWriteTime.dwLowDateTime=0x4952110, ftLastWriteTime.dwHighDateTime=0x1d630be, nFileSizeHigh=0x0, nFileSizeLow=0x5329, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA8wJDLVEL6WQA.gif", cAlternateFileName="AA8WJD~1.GIF")) returned 1 [0076.652] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebbccd40, ftCreationTime.dwHighDateTime=0x1d6311d, ftLastAccessTime.dwLowDateTime=0x6aa81490, ftLastAccessTime.dwHighDateTime=0x1d62e06, ftLastWriteTime.dwLowDateTime=0x6aa81490, ftLastWriteTime.dwHighDateTime=0x1d62e06, nFileSizeHigh=0x0, nFileSizeLow=0xba89, dwReserved0=0x0, dwReserved1=0x0, cFileName="EgiI2QsrA-NQbWWsq.jpg", cAlternateFileName="EGII2Q~1.JPG")) returned 1 [0076.652] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55835b90, ftCreationTime.dwHighDateTime=0x1d631d7, ftLastAccessTime.dwLowDateTime=0x36ebfb10, ftLastAccessTime.dwHighDateTime=0x1d626fb, ftLastWriteTime.dwLowDateTime=0x36ebfb10, ftLastWriteTime.dwHighDateTime=0x1d626fb, nFileSizeHigh=0x0, nFileSizeLow=0xfba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="sA4tP5cE0d5.flv", cAlternateFileName="SA4TP5~1.FLV")) returned 1 [0076.652] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41142500, ftCreationTime.dwHighDateTime=0x1d62704, ftLastAccessTime.dwLowDateTime=0xae3c3f40, ftLastAccessTime.dwHighDateTime=0x1d632bd, ftLastWriteTime.dwLowDateTime=0xae3c3f40, ftLastWriteTime.dwHighDateTime=0x1d632bd, nFileSizeHigh=0x0, nFileSizeLow=0x102f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="vr35Ruti_of.avi", cAlternateFileName="VR35RU~1.AVI")) returned 1 [0076.652] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2b6e0d0, ftCreationTime.dwHighDateTime=0x1d626a8, ftLastAccessTime.dwLowDateTime=0x41adb3b0, ftLastAccessTime.dwHighDateTime=0x1d62b27, ftLastWriteTime.dwLowDateTime=0x41adb3b0, ftLastWriteTime.dwHighDateTime=0x1d62b27, nFileSizeHigh=0x0, nFileSizeLow=0xe9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="wahx871O_X.ppt", cAlternateFileName="WAHX87~1.PPT")) returned 1 [0076.652] FindNextFileW (in: hFindFile=0x7f02b8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.652] FindClose (in: hFindFile=0x7f02b8 | out: hFindFile=0x7f02b8) returned 1 [0076.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.658] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0076.658] GetFileType (hFile=0x19c) returned 0x1 [0076.658] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0076.658] WriteFile (in: hFile=0x19c, lpBuffer=0x1111c480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x1111c480*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0076.659] GetFileType (hFile=0x19c) returned 0x1 [0076.659] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0076.659] CloseHandle (hObject=0x19c) returned 1 [0076.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\1_rUP4yYJk.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\1_rup4yyjk.swf"), fInfoLevelId=0x0, lpFileInformation=0x10cd3408 | out: lpFileInformation=0x10cd3408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa03f2840, ftCreationTime.dwHighDateTime=0x1d6266e, ftLastAccessTime.dwLowDateTime=0x56095b10, ftLastAccessTime.dwHighDateTime=0x1d62ecf, ftLastWriteTime.dwLowDateTime=0x56095b10, ftLastWriteTime.dwHighDateTime=0x1d62ecf, nFileSizeHigh=0x0, nFileSizeLow=0x795a)) returned 1 [0076.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\1_rUP4yYJk.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\1_rup4yyjk.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.664] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0076.664] GetFileType (hFile=0x19c) returned 0x1 [0076.664] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0076.664] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6efc0 | out: pbBuffer=0x10c6efc0) returned 1 [0076.664] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6efd0 | out: pbBuffer=0x10c6efd0) returned 1 [0076.664] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f73801 | out: pbBuffer=0x10f73801) returned 1 [0076.664] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f73a01 | out: pbBuffer=0x10f73a01) returned 1 [0076.665] ReadFile (in: hFile=0x19c, lpBuffer=0x11126000, nNumberOfBytesToRead=0x795a, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x11126000*, lpNumberOfBytesRead=0x10c89b8c*=0x795a, lpOverlapped=0x0) returned 1 [0076.666] GetFileType (hFile=0x19c) returned 0x1 [0076.666] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.666] WriteFile (in: hFile=0x19c, lpBuffer=0x1112e000*, nNumberOfBytesToWrite=0x795a, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1112e000*, lpNumberOfBytesWritten=0x10c89b8c*=0x795a, lpOverlapped=0x10c89b90) returned 1 [0076.666] GetFileType (hFile=0x19c) returned 0x1 [0076.666] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x795a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.666] GetFileType (hFile=0x19c) returned 0x1 [0076.666] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.666] WriteFile (in: hFile=0x19c, lpBuffer=0x10f73900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f73900*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.666] GetFileType (hFile=0x19c) returned 0x1 [0076.666] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x795a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.666] GetFileType (hFile=0x19c) returned 0x1 [0076.666] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.666] WriteFile (in: hFile=0x19c, lpBuffer=0x10f73b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f73b00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.666] GetFileType (hFile=0x19c) returned 0x1 [0076.666] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x795a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.667] GetFileType (hFile=0x19c) returned 0x1 [0076.667] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.667] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0076.667] GetFileType (hFile=0x19c) returned 0x1 [0076.667] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x795a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.667] CloseHandle (hObject=0x19c) returned 1 [0076.672] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\1_rUP4yYJk.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\1_rup4yyjk.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\1_rUP4yYJk.swf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\1_rup4yyjk.swf.trapget"), dwFlags=0x1) returned 1 [0076.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\4lnY7iIc.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\4lny7iic.gif"), fInfoLevelId=0x0, lpFileInformation=0x10cd3548 | out: lpFileInformation=0x10cd3548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2acf3f80, ftCreationTime.dwHighDateTime=0x1d631e7, ftLastAccessTime.dwLowDateTime=0xb3ed11a0, ftLastAccessTime.dwHighDateTime=0x1d630f4, ftLastWriteTime.dwLowDateTime=0xb3ed11a0, ftLastWriteTime.dwHighDateTime=0x1d630f4, nFileSizeHigh=0x0, nFileSizeLow=0xa021)) returned 1 [0076.677] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\4lnY7iIc.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\4lny7iic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.677] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0076.677] GetFileType (hFile=0x19c) returned 0x1 [0076.677] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0076.678] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f0a0 | out: pbBuffer=0x10c6f0a0) returned 1 [0076.678] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f0b0 | out: pbBuffer=0x10c6f0b0) returned 1 [0076.678] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f73c01 | out: pbBuffer=0x10f73c01) returned 1 [0076.678] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f73e01 | out: pbBuffer=0x10f73e01) returned 1 [0076.679] ReadFile (in: hFile=0x19c, lpBuffer=0x11140000, nNumberOfBytesToRead=0xa021, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x11140000*, lpNumberOfBytesRead=0x10c89b8c*=0xa021, lpOverlapped=0x0) returned 1 [0076.680] GetFileType (hFile=0x19c) returned 0x1 [0076.680] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.680] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0xa021, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89b8c*=0xa021, lpOverlapped=0x10c89b90) returned 1 [0076.680] GetFileType (hFile=0x19c) returned 0x1 [0076.680] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa021, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.680] GetFileType (hFile=0x19c) returned 0x1 [0076.680] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.680] WriteFile (in: hFile=0x19c, lpBuffer=0x10f73d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f73d00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.680] GetFileType (hFile=0x19c) returned 0x1 [0076.680] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa021, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.680] GetFileType (hFile=0x19c) returned 0x1 [0076.680] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.680] WriteFile (in: hFile=0x19c, lpBuffer=0x10f73f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f73f00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.680] GetFileType (hFile=0x19c) returned 0x1 [0076.680] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa021, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.680] GetFileType (hFile=0x19c) returned 0x1 [0076.681] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.681] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0076.681] GetFileType (hFile=0x19c) returned 0x1 [0076.681] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa021, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.681] CloseHandle (hObject=0x19c) returned 1 [0076.682] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\4lnY7iIc.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\4lny7iic.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\4lnY7iIc.gif.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\4lny7iic.gif.trapget"), dwFlags=0x1) returned 1 [0076.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\8gAlIqHNEiCd5T.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\8galiqhneicd5t.swf"), fInfoLevelId=0x0, lpFileInformation=0x10cd3688 | out: lpFileInformation=0x10cd3688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0846ca0, ftCreationTime.dwHighDateTime=0x1d629b8, ftLastAccessTime.dwLowDateTime=0x6ac88ae0, ftLastAccessTime.dwHighDateTime=0x1d624b0, ftLastWriteTime.dwLowDateTime=0x6ac88ae0, ftLastWriteTime.dwHighDateTime=0x1d624b0, nFileSizeHigh=0x0, nFileSizeLow=0x9a2b)) returned 1 [0076.695] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\8gAlIqHNEiCd5T.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\8galiqhneicd5t.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.695] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0076.695] GetFileType (hFile=0x19c) returned 0x1 [0076.696] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0076.696] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f190 | out: pbBuffer=0x10c6f190) returned 1 [0076.696] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f1a0 | out: pbBuffer=0x10c6f1a0) returned 1 [0076.696] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115c001 | out: pbBuffer=0x1115c001) returned 1 [0076.696] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115c201 | out: pbBuffer=0x1115c201) returned 1 [0076.696] ReadFile (in: hFile=0x19c, lpBuffer=0x10d32000, nNumberOfBytesToRead=0x9a2b, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10d32000*, lpNumberOfBytesRead=0x10c89b8c*=0x9a2b, lpOverlapped=0x0) returned 1 [0076.697] GetFileType (hFile=0x19c) returned 0x1 [0076.697] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.698] WriteFile (in: hFile=0x19c, lpBuffer=0x10d3c000*, nNumberOfBytesToWrite=0x9a2b, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10d3c000*, lpNumberOfBytesWritten=0x10c89b8c*=0x9a2b, lpOverlapped=0x10c89b90) returned 1 [0076.698] GetFileType (hFile=0x19c) returned 0x1 [0076.698] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9a2b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.698] GetFileType (hFile=0x19c) returned 0x1 [0076.698] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.698] WriteFile (in: hFile=0x19c, lpBuffer=0x1115c100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1115c100*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.698] GetFileType (hFile=0x19c) returned 0x1 [0076.698] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9a2b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.698] GetFileType (hFile=0x19c) returned 0x1 [0076.698] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.698] WriteFile (in: hFile=0x19c, lpBuffer=0x1115c300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1115c300*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.698] GetFileType (hFile=0x19c) returned 0x1 [0076.698] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9a2b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.698] GetFileType (hFile=0x19c) returned 0x1 [0076.698] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.698] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0076.698] GetFileType (hFile=0x19c) returned 0x1 [0076.698] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9a2b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.698] CloseHandle (hObject=0x19c) returned 1 [0076.702] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\8gAlIqHNEiCd5T.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\8galiqhneicd5t.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\8gAlIqHNEiCd5T.swf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\8galiqhneicd5t.swf.trapget"), dwFlags=0x1) returned 1 [0076.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\AA8wJDLVEL6WQA.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\aa8wjdlvel6wqa.gif"), fInfoLevelId=0x0, lpFileInformation=0x10cd3818 | out: lpFileInformation=0x10cd3818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28478bb0, ftCreationTime.dwHighDateTime=0x1d6241c, ftLastAccessTime.dwLowDateTime=0x4952110, ftLastAccessTime.dwHighDateTime=0x1d630be, ftLastWriteTime.dwLowDateTime=0x4952110, ftLastWriteTime.dwHighDateTime=0x1d630be, nFileSizeHigh=0x0, nFileSizeLow=0x5329)) returned 1 [0076.709] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\AA8wJDLVEL6WQA.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\aa8wjdlvel6wqa.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.709] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0076.710] GetFileType (hFile=0x19c) returned 0x1 [0076.710] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0076.710] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f280 | out: pbBuffer=0x10c6f280) returned 1 [0076.710] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f290 | out: pbBuffer=0x10c6f290) returned 1 [0076.710] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115c401 | out: pbBuffer=0x1115c401) returned 1 [0076.710] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115c601 | out: pbBuffer=0x1115c601) returned 1 [0076.710] ReadFile (in: hFile=0x19c, lpBuffer=0x10d50000, nNumberOfBytesToRead=0x5329, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10d50000*, lpNumberOfBytesRead=0x10c89b8c*=0x5329, lpOverlapped=0x0) returned 1 [0076.711] GetFileType (hFile=0x19c) returned 0x1 [0076.711] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.711] WriteFile (in: hFile=0x19c, lpBuffer=0x10d55500*, nNumberOfBytesToWrite=0x5329, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10d55500*, lpNumberOfBytesWritten=0x10c89b8c*=0x5329, lpOverlapped=0x10c89b90) returned 1 [0076.711] GetFileType (hFile=0x19c) returned 0x1 [0076.711] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5329, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.712] GetFileType (hFile=0x19c) returned 0x1 [0076.712] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.712] WriteFile (in: hFile=0x19c, lpBuffer=0x1115c500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1115c500*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.712] GetFileType (hFile=0x19c) returned 0x1 [0076.712] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5329, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.712] GetFileType (hFile=0x19c) returned 0x1 [0076.712] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.712] WriteFile (in: hFile=0x19c, lpBuffer=0x1115c700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1115c700*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.712] GetFileType (hFile=0x19c) returned 0x1 [0076.712] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5329, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.712] GetFileType (hFile=0x19c) returned 0x1 [0076.712] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.712] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0076.712] GetFileType (hFile=0x19c) returned 0x1 [0076.712] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5329, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.712] CloseHandle (hObject=0x19c) returned 1 [0076.717] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\AA8wJDLVEL6WQA.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\aa8wjdlvel6wqa.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\AA8wJDLVEL6WQA.gif.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\aa8wjdlvel6wqa.gif.trapget"), dwFlags=0x1) returned 1 [0076.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\EgiI2QsrA-NQbWWsq.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\egii2qsra-nqbwwsq.jpg"), fInfoLevelId=0x0, lpFileInformation=0x10cd3958 | out: lpFileInformation=0x10cd3958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebbccd40, ftCreationTime.dwHighDateTime=0x1d6311d, ftLastAccessTime.dwLowDateTime=0x6aa81490, ftLastAccessTime.dwHighDateTime=0x1d62e06, ftLastWriteTime.dwLowDateTime=0x6aa81490, ftLastWriteTime.dwHighDateTime=0x1d62e06, nFileSizeHigh=0x0, nFileSizeLow=0xba89)) returned 1 [0076.728] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\EgiI2QsrA-NQbWWsq.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\egii2qsra-nqbwwsq.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.728] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0076.728] GetFileType (hFile=0x19c) returned 0x1 [0076.728] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0076.728] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f370 | out: pbBuffer=0x10c6f370) returned 1 [0076.729] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f380 | out: pbBuffer=0x10c6f380) returned 1 [0076.729] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115c801 | out: pbBuffer=0x1115c801) returned 1 [0076.729] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115ca01 | out: pbBuffer=0x1115ca01) returned 1 [0076.729] ReadFile (in: hFile=0x19c, lpBuffer=0x10d70000, nNumberOfBytesToRead=0xba89, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10d70000*, lpNumberOfBytesRead=0x10c89b8c*=0xba89, lpOverlapped=0x0) returned 1 [0076.730] GetFileType (hFile=0x19c) returned 0x1 [0076.730] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.731] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7e000*, nNumberOfBytesToWrite=0xba89, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10d7e000*, lpNumberOfBytesWritten=0x10c89b8c*=0xba89, lpOverlapped=0x10c89b90) returned 1 [0076.731] GetFileType (hFile=0x19c) returned 0x1 [0076.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xba89, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.731] GetFileType (hFile=0x19c) returned 0x1 [0076.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.731] WriteFile (in: hFile=0x19c, lpBuffer=0x1115c900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1115c900*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.731] GetFileType (hFile=0x19c) returned 0x1 [0076.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xba89, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.731] GetFileType (hFile=0x19c) returned 0x1 [0076.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.731] WriteFile (in: hFile=0x19c, lpBuffer=0x1115cb00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1115cb00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.731] GetFileType (hFile=0x19c) returned 0x1 [0076.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xba89, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.731] GetFileType (hFile=0x19c) returned 0x1 [0076.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.731] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0076.731] GetFileType (hFile=0x19c) returned 0x1 [0076.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xba89, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.731] CloseHandle (hObject=0x19c) returned 1 [0076.735] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\EgiI2QsrA-NQbWWsq.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\egii2qsra-nqbwwsq.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\EgiI2QsrA-NQbWWsq.jpg.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\egii2qsra-nqbwwsq.jpg.trapget"), dwFlags=0x1) returned 1 [0076.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\sA4tP5cE0d5.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\sa4tp5ce0d5.flv"), fInfoLevelId=0x0, lpFileInformation=0x10cd3a98 | out: lpFileInformation=0x10cd3a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55835b90, ftCreationTime.dwHighDateTime=0x1d631d7, ftLastAccessTime.dwLowDateTime=0x36ebfb10, ftLastAccessTime.dwHighDateTime=0x1d626fb, ftLastWriteTime.dwLowDateTime=0x36ebfb10, ftLastWriteTime.dwHighDateTime=0x1d626fb, nFileSizeHigh=0x0, nFileSizeLow=0xfba1)) returned 1 [0076.742] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\sA4tP5cE0d5.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\sa4tp5ce0d5.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.742] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0076.742] GetFileType (hFile=0x19c) returned 0x1 [0076.742] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0076.742] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f450 | out: pbBuffer=0x10c6f450) returned 1 [0076.742] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f460 | out: pbBuffer=0x10c6f460) returned 1 [0076.742] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115cd01 | out: pbBuffer=0x1115cd01) returned 1 [0076.743] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115cf01 | out: pbBuffer=0x1115cf01) returned 1 [0076.743] ReadFile (in: hFile=0x19c, lpBuffer=0x10d92000, nNumberOfBytesToRead=0xfba1, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10d92000*, lpNumberOfBytesRead=0x10c89b8c*=0xfba1, lpOverlapped=0x0) returned 1 [0076.744] GetFileType (hFile=0x19c) returned 0x1 [0076.744] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.745] WriteFile (in: hFile=0x19c, lpBuffer=0x10da2000*, nNumberOfBytesToWrite=0xfba1, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10da2000*, lpNumberOfBytesWritten=0x10c89b8c*=0xfba1, lpOverlapped=0x10c89b90) returned 1 [0076.745] GetFileType (hFile=0x19c) returned 0x1 [0076.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfba1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.745] GetFileType (hFile=0x19c) returned 0x1 [0076.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.745] WriteFile (in: hFile=0x19c, lpBuffer=0x1115ce00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1115ce00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.745] GetFileType (hFile=0x19c) returned 0x1 [0076.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfba1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.745] GetFileType (hFile=0x19c) returned 0x1 [0076.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.745] WriteFile (in: hFile=0x19c, lpBuffer=0x1115d000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1115d000*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.745] GetFileType (hFile=0x19c) returned 0x1 [0076.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfba1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.745] GetFileType (hFile=0x19c) returned 0x1 [0076.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.745] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0076.745] GetFileType (hFile=0x19c) returned 0x1 [0076.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfba1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.745] CloseHandle (hObject=0x19c) returned 1 [0076.749] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\sA4tP5cE0d5.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\sa4tp5ce0d5.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\sA4tP5cE0d5.flv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\sa4tp5ce0d5.flv.trapget"), dwFlags=0x1) returned 1 [0076.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\vr35Ruti_of.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\vr35ruti_of.avi"), fInfoLevelId=0x0, lpFileInformation=0x10cd3bd8 | out: lpFileInformation=0x10cd3bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41142500, ftCreationTime.dwHighDateTime=0x1d62704, ftLastAccessTime.dwLowDateTime=0xae3c3f40, ftLastAccessTime.dwHighDateTime=0x1d632bd, ftLastWriteTime.dwLowDateTime=0xae3c3f40, ftLastWriteTime.dwHighDateTime=0x1d632bd, nFileSizeHigh=0x0, nFileSizeLow=0x102f9)) returned 1 [0076.759] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\vr35Ruti_of.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\vr35ruti_of.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.759] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0076.759] GetFileType (hFile=0x19c) returned 0x1 [0076.759] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0076.759] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f540 | out: pbBuffer=0x10c6f540) returned 1 [0076.759] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f550 | out: pbBuffer=0x10c6f550) returned 1 [0076.759] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115d101 | out: pbBuffer=0x1115d101) returned 1 [0076.760] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115d301 | out: pbBuffer=0x1115d301) returned 1 [0076.760] ReadFile (in: hFile=0x19c, lpBuffer=0x10dba000, nNumberOfBytesToRead=0x102f9, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10dba000*, lpNumberOfBytesRead=0x10c89b8c*=0x102f9, lpOverlapped=0x0) returned 1 [0076.788] GetFileType (hFile=0x19c) returned 0x1 [0076.788] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.788] WriteFile (in: hFile=0x19c, lpBuffer=0x10dcc000*, nNumberOfBytesToWrite=0x102f9, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10dcc000*, lpNumberOfBytesWritten=0x10c89b8c*=0x102f9, lpOverlapped=0x10c89b90) returned 1 [0076.789] GetFileType (hFile=0x19c) returned 0x1 [0076.789] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x102f9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.789] GetFileType (hFile=0x19c) returned 0x1 [0076.789] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.789] WriteFile (in: hFile=0x19c, lpBuffer=0x1115d200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1115d200*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.789] GetFileType (hFile=0x19c) returned 0x1 [0076.789] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x102f9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.789] GetFileType (hFile=0x19c) returned 0x1 [0076.789] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.789] WriteFile (in: hFile=0x19c, lpBuffer=0x1115d400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1115d400*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.789] GetFileType (hFile=0x19c) returned 0x1 [0076.789] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x102f9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.789] GetFileType (hFile=0x19c) returned 0x1 [0076.789] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.789] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0076.789] GetFileType (hFile=0x19c) returned 0x1 [0076.789] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x102f9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.789] CloseHandle (hObject=0x19c) returned 1 [0076.805] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\vr35Ruti_of.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\vr35ruti_of.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\vr35Ruti_of.avi.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\vr35ruti_of.avi.trapget"), dwFlags=0x1) returned 1 [0076.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\wahx871O_X.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\wahx871o_x.ppt"), fInfoLevelId=0x0, lpFileInformation=0x10cd3d18 | out: lpFileInformation=0x10cd3d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2b6e0d0, ftCreationTime.dwHighDateTime=0x1d626a8, ftLastAccessTime.dwLowDateTime=0x41adb3b0, ftLastAccessTime.dwHighDateTime=0x1d62b27, ftLastWriteTime.dwLowDateTime=0x41adb3b0, ftLastWriteTime.dwHighDateTime=0x1d62b27, nFileSizeHigh=0x0, nFileSizeLow=0xe9b)) returned 1 [0076.809] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\wahx871O_X.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\wahx871o_x.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.809] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0076.809] GetFileType (hFile=0x19c) returned 0x1 [0076.809] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0076.809] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f630 | out: pbBuffer=0x10c6f630) returned 1 [0076.809] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f640 | out: pbBuffer=0x10c6f640) returned 1 [0076.809] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115d501 | out: pbBuffer=0x1115d501) returned 1 [0076.809] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115d701 | out: pbBuffer=0x1115d701) returned 1 [0076.810] ReadFile (in: hFile=0x19c, lpBuffer=0x10de4000, nNumberOfBytesToRead=0xe9b, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10de4000*, lpNumberOfBytesRead=0x10c89b8c*=0xe9b, lpOverlapped=0x0) returned 1 [0076.810] GetFileType (hFile=0x19c) returned 0x1 [0076.810] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.810] WriteFile (in: hFile=0x19c, lpBuffer=0x10de5000*, nNumberOfBytesToWrite=0xe9b, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10de5000*, lpNumberOfBytesWritten=0x10c89b8c*=0xe9b, lpOverlapped=0x10c89b90) returned 1 [0076.810] GetFileType (hFile=0x19c) returned 0x1 [0076.810] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe9b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.810] GetFileType (hFile=0x19c) returned 0x1 [0076.810] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.811] WriteFile (in: hFile=0x19c, lpBuffer=0x1115d600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1115d600*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.811] GetFileType (hFile=0x19c) returned 0x1 [0076.811] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe9b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.811] GetFileType (hFile=0x19c) returned 0x1 [0076.811] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.811] WriteFile (in: hFile=0x19c, lpBuffer=0x1115d800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1115d800*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0076.811] GetFileType (hFile=0x19c) returned 0x1 [0076.811] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe9b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.811] GetFileType (hFile=0x19c) returned 0x1 [0076.811] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.812] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0076.812] GetFileType (hFile=0x19c) returned 0x1 [0076.812] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe9b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0076.812] CloseHandle (hObject=0x19c) returned 1 [0076.819] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\wahx871O_X.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\wahx871o_x.ppt"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\stu88O9\\wahx871O_X.ppt.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\stu88o9\\wahx871o_x.ppt.trapget"), dwFlags=0x1) returned 1 [0076.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\tFQy0.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\tfqy0.avi"), fInfoLevelId=0x0, lpFileInformation=0x10cd3e58 | out: lpFileInformation=0x10cd3e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb966b890, ftCreationTime.dwHighDateTime=0x1d62742, ftLastAccessTime.dwLowDateTime=0x7e308080, ftLastAccessTime.dwHighDateTime=0x1d62c97, ftLastWriteTime.dwLowDateTime=0x7e308080, ftLastWriteTime.dwHighDateTime=0x1d62c97, nFileSizeHigh=0x0, nFileSizeLow=0x11cd7)) returned 1 [0076.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\tFQy0.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\tfqy0.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.824] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.824] GetFileType (hFile=0x19c) returned 0x1 [0076.825] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.825] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f720 | out: pbBuffer=0x10c6f720) returned 1 [0076.825] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f730 | out: pbBuffer=0x10c6f730) returned 1 [0076.825] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115d901 | out: pbBuffer=0x1115d901) returned 1 [0076.825] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115db01 | out: pbBuffer=0x1115db01) returned 1 [0076.825] ReadFile (in: hFile=0x19c, lpBuffer=0x10df6000, nNumberOfBytesToRead=0x11cd7, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10df6000*, lpNumberOfBytesRead=0x10c89bf0*=0x11cd7, lpOverlapped=0x0) returned 1 [0076.827] GetFileType (hFile=0x19c) returned 0x1 [0076.827] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.827] WriteFile (in: hFile=0x19c, lpBuffer=0x10e08000*, nNumberOfBytesToWrite=0x11cd7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e08000*, lpNumberOfBytesWritten=0x10c89bf0*=0x11cd7, lpOverlapped=0x10c89bf4) returned 1 [0076.827] GetFileType (hFile=0x19c) returned 0x1 [0076.827] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11cd7, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.827] GetFileType (hFile=0x19c) returned 0x1 [0076.827] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.827] WriteFile (in: hFile=0x19c, lpBuffer=0x1115da00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x1115da00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.827] GetFileType (hFile=0x19c) returned 0x1 [0076.827] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11cd7, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.827] GetFileType (hFile=0x19c) returned 0x1 [0076.827] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.827] WriteFile (in: hFile=0x19c, lpBuffer=0x1115dc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x1115dc00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.827] GetFileType (hFile=0x19c) returned 0x1 [0076.828] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11cd7, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.828] GetFileType (hFile=0x19c) returned 0x1 [0076.828] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.828] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.828] GetFileType (hFile=0x19c) returned 0x1 [0076.828] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11cd7, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.828] CloseHandle (hObject=0x19c) returned 1 [0076.833] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\tFQy0.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\tfqy0.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\tFQy0.avi.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\tfqy0.avi.trapget"), dwFlags=0x1) returned 1 [0076.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\tKpAK6co83Lo.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\tkpak6co83lo.wav"), fInfoLevelId=0x0, lpFileInformation=0x10cd3f98 | out: lpFileInformation=0x10cd3f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bc25f0, ftCreationTime.dwHighDateTime=0x1d6280e, ftLastAccessTime.dwLowDateTime=0xbdac02c0, ftLastAccessTime.dwHighDateTime=0x1d62a08, ftLastWriteTime.dwLowDateTime=0xbdac02c0, ftLastWriteTime.dwHighDateTime=0x1d62a08, nFileSizeHigh=0x0, nFileSizeLow=0xad3)) returned 1 [0076.836] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\tKpAK6co83Lo.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\tkpak6co83lo.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.836] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.836] GetFileType (hFile=0x19c) returned 0x1 [0076.836] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.836] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f800 | out: pbBuffer=0x10c6f800) returned 1 [0076.836] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f830 | out: pbBuffer=0x10c6f830) returned 1 [0076.836] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115dd01 | out: pbBuffer=0x1115dd01) returned 1 [0076.836] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1115df01 | out: pbBuffer=0x1115df01) returned 1 [0076.837] ReadFile (in: hFile=0x19c, lpBuffer=0x10e20000, nNumberOfBytesToRead=0xad3, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10e20000*, lpNumberOfBytesRead=0x10c89bf0*=0xad3, lpOverlapped=0x0) returned 1 [0076.837] GetFileType (hFile=0x19c) returned 0x1 [0076.837] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.837] WriteFile (in: hFile=0x19c, lpBuffer=0x10e20c00*, nNumberOfBytesToWrite=0xad3, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e20c00*, lpNumberOfBytesWritten=0x10c89bf0*=0xad3, lpOverlapped=0x10c89bf4) returned 1 [0076.837] GetFileType (hFile=0x19c) returned 0x1 [0076.838] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xad3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.838] GetFileType (hFile=0x19c) returned 0x1 [0076.838] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.838] WriteFile (in: hFile=0x19c, lpBuffer=0x1115de00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x1115de00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.838] GetFileType (hFile=0x19c) returned 0x1 [0076.838] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xad3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.838] GetFileType (hFile=0x19c) returned 0x1 [0076.838] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.838] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1e000*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.838] GetFileType (hFile=0x19c) returned 0x1 [0076.838] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xad3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.838] GetFileType (hFile=0x19c) returned 0x1 [0076.838] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.838] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.838] GetFileType (hFile=0x19c) returned 0x1 [0076.838] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xad3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.838] CloseHandle (hObject=0x19c) returned 1 [0076.842] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\tKpAK6co83Lo.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\tkpak6co83lo.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\tKpAK6co83Lo.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\tkpak6co83lo.wav.trapget"), dwFlags=0x1) returned 1 [0076.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\vdzywWs3jzfJK5kh.png" (normalized: "c:\\users\\fd1hvy\\desktop\\vdzywws3jzfjk5kh.png"), fInfoLevelId=0x0, lpFileInformation=0x110c60f8 | out: lpFileInformation=0x110c60f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe269c060, ftCreationTime.dwHighDateTime=0x1d62fd1, ftLastAccessTime.dwLowDateTime=0x5fdd2da0, ftLastAccessTime.dwHighDateTime=0x1d6273c, ftLastWriteTime.dwLowDateTime=0x5fdd2da0, ftLastWriteTime.dwHighDateTime=0x1d6273c, nFileSizeHigh=0x0, nFileSizeLow=0x12790)) returned 1 [0076.845] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\vdzywWs3jzfJK5kh.png" (normalized: "c:\\users\\fd1hvy\\desktop\\vdzywws3jzfjk5kh.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.846] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.846] GetFileType (hFile=0x19c) returned 0x1 [0076.846] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.846] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f920 | out: pbBuffer=0x10c6f920) returned 1 [0076.846] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f930 | out: pbBuffer=0x10c6f930) returned 1 [0076.846] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e101 | out: pbBuffer=0x10e1e101) returned 1 [0076.846] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e301 | out: pbBuffer=0x10e1e301) returned 1 [0076.847] ReadFile (in: hFile=0x19c, lpBuffer=0x10e30000, nNumberOfBytesToRead=0x12790, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10e30000*, lpNumberOfBytesRead=0x10c89bf0*=0x12790, lpOverlapped=0x0) returned 1 [0076.848] GetFileType (hFile=0x19c) returned 0x1 [0076.848] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.848] WriteFile (in: hFile=0x19c, lpBuffer=0x10e44000*, nNumberOfBytesToWrite=0x12790, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e44000*, lpNumberOfBytesWritten=0x10c89bf0*=0x12790, lpOverlapped=0x10c89bf4) returned 1 [0076.848] GetFileType (hFile=0x19c) returned 0x1 [0076.848] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12790, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.848] GetFileType (hFile=0x19c) returned 0x1 [0076.848] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.849] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1e200*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.849] GetFileType (hFile=0x19c) returned 0x1 [0076.849] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12790, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.849] GetFileType (hFile=0x19c) returned 0x1 [0076.849] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.849] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1e400*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.849] GetFileType (hFile=0x19c) returned 0x1 [0076.849] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12790, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.849] GetFileType (hFile=0x19c) returned 0x1 [0076.849] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.849] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.849] GetFileType (hFile=0x19c) returned 0x1 [0076.849] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12790, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.849] CloseHandle (hObject=0x19c) returned 1 [0076.854] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\vdzywWs3jzfJK5kh.png" (normalized: "c:\\users\\fd1hvy\\desktop\\vdzywws3jzfjk5kh.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\vdzywWs3jzfJK5kh.png.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\vdzywws3jzfjk5kh.png.trapget"), dwFlags=0x1) returned 1 [0076.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xh4NuQicJgTbMEKr.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\xh4nuqicjgtbmekr.gif"), fInfoLevelId=0x0, lpFileInformation=0x110c6238 | out: lpFileInformation=0x110c6238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efe5320, ftCreationTime.dwHighDateTime=0x1d623a3, ftLastAccessTime.dwLowDateTime=0x4f126850, ftLastAccessTime.dwHighDateTime=0x1d629ee, ftLastWriteTime.dwLowDateTime=0x4f126850, ftLastWriteTime.dwHighDateTime=0x1d629ee, nFileSizeHigh=0x0, nFileSizeLow=0xef2)) returned 1 [0076.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xh4NuQicJgTbMEKr.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\xh4nuqicjgtbmekr.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.857] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.857] GetFileType (hFile=0x19c) returned 0x1 [0076.857] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.857] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fa10 | out: pbBuffer=0x10c6fa10) returned 1 [0076.857] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fa20 | out: pbBuffer=0x10c6fa20) returned 1 [0076.857] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e501 | out: pbBuffer=0x10e1e501) returned 1 [0076.857] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e701 | out: pbBuffer=0x10e1e701) returned 1 [0076.858] ReadFile (in: hFile=0x19c, lpBuffer=0x10e62000, nNumberOfBytesToRead=0xef2, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10e62000*, lpNumberOfBytesRead=0x10c89bf0*=0xef2, lpOverlapped=0x0) returned 1 [0076.858] GetFileType (hFile=0x19c) returned 0x1 [0076.858] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.858] WriteFile (in: hFile=0x19c, lpBuffer=0x10e63000*, nNumberOfBytesToWrite=0xef2, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e63000*, lpNumberOfBytesWritten=0x10c89bf0*=0xef2, lpOverlapped=0x10c89bf4) returned 1 [0076.858] GetFileType (hFile=0x19c) returned 0x1 [0076.858] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xef2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.859] GetFileType (hFile=0x19c) returned 0x1 [0076.859] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.859] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1e600*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.859] GetFileType (hFile=0x19c) returned 0x1 [0076.859] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xef2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.859] GetFileType (hFile=0x19c) returned 0x1 [0076.859] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.859] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1e800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.859] GetFileType (hFile=0x19c) returned 0x1 [0076.860] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xef2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.860] GetFileType (hFile=0x19c) returned 0x1 [0076.860] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.860] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.860] GetFileType (hFile=0x19c) returned 0x1 [0076.860] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xef2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.860] CloseHandle (hObject=0x19c) returned 1 [0076.867] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\xh4NuQicJgTbMEKr.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\xh4nuqicjgtbmekr.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\xh4NuQicJgTbMEKr.gif.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\xh4nuqicjgtbmekr.gif.trapget"), dwFlags=0x1) returned 1 [0076.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\yUKfW.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\yukfw.mp4"), fInfoLevelId=0x0, lpFileInformation=0x110c6378 | out: lpFileInformation=0x110c6378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781389a0, ftCreationTime.dwHighDateTime=0x1d6266f, ftLastAccessTime.dwLowDateTime=0x4ce132c0, ftLastAccessTime.dwHighDateTime=0x1d62393, ftLastWriteTime.dwLowDateTime=0x4ce132c0, ftLastWriteTime.dwHighDateTime=0x1d62393, nFileSizeHigh=0x0, nFileSizeLow=0x1122d)) returned 1 [0076.871] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\yUKfW.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\yukfw.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.871] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.872] GetFileType (hFile=0x19c) returned 0x1 [0076.872] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.872] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fb00 | out: pbBuffer=0x10c6fb00) returned 1 [0076.872] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fb10 | out: pbBuffer=0x10c6fb10) returned 1 [0076.872] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e901 | out: pbBuffer=0x10e1e901) returned 1 [0076.872] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1eb01 | out: pbBuffer=0x10e1eb01) returned 1 [0076.872] ReadFile (in: hFile=0x19c, lpBuffer=0x10e6c000, nNumberOfBytesToRead=0x1122d, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10e6c000*, lpNumberOfBytesRead=0x10c89bf0*=0x1122d, lpOverlapped=0x0) returned 1 [0076.873] SetEvent (hEvent=0x170) returned 1 [0076.873] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0076.887] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0076.887] SetEvent (hEvent=0x170) returned 1 [0076.887] SetEvent (hEvent=0x158) returned 1 [0076.887] SetEvent (hEvent=0x138) returned 1 [0076.887] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0076.926] SetEvent (hEvent=0x168) returned 1 [0076.926] SetEvent (hEvent=0x138) returned 1 [0076.937] GetFileType (hFile=0x19c) returned 0x1 [0076.937] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.937] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7e000*, nNumberOfBytesToWrite=0x1122d, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e7e000*, lpNumberOfBytesWritten=0x10c89bf0*=0x1122d, lpOverlapped=0x10c89bf4) returned 1 [0076.937] GetFileType (hFile=0x19c) returned 0x1 [0076.937] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1122d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.937] GetFileType (hFile=0x19c) returned 0x1 [0076.937] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.938] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1ea00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1ea00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.938] GetFileType (hFile=0x19c) returned 0x1 [0076.938] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1122d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.938] GetFileType (hFile=0x19c) returned 0x1 [0076.938] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.938] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1ec00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1ec00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.938] GetFileType (hFile=0x19c) returned 0x1 [0076.938] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1122d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.938] GetFileType (hFile=0x19c) returned 0x1 [0076.938] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.938] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.938] GetFileType (hFile=0x19c) returned 0x1 [0076.938] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1122d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.938] CloseHandle (hObject=0x19c) returned 1 [0076.949] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\yUKfW.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\yukfw.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\yUKfW.mp4.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\yukfw.mp4.trapget"), dwFlags=0x1) returned 1 [0076.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\yoPormvcjnR.pps" (normalized: "c:\\users\\fd1hvy\\desktop\\yopormvcjnr.pps"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93382e20, ftCreationTime.dwHighDateTime=0x1d62d04, ftLastAccessTime.dwLowDateTime=0x64ed2520, ftLastAccessTime.dwHighDateTime=0x1d62831, ftLastWriteTime.dwLowDateTime=0x64ed2520, ftLastWriteTime.dwHighDateTime=0x1d62831, nFileSizeHigh=0x0, nFileSizeLow=0x17445)) returned 1 [0076.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\yoPormvcjnR.pps" (normalized: "c:\\users\\fd1hvy\\desktop\\yopormvcjnr.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.959] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0076.959] GetFileType (hFile=0x19c) returned 0x1 [0076.959] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0076.959] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0076.960] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e050 | out: pbBuffer=0x10c6e050) returned 1 [0076.960] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e001 | out: pbBuffer=0x10e1e001) returned 1 [0076.960] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e201 | out: pbBuffer=0x10e1e201) returned 1 [0076.960] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x17445, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89bf0*=0x17445, lpOverlapped=0x0) returned 1 [0076.963] GetFileType (hFile=0x19c) returned 0x1 [0076.963] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.963] WriteFile (in: hFile=0x19c, lpBuffer=0x10e20000*, nNumberOfBytesToWrite=0x17445, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e20000*, lpNumberOfBytesWritten=0x10c89bf0*=0x17445, lpOverlapped=0x10c89bf4) returned 1 [0076.964] GetFileType (hFile=0x19c) returned 0x1 [0076.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17445, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.964] GetFileType (hFile=0x19c) returned 0x1 [0076.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.964] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1e100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.964] GetFileType (hFile=0x19c) returned 0x1 [0076.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17445, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.964] GetFileType (hFile=0x19c) returned 0x1 [0076.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.964] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1e300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0076.964] GetFileType (hFile=0x19c) returned 0x1 [0076.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17445, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.964] GetFileType (hFile=0x19c) returned 0x1 [0076.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.964] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0076.964] GetFileType (hFile=0x19c) returned 0x1 [0076.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17445, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0076.964] CloseHandle (hObject=0x19c) returned 1 [0076.971] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\yoPormvcjnR.pps" (normalized: "c:\\users\\fd1hvy\\desktop\\yopormvcjnr.pps"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\yoPormvcjnR.pps.TRAPGET" (normalized: "c:\\users\\fd1hvy\\desktop\\yopormvcjnr.pps.trapget"), dwFlags=0x1) returned 1 [0076.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents" (normalized: "c:\\users\\fd1hvy\\documents"), fInfoLevelId=0x0, lpFileInformation=0x10cd2198 | out: lpFileInformation=0x10cd2198*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf76fa7f, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf76fa7f, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0076.980] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents" (normalized: "c:\\users\\fd1hvy\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.980] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf76fa7f, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf76fa7f, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0076.980] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf76fa7f, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf76fa7f, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.980] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38b53180, ftCreationTime.dwHighDateTime=0x1d6240a, ftLastAccessTime.dwLowDateTime=0x3e949f80, ftLastAccessTime.dwHighDateTime=0x1d626d7, ftLastWriteTime.dwLowDateTime=0x3e949f80, ftLastWriteTime.dwHighDateTime=0x1d626d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2-R0QGwQSDvN1aoYYzwu", cAlternateFileName="2-R0QG~1")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f44d50, ftCreationTime.dwHighDateTime=0x1d62e09, ftLastAccessTime.dwLowDateTime=0x5f0bf270, ftLastAccessTime.dwHighDateTime=0x1d62661, ftLastWriteTime.dwLowDateTime=0x5f0bf270, ftLastWriteTime.dwHighDateTime=0x1d62661, nFileSizeHigh=0x0, nFileSizeLow=0x6bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="2uLlIwABF0rj.xls", cAlternateFileName="2ULLIW~1.XLS")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d542d0, ftCreationTime.dwHighDateTime=0x1d6287e, ftLastAccessTime.dwLowDateTime=0x19282230, ftLastAccessTime.dwHighDateTime=0x1d6256a, ftLastWriteTime.dwLowDateTime=0x19282230, ftLastWriteTime.dwHighDateTime=0x1d6256a, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="2UzlTRtuY zSKjcUEG.ots", cAlternateFileName="2UZLTR~1.OTS")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf48dd010, ftCreationTime.dwHighDateTime=0x1d5d89c, ftLastAccessTime.dwLowDateTime=0xe3e59310, ftLastAccessTime.dwHighDateTime=0x1d5ff8e, ftLastWriteTime.dwLowDateTime=0xe3e59310, ftLastWriteTime.dwHighDateTime=0x1d5ff8e, nFileSizeHigh=0x0, nFileSizeLow=0x9a0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="5a Y.docx", cAlternateFileName="5AY~1.DOC")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30063e60, ftCreationTime.dwHighDateTime=0x1d5d934, ftLastAccessTime.dwLowDateTime=0x3f852080, ftLastAccessTime.dwHighDateTime=0x1d5b509, ftLastWriteTime.dwLowDateTime=0x3f852080, ftLastWriteTime.dwHighDateTime=0x1d5b509, nFileSizeHigh=0x0, nFileSizeLow=0x1631a, dwReserved0=0x0, dwReserved1=0x0, cFileName="7QGFW.xlsx", cAlternateFileName="7QGFW~1.XLS")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b0c80c0, ftCreationTime.dwHighDateTime=0x1d62d0b, ftLastAccessTime.dwLowDateTime=0x5e4cddd0, ftLastAccessTime.dwHighDateTime=0x1d62b67, ftLastWriteTime.dwLowDateTime=0x5e4cddd0, ftLastWriteTime.dwHighDateTime=0x1d62b67, nFileSizeHigh=0x0, nFileSizeLow=0xc214, dwReserved0=0x0, dwReserved1=0x0, cFileName="8zxZUKfaKbS0.docx", cAlternateFileName="8ZXZUK~1.DOC")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6e41e60, ftCreationTime.dwHighDateTime=0x1d5da31, ftLastAccessTime.dwLowDateTime=0x65ae7e90, ftLastAccessTime.dwHighDateTime=0x1d629cc, ftLastWriteTime.dwLowDateTime=0x65ae7e90, ftLastWriteTime.dwHighDateTime=0x1d629cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cau2QlHXqr37aPsLwf4.xlsx", cAlternateFileName="CAU2QL~1.XLS")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfebe96f0, ftCreationTime.dwHighDateTime=0x1d5bf06, ftLastAccessTime.dwLowDateTime=0x3b1da890, ftLastAccessTime.dwHighDateTime=0x1d5fae2, ftLastWriteTime.dwLowDateTime=0x3b1da890, ftLastWriteTime.dwHighDateTime=0x1d5fae2, nFileSizeHigh=0x0, nFileSizeLow=0x178ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeQe6zy8AfX.docx", cAlternateFileName="FEQE6Z~1.DOC")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cf7430, ftCreationTime.dwHighDateTime=0x1d62420, ftLastAccessTime.dwLowDateTime=0x9afc4630, ftLastAccessTime.dwHighDateTime=0x1d62fc7, ftLastWriteTime.dwLowDateTime=0x9afc4630, ftLastWriteTime.dwHighDateTime=0x1d62fc7, nFileSizeHigh=0x0, nFileSizeLow=0x1464a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FQrk.xlsx", cAlternateFileName="FQRK~1.XLS")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef22a10, ftCreationTime.dwHighDateTime=0x1d5be6a, ftLastAccessTime.dwLowDateTime=0x2e661f40, ftLastAccessTime.dwHighDateTime=0x1d5c475, ftLastWriteTime.dwLowDateTime=0x2e661f40, ftLastWriteTime.dwHighDateTime=0x1d5c475, nFileSizeHigh=0x0, nFileSizeLow=0x9326, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICGKeBWGuOXsK1A4QaO.pptx", cAlternateFileName="ICGKEB~1.PPT")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad929230, ftCreationTime.dwHighDateTime=0x1d6287f, ftLastAccessTime.dwLowDateTime=0x5a4d72b0, ftLastAccessTime.dwHighDateTime=0x1d62fa6, ftLastWriteTime.dwLowDateTime=0x5a4d72b0, ftLastWriteTime.dwHighDateTime=0x1d62fa6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2QD", cAlternateFileName="")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7c1b690, ftCreationTime.dwHighDateTime=0x1d62bba, ftLastAccessTime.dwLowDateTime=0xdba33460, ftLastAccessTime.dwHighDateTime=0x1d62409, ftLastWriteTime.dwLowDateTime=0xdba33460, ftLastWriteTime.dwHighDateTime=0x1d62409, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JC0ZW xEHGidpidTM6", cAlternateFileName="JC0ZWX~1")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e8c00, ftCreationTime.dwHighDateTime=0x1d63311, ftLastAccessTime.dwLowDateTime=0x4bab9540, ftLastAccessTime.dwHighDateTime=0x1d6273e, ftLastWriteTime.dwLowDateTime=0x4bab9540, ftLastWriteTime.dwHighDateTime=0x1d6273e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="k4xu4W0H0tZSl83p3", cAlternateFileName="K4XU4W~1")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884e0f80, ftCreationTime.dwHighDateTime=0x1d606b6, ftLastAccessTime.dwLowDateTime=0xa9d7e1b0, ftLastAccessTime.dwHighDateTime=0x1d5abdc, ftLastWriteTime.dwLowDateTime=0xa9d7e1b0, ftLastWriteTime.dwHighDateTime=0x1d5abdc, nFileSizeHigh=0x0, nFileSizeLow=0x8987, dwReserved0=0x0, dwReserved1=0x0, cFileName="kEPJSD4o6.xlsx", cAlternateFileName="KEPJSD~1.XLS")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77524620, ftCreationTime.dwHighDateTime=0x1d630db, ftLastAccessTime.dwLowDateTime=0x43c62700, ftLastAccessTime.dwHighDateTime=0x1d63107, ftLastWriteTime.dwLowDateTime=0x43c62700, ftLastWriteTime.dwHighDateTime=0x1d63107, nFileSizeHigh=0x0, nFileSizeLow=0x15145, dwReserved0=0x0, dwReserved1=0x0, cFileName="kHGk0Ed67.csv", cAlternateFileName="KHGK0E~1.CSV")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eba5d40, ftCreationTime.dwHighDateTime=0x1d5c5fc, ftLastAccessTime.dwLowDateTime=0x7d329380, ftLastAccessTime.dwHighDateTime=0x1d5b79e, ftLastWriteTime.dwLowDateTime=0x7d329380, ftLastWriteTime.dwHighDateTime=0x1d5b79e, nFileSizeHigh=0x0, nFileSizeLow=0x653e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kmf4mSW5X7A.docx", cAlternateFileName="KMF4MS~1.DOC")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab4a790, ftCreationTime.dwHighDateTime=0x1d5eca5, ftLastAccessTime.dwLowDateTime=0xacf0640, ftLastAccessTime.dwHighDateTime=0x1d5d092, ftLastWriteTime.dwLowDateTime=0xacf0640, ftLastWriteTime.dwHighDateTime=0x1d5d092, nFileSizeHigh=0x0, nFileSizeLow=0xfc15, dwReserved0=0x0, dwReserved1=0x0, cFileName="m3GMUKyDvqFeZ_.xlsx", cAlternateFileName="M3GMUK~1.XLS")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe148c9c0, ftCreationTime.dwHighDateTime=0x1d6263e, ftLastAccessTime.dwLowDateTime=0x38593b20, ftLastAccessTime.dwHighDateTime=0x1d60c2a, ftLastWriteTime.dwLowDateTime=0x38593b20, ftLastWriteTime.dwHighDateTime=0x1d60c2a, nFileSizeHigh=0x0, nFileSizeLow=0x136b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MNDm695.pptx", cAlternateFileName="MNDM69~1.PPT")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442f8b60, ftCreationTime.dwHighDateTime=0x1d5c162, ftLastAccessTime.dwLowDateTime=0xba205210, ftLastAccessTime.dwHighDateTime=0x1d600d6, ftLastWriteTime.dwLowDateTime=0xba205210, ftLastWriteTime.dwHighDateTime=0x1d600d6, nFileSizeHigh=0x0, nFileSizeLow=0x584a, dwReserved0=0x0, dwReserved1=0x0, cFileName="O7F5.pptx", cAlternateFileName="O7F5~1.PPT")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5ee892ad, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf01b880, ftCreationTime.dwHighDateTime=0x1d621fc, ftLastAccessTime.dwLowDateTime=0xc8a886a0, ftLastAccessTime.dwHighDateTime=0x1d5c269, ftLastWriteTime.dwLowDateTime=0xc8a886a0, ftLastWriteTime.dwHighDateTime=0x1d5c269, nFileSizeHigh=0x0, nFileSizeLow=0x65fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="r ok2RBGSg5uHFB.pptx", cAlternateFileName="ROK2RB~1.PPT")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc89501c0, ftCreationTime.dwHighDateTime=0x1d62e9d, ftLastAccessTime.dwLowDateTime=0x42256de0, ftLastAccessTime.dwHighDateTime=0x1d62a39, ftLastWriteTime.dwLowDateTime=0x42256de0, ftLastWriteTime.dwHighDateTime=0x1d62a39, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ryrPXn1yvmGWhT", cAlternateFileName="RYRPXN~1")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd874efb0, ftCreationTime.dwHighDateTime=0x1d5c2e1, ftLastAccessTime.dwLowDateTime=0xbc5a0950, ftLastAccessTime.dwHighDateTime=0x1d5bc15, ftLastWriteTime.dwLowDateTime=0xbc5a0950, ftLastWriteTime.dwHighDateTime=0x1d5bc15, nFileSizeHigh=0x0, nFileSizeLow=0x11299, dwReserved0=0x0, dwReserved1=0x0, cFileName="vVxFfnW0ZcZ.docx", cAlternateFileName="VVXFFN~1.DOC")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4f09a0, ftCreationTime.dwHighDateTime=0x1d60ecc, ftLastAccessTime.dwLowDateTime=0x97da5f80, ftLastAccessTime.dwHighDateTime=0x1d5ad1f, ftLastWriteTime.dwLowDateTime=0x97da5f80, ftLastWriteTime.dwHighDateTime=0x1d5ad1f, nFileSizeHigh=0x0, nFileSizeLow=0xe718, dwReserved0=0x0, dwReserved1=0x0, cFileName="wLMPQvSSO5pQmB5syNXL.pptx", cAlternateFileName="WLMPQV~1.PPT")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915fa800, ftCreationTime.dwHighDateTime=0x1d6002a, ftLastAccessTime.dwLowDateTime=0x97ab4140, ftLastAccessTime.dwHighDateTime=0x1d5c46d, ftLastWriteTime.dwLowDateTime=0x97ab4140, ftLastWriteTime.dwHighDateTime=0x1d5c46d, nFileSizeHigh=0x0, nFileSizeLow=0xd6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="xU6Ztvvg.xlsx", cAlternateFileName="XU6ZTV~1.XLS")) returned 1 [0076.982] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c264830, ftCreationTime.dwHighDateTime=0x1d5b388, ftLastAccessTime.dwLowDateTime=0xe746dc0, ftLastAccessTime.dwHighDateTime=0x1d62fac, ftLastWriteTime.dwLowDateTime=0xe746dc0, ftLastWriteTime.dwHighDateTime=0x1d62fac, nFileSizeHigh=0x0, nFileSizeLow=0xbe33, dwReserved0=0x0, dwReserved1=0x0, cFileName="_gzhpkFjb -ZW.docx", cAlternateFileName="_GZHPK~1.DOC")) returned 1 [0076.982] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.982] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0076.982] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\documents\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0076.982] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0076.982] GetFileType (hFile=0x19c) returned 0x1 [0076.982] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0076.982] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce8480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10ce8480*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0076.983] GetFileType (hFile=0x19c) returned 0x1 [0076.983] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0076.983] CloseHandle (hObject=0x19c) returned 1 [0076.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu"), fInfoLevelId=0x0, lpFileInformation=0x10cd2be8 | out: lpFileInformation=0x10cd2be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38b53180, ftCreationTime.dwHighDateTime=0x1d6240a, ftLastAccessTime.dwLowDateTime=0x3e949f80, ftLastAccessTime.dwHighDateTime=0x1d626d7, ftLastWriteTime.dwLowDateTime=0x3e949f80, ftLastWriteTime.dwHighDateTime=0x1d626d7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.983] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0076.984] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38b53180, ftCreationTime.dwHighDateTime=0x1d6240a, ftLastAccessTime.dwLowDateTime=0x3e949f80, ftLastAccessTime.dwHighDateTime=0x1d626d7, ftLastWriteTime.dwLowDateTime=0x3e949f80, ftLastWriteTime.dwHighDateTime=0x1d626d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efc38 [0076.984] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38b53180, ftCreationTime.dwHighDateTime=0x1d6240a, ftLastAccessTime.dwLowDateTime=0x3e949f80, ftLastAccessTime.dwHighDateTime=0x1d626d7, ftLastWriteTime.dwLowDateTime=0x3e949f80, ftLastWriteTime.dwHighDateTime=0x1d626d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.984] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d96ece0, ftCreationTime.dwHighDateTime=0x1d626fd, ftLastAccessTime.dwLowDateTime=0x6411e8d0, ftLastAccessTime.dwHighDateTime=0x1d6242a, ftLastWriteTime.dwLowDateTime=0x6411e8d0, ftLastWriteTime.dwHighDateTime=0x1d6242a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tOmz5wu", cAlternateFileName="")) returned 1 [0076.984] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1501def0, ftCreationTime.dwHighDateTime=0x1d6328d, ftLastAccessTime.dwLowDateTime=0xaa43cff0, ftLastAccessTime.dwHighDateTime=0x1d6270c, ftLastWriteTime.dwLowDateTime=0xaa43cff0, ftLastWriteTime.dwHighDateTime=0x1d6270c, nFileSizeHigh=0x0, nFileSizeLow=0xd04a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zvaKIqJz6.pptx", cAlternateFileName="ZVAKIQ~1.PPT")) returned 1 [0076.984] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.984] FindClose (in: hFindFile=0x7efc38 | out: hFindFile=0x7efc38) returned 1 [0076.984] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.003] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0077.003] GetFileType (hFile=0x19c) returned 0x1 [0077.003] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.003] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce8d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10ce8d80*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0077.004] GetFileType (hFile=0x19c) returned 0x1 [0077.004] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.004] CloseHandle (hObject=0x19c) returned 1 [0077.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu"), fInfoLevelId=0x0, lpFileInformation=0x10cd2cd8 | out: lpFileInformation=0x10cd2cd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d96ece0, ftCreationTime.dwHighDateTime=0x1d626fd, ftLastAccessTime.dwLowDateTime=0x6411e8d0, ftLastAccessTime.dwHighDateTime=0x1d6242a, ftLastWriteTime.dwLowDateTime=0x6411e8d0, ftLastWriteTime.dwHighDateTime=0x1d6242a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.005] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.005] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\*", lpFindFileData=0x10c899a0 | out: lpFindFileData=0x10c899a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d96ece0, ftCreationTime.dwHighDateTime=0x1d626fd, ftLastAccessTime.dwLowDateTime=0x6411e8d0, ftLastAccessTime.dwHighDateTime=0x1d6242a, ftLastWriteTime.dwLowDateTime=0x6411e8d0, ftLastWriteTime.dwHighDateTime=0x1d6242a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efdf8 [0077.005] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d96ece0, ftCreationTime.dwHighDateTime=0x1d626fd, ftLastAccessTime.dwLowDateTime=0x6411e8d0, ftLastAccessTime.dwHighDateTime=0x1d6242a, ftLastWriteTime.dwLowDateTime=0x6411e8d0, ftLastWriteTime.dwHighDateTime=0x1d6242a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.005] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8db22420, ftCreationTime.dwHighDateTime=0x1d63221, ftLastAccessTime.dwLowDateTime=0x8a321280, ftLastAccessTime.dwHighDateTime=0x1d62be9, ftLastWriteTime.dwLowDateTime=0x8a321280, ftLastWriteTime.dwHighDateTime=0x1d62be9, nFileSizeHigh=0x0, nFileSizeLow=0xf441, dwReserved0=0x0, dwReserved1=0x0, cFileName="ecMx.csv", cAlternateFileName="")) returned 1 [0077.005] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b49e0e0, ftCreationTime.dwHighDateTime=0x1d62814, ftLastAccessTime.dwLowDateTime=0x186de740, ftLastAccessTime.dwHighDateTime=0x1d6310d, ftLastWriteTime.dwLowDateTime=0x186de740, ftLastWriteTime.dwHighDateTime=0x1d6310d, nFileSizeHigh=0x0, nFileSizeLow=0xa5f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="j3A79gZHD1FP5.pdf", cAlternateFileName="J3A79G~1.PDF")) returned 1 [0077.005] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeef18ea0, ftCreationTime.dwHighDateTime=0x1d622c8, ftLastAccessTime.dwLowDateTime=0x34c95a20, ftLastAccessTime.dwHighDateTime=0x1d62ad5, ftLastWriteTime.dwLowDateTime=0x34c95a20, ftLastWriteTime.dwHighDateTime=0x1d62ad5, nFileSizeHigh=0x0, nFileSizeLow=0x13190, dwReserved0=0x0, dwReserved1=0x0, cFileName="kU-lR7SC_i4.xlsx", cAlternateFileName="KU-LR7~1.XLS")) returned 1 [0077.005] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.005] FindClose (in: hFindFile=0x7efdf8 | out: hFindFile=0x7efdf8) returned 1 [0077.005] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.014] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c04 | out: lpMode=0x10c89c04) returned 0 [0077.014] GetFileType (hFile=0x19c) returned 0x1 [0077.014] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0077.014] WriteFile (in: hFile=0x19c, lpBuffer=0x10ce9680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89bf4, lpOverlapped=0x10c89bf8 | out: lpBuffer=0x10ce9680*, lpNumberOfBytesWritten=0x10c89bf4*=0x464, lpOverlapped=0x10c89bf8) returned 1 [0077.016] GetFileType (hFile=0x19c) returned 0x1 [0077.016] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0077.016] CloseHandle (hObject=0x19c) returned 1 [0077.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\ecMx.csv" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu\\ecmx.csv"), fInfoLevelId=0x0, lpFileInformation=0x10cd2e18 | out: lpFileInformation=0x10cd2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8db22420, ftCreationTime.dwHighDateTime=0x1d63221, ftLastAccessTime.dwLowDateTime=0x8a321280, ftLastAccessTime.dwHighDateTime=0x1d62be9, ftLastWriteTime.dwLowDateTime=0x8a321280, ftLastWriteTime.dwHighDateTime=0x1d62be9, nFileSizeHigh=0x0, nFileSizeLow=0xf441)) returned 1 [0077.016] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\ecMx.csv" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu\\ecmx.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.016] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0077.016] GetFileType (hFile=0x19c) returned 0x1 [0077.016] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0077.016] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e460 | out: pbBuffer=0x10c6e460) returned 1 [0077.016] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e470 | out: pbBuffer=0x10c6e470) returned 1 [0077.017] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e601 | out: pbBuffer=0x10e1e601) returned 1 [0077.017] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1e801 | out: pbBuffer=0x10e1e801) returned 1 [0077.018] ReadFile (in: hFile=0x19c, lpBuffer=0x10e38000, nNumberOfBytesToRead=0xf441, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10e38000*, lpNumberOfBytesRead=0x10c89b28*=0xf441, lpOverlapped=0x0) returned 1 [0077.020] GetFileType (hFile=0x19c) returned 0x1 [0077.020] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.020] WriteFile (in: hFile=0x19c, lpBuffer=0x10e48000*, nNumberOfBytesToWrite=0xf441, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10e48000*, lpNumberOfBytesWritten=0x10c89b28*=0xf441, lpOverlapped=0x10c89b2c) returned 1 [0077.021] GetFileType (hFile=0x19c) returned 0x1 [0077.021] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf441, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.021] GetFileType (hFile=0x19c) returned 0x1 [0077.021] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.021] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10e1e700*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.021] GetFileType (hFile=0x19c) returned 0x1 [0077.021] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf441, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.021] GetFileType (hFile=0x19c) returned 0x1 [0077.021] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.021] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10e1e900*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.021] GetFileType (hFile=0x19c) returned 0x1 [0077.021] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf441, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.021] GetFileType (hFile=0x19c) returned 0x1 [0077.021] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.021] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0077.022] GetFileType (hFile=0x19c) returned 0x1 [0077.022] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xf441, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.022] CloseHandle (hObject=0x19c) returned 1 [0077.022] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\ecMx.csv" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu\\ecmx.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\ecMx.csv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu\\ecmx.csv.trapget"), dwFlags=0x1) returned 1 [0077.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\j3A79gZHD1FP5.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu\\j3a79gzhd1fp5.pdf"), fInfoLevelId=0x0, lpFileInformation=0x10cd2f58 | out: lpFileInformation=0x10cd2f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b49e0e0, ftCreationTime.dwHighDateTime=0x1d62814, ftLastAccessTime.dwLowDateTime=0x186de740, ftLastAccessTime.dwHighDateTime=0x1d6310d, ftLastWriteTime.dwLowDateTime=0x186de740, ftLastWriteTime.dwHighDateTime=0x1d6310d, nFileSizeHigh=0x0, nFileSizeLow=0xa5f9)) returned 1 [0077.023] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\j3A79gZHD1FP5.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu\\j3a79gzhd1fp5.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.023] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0077.023] GetFileType (hFile=0x19c) returned 0x1 [0077.023] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0077.023] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e550 | out: pbBuffer=0x10c6e550) returned 1 [0077.023] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e560 | out: pbBuffer=0x10c6e560) returned 1 [0077.023] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1ed01 | out: pbBuffer=0x10e1ed01) returned 1 [0077.024] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1ef01 | out: pbBuffer=0x10e1ef01) returned 1 [0077.024] ReadFile (in: hFile=0x19c, lpBuffer=0x10e58000, nNumberOfBytesToRead=0xa5f9, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10e58000*, lpNumberOfBytesRead=0x10c89b28*=0xa5f9, lpOverlapped=0x0) returned 1 [0077.025] GetFileType (hFile=0x19c) returned 0x1 [0077.025] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.025] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfa000*, nNumberOfBytesToWrite=0xa5f9, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10cfa000*, lpNumberOfBytesWritten=0x10c89b28*=0xa5f9, lpOverlapped=0x10c89b2c) returned 1 [0077.026] GetFileType (hFile=0x19c) returned 0x1 [0077.026] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa5f9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.026] GetFileType (hFile=0x19c) returned 0x1 [0077.026] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.026] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1ee00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10e1ee00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.026] GetFileType (hFile=0x19c) returned 0x1 [0077.026] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa5f9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.026] GetFileType (hFile=0x19c) returned 0x1 [0077.026] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.026] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1f000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10e1f000*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.026] GetFileType (hFile=0x19c) returned 0x1 [0077.026] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa5f9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.026] GetFileType (hFile=0x19c) returned 0x1 [0077.026] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.026] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0077.026] GetFileType (hFile=0x19c) returned 0x1 [0077.026] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa5f9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.026] CloseHandle (hObject=0x19c) returned 1 [0077.027] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\j3A79gZHD1FP5.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu\\j3a79gzhd1fp5.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\j3A79gZHD1FP5.pdf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu\\j3a79gzhd1fp5.pdf.trapget"), dwFlags=0x1) returned 1 [0077.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\kU-lR7SC_i4.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu\\ku-lr7sc_i4.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x10cd3098 | out: lpFileInformation=0x10cd3098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeef18ea0, ftCreationTime.dwHighDateTime=0x1d622c8, ftLastAccessTime.dwLowDateTime=0x34c95a20, ftLastAccessTime.dwHighDateTime=0x1d62ad5, ftLastWriteTime.dwLowDateTime=0x34c95a20, ftLastWriteTime.dwHighDateTime=0x1d62ad5, nFileSizeHigh=0x0, nFileSizeLow=0x13190)) returned 1 [0077.027] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\kU-lR7SC_i4.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu\\ku-lr7sc_i4.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.027] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0077.027] GetFileType (hFile=0x19c) returned 0x1 [0077.027] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0077.028] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e760 | out: pbBuffer=0x10c6e760) returned 1 [0077.028] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e770 | out: pbBuffer=0x10c6e770) returned 1 [0077.028] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1f101 | out: pbBuffer=0x10e1f101) returned 1 [0077.028] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1f301 | out: pbBuffer=0x10e1f301) returned 1 [0077.028] ReadFile (in: hFile=0x19c, lpBuffer=0x10d06000, nNumberOfBytesToRead=0x13190, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10d06000*, lpNumberOfBytesRead=0x10c89b28*=0x13190, lpOverlapped=0x0) returned 1 [0077.030] GetFileType (hFile=0x19c) returned 0x1 [0077.030] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.030] WriteFile (in: hFile=0x19c, lpBuffer=0x10d1a000*, nNumberOfBytesToWrite=0x13190, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10d1a000*, lpNumberOfBytesWritten=0x10c89b28*=0x13190, lpOverlapped=0x10c89b2c) returned 1 [0077.030] GetFileType (hFile=0x19c) returned 0x1 [0077.030] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13190, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.030] GetFileType (hFile=0x19c) returned 0x1 [0077.030] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.030] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1f200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10e1f200*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.031] GetFileType (hFile=0x19c) returned 0x1 [0077.031] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13190, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.031] GetFileType (hFile=0x19c) returned 0x1 [0077.031] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.031] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1f400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10e1f400*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.031] GetFileType (hFile=0x19c) returned 0x1 [0077.031] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13190, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.031] GetFileType (hFile=0x19c) returned 0x1 [0077.031] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.031] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0077.031] GetFileType (hFile=0x19c) returned 0x1 [0077.031] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13190, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.031] CloseHandle (hObject=0x19c) returned 1 [0077.031] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\kU-lR7SC_i4.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu\\ku-lr7sc_i4.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\tOmz5wu\\kU-lR7SC_i4.xlsx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\tomz5wu\\ku-lr7sc_i4.xlsx.trapget"), dwFlags=0x1) returned 1 [0077.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\zvaKIqJz6.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\zvakiqjz6.pptx"), fInfoLevelId=0x0, lpFileInformation=0x10cd31d8 | out: lpFileInformation=0x10cd31d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1501def0, ftCreationTime.dwHighDateTime=0x1d6328d, ftLastAccessTime.dwLowDateTime=0xaa43cff0, ftLastAccessTime.dwHighDateTime=0x1d6270c, ftLastWriteTime.dwLowDateTime=0xaa43cff0, ftLastWriteTime.dwHighDateTime=0x1d6270c, nFileSizeHigh=0x0, nFileSizeLow=0xd04a)) returned 1 [0077.032] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\zvaKIqJz6.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\zvakiqjz6.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.032] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.032] GetFileType (hFile=0x19c) returned 0x1 [0077.032] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.032] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e880 | out: pbBuffer=0x10c6e880) returned 1 [0077.032] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e890 | out: pbBuffer=0x10c6e890) returned 1 [0077.032] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1f701 | out: pbBuffer=0x10e1f701) returned 1 [0077.038] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1f901 | out: pbBuffer=0x10e1f901) returned 1 [0077.038] ReadFile (in: hFile=0x19c, lpBuffer=0x10d32000, nNumberOfBytesToRead=0xd04a, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10d32000*, lpNumberOfBytesRead=0x10c89b8c*=0xd04a, lpOverlapped=0x0) returned 1 [0077.039] GetFileType (hFile=0x19c) returned 0x1 [0077.040] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.040] WriteFile (in: hFile=0x19c, lpBuffer=0x10d40000*, nNumberOfBytesToWrite=0xd04a, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10d40000*, lpNumberOfBytesWritten=0x10c89b8c*=0xd04a, lpOverlapped=0x10c89b90) returned 1 [0077.040] GetFileType (hFile=0x19c) returned 0x1 [0077.040] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd04a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.040] GetFileType (hFile=0x19c) returned 0x1 [0077.040] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.040] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1f800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e1f800*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.040] GetFileType (hFile=0x19c) returned 0x1 [0077.040] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd04a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.040] GetFileType (hFile=0x19c) returned 0x1 [0077.040] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.040] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1fa00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e1fa00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.040] GetFileType (hFile=0x19c) returned 0x1 [0077.040] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd04a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.040] GetFileType (hFile=0x19c) returned 0x1 [0077.041] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.041] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.041] GetFileType (hFile=0x19c) returned 0x1 [0077.041] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd04a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.041] CloseHandle (hObject=0x19c) returned 1 [0077.041] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\zvaKIqJz6.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\zvakiqjz6.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\2-R0QGwQSDvN1aoYYzwu\\zvaKIqJz6.pptx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\2-r0qgwqsdvn1aoyyzwu\\zvakiqjz6.pptx.trapget"), dwFlags=0x1) returned 1 [0077.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\2UzlTRtuY zSKjcUEG.ots" (normalized: "c:\\users\\fd1hvy\\documents\\2uzltrtuy zskjcueg.ots"), fInfoLevelId=0x0, lpFileInformation=0x10cd3318 | out: lpFileInformation=0x10cd3318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d542d0, ftCreationTime.dwHighDateTime=0x1d6287e, ftLastAccessTime.dwLowDateTime=0x19282230, ftLastAccessTime.dwHighDateTime=0x1d6256a, ftLastWriteTime.dwLowDateTime=0x19282230, ftLastWriteTime.dwHighDateTime=0x1d6256a, nFileSizeHigh=0x0, nFileSizeLow=0x938)) returned 1 [0077.041] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\2UzlTRtuY zSKjcUEG.ots" (normalized: "c:\\users\\fd1hvy\\documents\\2uzltrtuy zskjcueg.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.042] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.042] GetFileType (hFile=0x19c) returned 0x1 [0077.042] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.042] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e970 | out: pbBuffer=0x10c6e970) returned 1 [0077.042] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e980 | out: pbBuffer=0x10c6e980) returned 1 [0077.042] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1fc01 | out: pbBuffer=0x10e1fc01) returned 1 [0077.042] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1fe01 | out: pbBuffer=0x10e1fe01) returned 1 [0077.042] ReadFile (in: hFile=0x19c, lpBuffer=0x10d54000, nNumberOfBytesToRead=0x938, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d54000*, lpNumberOfBytesRead=0x10c89bf0*=0x938, lpOverlapped=0x0) returned 1 [0077.043] GetFileType (hFile=0x19c) returned 0x1 [0077.043] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.043] WriteFile (in: hFile=0x19c, lpBuffer=0x10d54a80*, nNumberOfBytesToWrite=0x938, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d54a80*, lpNumberOfBytesWritten=0x10c89bf0*=0x938, lpOverlapped=0x10c89bf4) returned 1 [0077.043] GetFileType (hFile=0x19c) returned 0x1 [0077.043] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x938, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.043] GetFileType (hFile=0x19c) returned 0x1 [0077.043] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.043] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1fd00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1fd00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.043] GetFileType (hFile=0x19c) returned 0x1 [0077.043] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x938, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.043] GetFileType (hFile=0x19c) returned 0x1 [0077.044] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.044] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1ff00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1ff00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.044] GetFileType (hFile=0x19c) returned 0x1 [0077.044] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x938, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.044] GetFileType (hFile=0x19c) returned 0x1 [0077.044] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.044] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.044] GetFileType (hFile=0x19c) returned 0x1 [0077.044] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x938, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.044] CloseHandle (hObject=0x19c) returned 1 [0077.044] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\2UzlTRtuY zSKjcUEG.ots" (normalized: "c:\\users\\fd1hvy\\documents\\2uzltrtuy zskjcueg.ots"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\2UzlTRtuY zSKjcUEG.ots.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\2uzltrtuy zskjcueg.ots.trapget"), dwFlags=0x1) returned 1 [0077.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\2uLlIwABF0rj.xls" (normalized: "c:\\users\\fd1hvy\\documents\\2ulliwabf0rj.xls"), fInfoLevelId=0x0, lpFileInformation=0x10cd3458 | out: lpFileInformation=0x10cd3458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f44d50, ftCreationTime.dwHighDateTime=0x1d62e09, ftLastAccessTime.dwLowDateTime=0x5f0bf270, ftLastAccessTime.dwHighDateTime=0x1d62661, ftLastWriteTime.dwLowDateTime=0x5f0bf270, ftLastWriteTime.dwHighDateTime=0x1d62661, nFileSizeHigh=0x0, nFileSizeLow=0x6bf8)) returned 1 [0077.045] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\2uLlIwABF0rj.xls" (normalized: "c:\\users\\fd1hvy\\documents\\2ulliwabf0rj.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.045] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.045] GetFileType (hFile=0x19c) returned 0x1 [0077.045] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.045] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea60 | out: pbBuffer=0x10c6ea60) returned 1 [0077.045] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea70 | out: pbBuffer=0x10c6ea70) returned 1 [0077.045] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d58001 | out: pbBuffer=0x10d58001) returned 1 [0077.045] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d58201 | out: pbBuffer=0x10d58201) returned 1 [0077.046] ReadFile (in: hFile=0x19c, lpBuffer=0x10d62000, nNumberOfBytesToRead=0x6bf8, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d62000*, lpNumberOfBytesRead=0x10c89bf0*=0x6bf8, lpOverlapped=0x0) returned 1 [0077.046] GetFileType (hFile=0x19c) returned 0x1 [0077.047] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.047] WriteFile (in: hFile=0x19c, lpBuffer=0x10d69000*, nNumberOfBytesToWrite=0x6bf8, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d69000*, lpNumberOfBytesWritten=0x10c89bf0*=0x6bf8, lpOverlapped=0x10c89bf4) returned 1 [0077.047] GetFileType (hFile=0x19c) returned 0x1 [0077.047] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6bf8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.047] GetFileType (hFile=0x19c) returned 0x1 [0077.047] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.047] WriteFile (in: hFile=0x19c, lpBuffer=0x10d58100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d58100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.047] GetFileType (hFile=0x19c) returned 0x1 [0077.047] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6bf8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.047] GetFileType (hFile=0x19c) returned 0x1 [0077.047] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.047] WriteFile (in: hFile=0x19c, lpBuffer=0x10d58300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d58300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.047] GetFileType (hFile=0x19c) returned 0x1 [0077.047] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6bf8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.047] GetFileType (hFile=0x19c) returned 0x1 [0077.047] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.047] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.047] GetFileType (hFile=0x19c) returned 0x1 [0077.047] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6bf8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.048] CloseHandle (hObject=0x19c) returned 1 [0077.048] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\2uLlIwABF0rj.xls" (normalized: "c:\\users\\fd1hvy\\documents\\2ulliwabf0rj.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\2uLlIwABF0rj.xls.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\2ulliwabf0rj.xls.trapget"), dwFlags=0x1) returned 1 [0077.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\5a Y.docx" (normalized: "c:\\users\\fd1hvy\\documents\\5a y.docx"), fInfoLevelId=0x0, lpFileInformation=0x10cd3598 | out: lpFileInformation=0x10cd3598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf48dd010, ftCreationTime.dwHighDateTime=0x1d5d89c, ftLastAccessTime.dwLowDateTime=0xe3e59310, ftLastAccessTime.dwHighDateTime=0x1d5ff8e, ftLastWriteTime.dwLowDateTime=0xe3e59310, ftLastWriteTime.dwHighDateTime=0x1d5ff8e, nFileSizeHigh=0x0, nFileSizeLow=0x9a0b)) returned 1 [0077.048] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\5a Y.docx" (normalized: "c:\\users\\fd1hvy\\documents\\5a y.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.048] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.048] GetFileType (hFile=0x19c) returned 0x1 [0077.048] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.048] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eb40 | out: pbBuffer=0x10c6eb40) returned 1 [0077.048] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eb50 | out: pbBuffer=0x10c6eb50) returned 1 [0077.048] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d58401 | out: pbBuffer=0x10d58401) returned 1 [0077.049] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d58601 | out: pbBuffer=0x10d58601) returned 1 [0077.049] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x9a0b, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89bf0*=0x9a0b, lpOverlapped=0x0) returned 1 [0077.050] GetFileType (hFile=0x19c) returned 0x1 [0077.050] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.050] WriteFile (in: hFile=0x19c, lpBuffer=0x11008000*, nNumberOfBytesToWrite=0x9a0b, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x11008000*, lpNumberOfBytesWritten=0x10c89bf0*=0x9a0b, lpOverlapped=0x10c89bf4) returned 1 [0077.050] GetFileType (hFile=0x19c) returned 0x1 [0077.050] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9a0b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.050] GetFileType (hFile=0x19c) returned 0x1 [0077.050] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.051] WriteFile (in: hFile=0x19c, lpBuffer=0x10d58500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d58500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.051] GetFileType (hFile=0x19c) returned 0x1 [0077.051] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9a0b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.051] GetFileType (hFile=0x19c) returned 0x1 [0077.051] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.051] WriteFile (in: hFile=0x19c, lpBuffer=0x10d58700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d58700*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.051] GetFileType (hFile=0x19c) returned 0x1 [0077.051] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9a0b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.051] GetFileType (hFile=0x19c) returned 0x1 [0077.051] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.051] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.051] GetFileType (hFile=0x19c) returned 0x1 [0077.051] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9a0b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.051] CloseHandle (hObject=0x19c) returned 1 [0077.051] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\5a Y.docx" (normalized: "c:\\users\\fd1hvy\\documents\\5a y.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\5a Y.docx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\5a y.docx.trapget"), dwFlags=0x1) returned 1 [0077.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\7QGFW.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\7qgfw.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x10cd36d8 | out: lpFileInformation=0x10cd36d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30063e60, ftCreationTime.dwHighDateTime=0x1d5d934, ftLastAccessTime.dwLowDateTime=0x3f852080, ftLastAccessTime.dwHighDateTime=0x1d5b509, ftLastWriteTime.dwLowDateTime=0x3f852080, ftLastWriteTime.dwHighDateTime=0x1d5b509, nFileSizeHigh=0x0, nFileSizeLow=0x1631a)) returned 1 [0077.052] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\7QGFW.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\7qgfw.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.052] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.052] GetFileType (hFile=0x19c) returned 0x1 [0077.052] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.052] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ec30 | out: pbBuffer=0x10c6ec30) returned 1 [0077.052] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ec40 | out: pbBuffer=0x10c6ec40) returned 1 [0077.052] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d58801 | out: pbBuffer=0x10d58801) returned 1 [0077.052] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d58a01 | out: pbBuffer=0x10d58a01) returned 1 [0077.053] ReadFile (in: hFile=0x19c, lpBuffer=0x11016000, nNumberOfBytesToRead=0x1631a, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x11016000*, lpNumberOfBytesRead=0x10c89bf0*=0x1631a, lpOverlapped=0x0) returned 1 [0077.055] GetFileType (hFile=0x19c) returned 0x1 [0077.055] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.055] WriteFile (in: hFile=0x19c, lpBuffer=0x1102e000*, nNumberOfBytesToWrite=0x1631a, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x1102e000*, lpNumberOfBytesWritten=0x10c89bf0*=0x1631a, lpOverlapped=0x10c89bf4) returned 1 [0077.055] GetFileType (hFile=0x19c) returned 0x1 [0077.055] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1631a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.055] GetFileType (hFile=0x19c) returned 0x1 [0077.055] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.055] WriteFile (in: hFile=0x19c, lpBuffer=0x10d58900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d58900*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.055] GetFileType (hFile=0x19c) returned 0x1 [0077.055] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1631a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.055] GetFileType (hFile=0x19c) returned 0x1 [0077.055] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.055] WriteFile (in: hFile=0x19c, lpBuffer=0x10d58b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d58b00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.055] GetFileType (hFile=0x19c) returned 0x1 [0077.055] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1631a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.055] GetFileType (hFile=0x19c) returned 0x1 [0077.055] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.055] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.056] GetFileType (hFile=0x19c) returned 0x1 [0077.056] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1631a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.056] CloseHandle (hObject=0x19c) returned 1 [0077.056] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\7QGFW.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\7qgfw.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\7QGFW.xlsx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\7qgfw.xlsx.trapget"), dwFlags=0x1) returned 1 [0077.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\8zxZUKfaKbS0.docx" (normalized: "c:\\users\\fd1hvy\\documents\\8zxzukfakbs0.docx"), fInfoLevelId=0x0, lpFileInformation=0x10cd3818 | out: lpFileInformation=0x10cd3818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b0c80c0, ftCreationTime.dwHighDateTime=0x1d62d0b, ftLastAccessTime.dwLowDateTime=0x5e4cddd0, ftLastAccessTime.dwHighDateTime=0x1d62b67, ftLastWriteTime.dwLowDateTime=0x5e4cddd0, ftLastWriteTime.dwHighDateTime=0x1d62b67, nFileSizeHigh=0x0, nFileSizeLow=0xc214)) returned 1 [0077.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\8zxZUKfaKbS0.docx" (normalized: "c:\\users\\fd1hvy\\documents\\8zxzukfakbs0.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.056] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.056] GetFileType (hFile=0x19c) returned 0x1 [0077.056] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.056] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed20 | out: pbBuffer=0x10c6ed20) returned 1 [0077.057] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed30 | out: pbBuffer=0x10c6ed30) returned 1 [0077.057] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d58c01 | out: pbBuffer=0x10d58c01) returned 1 [0077.057] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d58e01 | out: pbBuffer=0x10d58e01) returned 1 [0077.057] ReadFile (in: hFile=0x19c, lpBuffer=0x11054000, nNumberOfBytesToRead=0xc214, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x11054000*, lpNumberOfBytesRead=0x10c89bf0*=0xc214, lpOverlapped=0x0) returned 1 [0077.058] GetFileType (hFile=0x19c) returned 0x1 [0077.058] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.058] WriteFile (in: hFile=0x19c, lpBuffer=0x11062000*, nNumberOfBytesToWrite=0xc214, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x11062000*, lpNumberOfBytesWritten=0x10c89bf0*=0xc214, lpOverlapped=0x10c89bf4) returned 1 [0077.059] GetFileType (hFile=0x19c) returned 0x1 [0077.059] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc214, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.059] GetFileType (hFile=0x19c) returned 0x1 [0077.059] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.059] WriteFile (in: hFile=0x19c, lpBuffer=0x10d58d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d58d00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.059] GetFileType (hFile=0x19c) returned 0x1 [0077.059] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc214, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.059] GetFileType (hFile=0x19c) returned 0x1 [0077.059] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.059] WriteFile (in: hFile=0x19c, lpBuffer=0x10d58f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d58f00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.059] GetFileType (hFile=0x19c) returned 0x1 [0077.059] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc214, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.059] GetFileType (hFile=0x19c) returned 0x1 [0077.059] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.059] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.059] GetFileType (hFile=0x19c) returned 0x1 [0077.059] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc214, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.059] CloseHandle (hObject=0x19c) returned 1 [0077.059] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\8zxZUKfaKbS0.docx" (normalized: "c:\\users\\fd1hvy\\documents\\8zxzukfakbs0.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\8zxZUKfaKbS0.docx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\8zxzukfakbs0.docx.trapget"), dwFlags=0x1) returned 1 [0077.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Cau2QlHXqr37aPsLwf4.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\cau2qlhxqr37apslwf4.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x10cd3958 | out: lpFileInformation=0x10cd3958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6e41e60, ftCreationTime.dwHighDateTime=0x1d5da31, ftLastAccessTime.dwLowDateTime=0x65ae7e90, ftLastAccessTime.dwHighDateTime=0x1d629cc, ftLastWriteTime.dwLowDateTime=0x65ae7e90, ftLastWriteTime.dwHighDateTime=0x1d629cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a2d)) returned 1 [0077.060] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Cau2QlHXqr37aPsLwf4.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\cau2qlhxqr37apslwf4.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.060] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.060] GetFileType (hFile=0x19c) returned 0x1 [0077.060] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.060] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee10 | out: pbBuffer=0x10c6ee10) returned 1 [0077.060] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee20 | out: pbBuffer=0x10c6ee20) returned 1 [0077.060] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d59001 | out: pbBuffer=0x10d59001) returned 1 [0077.061] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d59201 | out: pbBuffer=0x10d59201) returned 1 [0077.061] ReadFile (in: hFile=0x19c, lpBuffer=0x11078000, nNumberOfBytesToRead=0x8a2d, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x11078000*, lpNumberOfBytesRead=0x10c89bf0*=0x8a2d, lpOverlapped=0x0) returned 1 [0077.062] GetFileType (hFile=0x19c) returned 0x1 [0077.062] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.062] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7e000*, nNumberOfBytesToWrite=0x8a2d, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d7e000*, lpNumberOfBytesWritten=0x10c89bf0*=0x8a2d, lpOverlapped=0x10c89bf4) returned 1 [0077.062] GetFileType (hFile=0x19c) returned 0x1 [0077.062] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x8a2d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.062] GetFileType (hFile=0x19c) returned 0x1 [0077.062] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.062] WriteFile (in: hFile=0x19c, lpBuffer=0x10d59100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d59100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.062] GetFileType (hFile=0x19c) returned 0x1 [0077.062] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x8a2d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.062] GetFileType (hFile=0x19c) returned 0x1 [0077.063] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.063] WriteFile (in: hFile=0x19c, lpBuffer=0x10d59300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d59300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.063] GetFileType (hFile=0x19c) returned 0x1 [0077.063] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x8a2d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.063] GetFileType (hFile=0x19c) returned 0x1 [0077.063] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.063] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.063] GetFileType (hFile=0x19c) returned 0x1 [0077.063] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x8a2d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.063] CloseHandle (hObject=0x19c) returned 1 [0077.063] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Cau2QlHXqr37aPsLwf4.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\cau2qlhxqr37apslwf4.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Cau2QlHXqr37aPsLwf4.xlsx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\cau2qlhxqr37apslwf4.xlsx.trapget"), dwFlags=0x1) returned 1 [0077.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), fInfoLevelId=0x0, lpFileInformation=0x10cd3a98 | out: lpFileInformation=0x10cd3a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000)) returned 1 [0077.064] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.064] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.064] GetFileType (hFile=0x19c) returned 0x1 [0077.064] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.064] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eef0 | out: pbBuffer=0x10c6eef0) returned 1 [0077.064] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ef00 | out: pbBuffer=0x10c6ef00) returned 1 [0077.064] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d59401 | out: pbBuffer=0x10d59401) returned 1 [0077.064] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d59601 | out: pbBuffer=0x10d59601) returned 1 [0077.065] ReadFile (in: hFile=0x19c, lpBuffer=0x10d90000, nNumberOfBytesToRead=0x55000, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d90000*, lpNumberOfBytesRead=0x10c89bf0*=0x55000, lpOverlapped=0x0) returned 1 [0077.074] GetFileType (hFile=0x19c) returned 0x1 [0077.074] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.080] WriteFile (in: hFile=0x19c, lpBuffer=0x10e90000*, nNumberOfBytesToWrite=0x55000, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e90000*, lpNumberOfBytesWritten=0x10c89bf0*=0x55000, lpOverlapped=0x10c89bf4) returned 1 [0077.081] GetFileType (hFile=0x19c) returned 0x1 [0077.081] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x55000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.081] GetFileType (hFile=0x19c) returned 0x1 [0077.081] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.081] WriteFile (in: hFile=0x19c, lpBuffer=0x10d59500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d59500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.081] GetFileType (hFile=0x19c) returned 0x1 [0077.081] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x55000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.081] GetFileType (hFile=0x19c) returned 0x1 [0077.081] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.081] WriteFile (in: hFile=0x19c, lpBuffer=0x10d59700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d59700*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.081] GetFileType (hFile=0x19c) returned 0x1 [0077.081] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x55000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.081] GetFileType (hFile=0x19c) returned 0x1 [0077.081] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.081] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.081] GetFileType (hFile=0x19c) returned 0x1 [0077.082] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x55000, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.082] CloseHandle (hObject=0x19c) returned 1 [0077.082] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb.trapget"), dwFlags=0x1) returned 1 [0077.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\FQrk.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\fqrk.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x10cd3bd8 | out: lpFileInformation=0x10cd3bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cf7430, ftCreationTime.dwHighDateTime=0x1d62420, ftLastAccessTime.dwLowDateTime=0x9afc4630, ftLastAccessTime.dwHighDateTime=0x1d62fc7, ftLastWriteTime.dwLowDateTime=0x9afc4630, ftLastWriteTime.dwHighDateTime=0x1d62fc7, nFileSizeHigh=0x0, nFileSizeLow=0x1464a)) returned 1 [0077.084] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\FQrk.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\fqrk.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.084] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.084] GetFileType (hFile=0x19c) returned 0x1 [0077.084] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.084] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6efe0 | out: pbBuffer=0x10c6efe0) returned 1 [0077.084] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eff0 | out: pbBuffer=0x10c6eff0) returned 1 [0077.084] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d59801 | out: pbBuffer=0x10d59801) returned 1 [0077.084] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d59a01 | out: pbBuffer=0x10d59a01) returned 1 [0077.085] ReadFile (in: hFile=0x19c, lpBuffer=0x10df0000, nNumberOfBytesToRead=0x1464a, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10df0000*, lpNumberOfBytesRead=0x10c89bf0*=0x1464a, lpOverlapped=0x0) returned 1 [0077.086] GetFileType (hFile=0x19c) returned 0x1 [0077.086] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.086] WriteFile (in: hFile=0x19c, lpBuffer=0x10e06000*, nNumberOfBytesToWrite=0x1464a, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e06000*, lpNumberOfBytesWritten=0x10c89bf0*=0x1464a, lpOverlapped=0x10c89bf4) returned 1 [0077.087] GetFileType (hFile=0x19c) returned 0x1 [0077.087] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1464a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.087] GetFileType (hFile=0x19c) returned 0x1 [0077.087] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.087] WriteFile (in: hFile=0x19c, lpBuffer=0x10d59900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d59900*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.087] GetFileType (hFile=0x19c) returned 0x1 [0077.087] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1464a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.087] GetFileType (hFile=0x19c) returned 0x1 [0077.087] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.087] WriteFile (in: hFile=0x19c, lpBuffer=0x10d59b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d59b00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.087] GetFileType (hFile=0x19c) returned 0x1 [0077.087] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1464a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.087] GetFileType (hFile=0x19c) returned 0x1 [0077.087] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.087] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.087] GetFileType (hFile=0x19c) returned 0x1 [0077.087] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1464a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.087] CloseHandle (hObject=0x19c) returned 1 [0077.087] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\FQrk.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\fqrk.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\FQrk.xlsx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\fqrk.xlsx.trapget"), dwFlags=0x1) returned 1 [0077.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\FeQe6zy8AfX.docx" (normalized: "c:\\users\\fd1hvy\\documents\\feqe6zy8afx.docx"), fInfoLevelId=0x0, lpFileInformation=0x10cd3d18 | out: lpFileInformation=0x10cd3d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfebe96f0, ftCreationTime.dwHighDateTime=0x1d5bf06, ftLastAccessTime.dwLowDateTime=0x3b1da890, ftLastAccessTime.dwHighDateTime=0x1d5fae2, ftLastWriteTime.dwLowDateTime=0x3b1da890, ftLastWriteTime.dwHighDateTime=0x1d5fae2, nFileSizeHigh=0x0, nFileSizeLow=0x178ce)) returned 1 [0077.088] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\FeQe6zy8AfX.docx" (normalized: "c:\\users\\fd1hvy\\documents\\feqe6zy8afx.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.088] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.088] GetFileType (hFile=0x19c) returned 0x1 [0077.088] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.088] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f0d0 | out: pbBuffer=0x10c6f0d0) returned 1 [0077.088] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f0e0 | out: pbBuffer=0x10c6f0e0) returned 1 [0077.088] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d59c01 | out: pbBuffer=0x10d59c01) returned 1 [0077.089] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d59e01 | out: pbBuffer=0x10d59e01) returned 1 [0077.089] ReadFile (in: hFile=0x19c, lpBuffer=0x10ef2000, nNumberOfBytesToRead=0x178ce, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10ef2000*, lpNumberOfBytesRead=0x10c89bf0*=0x178ce, lpOverlapped=0x0) returned 1 [0077.091] GetFileType (hFile=0x19c) returned 0x1 [0077.091] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.091] WriteFile (in: hFile=0x19c, lpBuffer=0x10f0a000*, nNumberOfBytesToWrite=0x178ce, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f0a000*, lpNumberOfBytesWritten=0x10c89bf0*=0x178ce, lpOverlapped=0x10c89bf4) returned 1 [0077.091] GetFileType (hFile=0x19c) returned 0x1 [0077.091] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x178ce, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.091] GetFileType (hFile=0x19c) returned 0x1 [0077.091] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.091] WriteFile (in: hFile=0x19c, lpBuffer=0x10d59d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d59d00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.091] GetFileType (hFile=0x19c) returned 0x1 [0077.091] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x178ce, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.092] GetFileType (hFile=0x19c) returned 0x1 [0077.092] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.092] WriteFile (in: hFile=0x19c, lpBuffer=0x10d59f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d59f00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.092] GetFileType (hFile=0x19c) returned 0x1 [0077.092] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x178ce, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.092] GetFileType (hFile=0x19c) returned 0x1 [0077.092] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.092] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.092] GetFileType (hFile=0x19c) returned 0x1 [0077.092] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x178ce, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.092] CloseHandle (hObject=0x19c) returned 1 [0077.092] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\FeQe6zy8AfX.docx" (normalized: "c:\\users\\fd1hvy\\documents\\feqe6zy8afx.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\FeQe6zy8AfX.docx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\feqe6zy8afx.docx.trapget"), dwFlags=0x1) returned 1 [0077.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ICGKeBWGuOXsK1A4QaO.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\icgkebwguoxsk1a4qao.pptx"), fInfoLevelId=0x0, lpFileInformation=0x10cd3e58 | out: lpFileInformation=0x10cd3e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef22a10, ftCreationTime.dwHighDateTime=0x1d5be6a, ftLastAccessTime.dwLowDateTime=0x2e661f40, ftLastAccessTime.dwHighDateTime=0x1d5c475, ftLastWriteTime.dwLowDateTime=0x2e661f40, ftLastWriteTime.dwHighDateTime=0x1d5c475, nFileSizeHigh=0x0, nFileSizeLow=0x9326)) returned 1 [0077.093] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ICGKeBWGuOXsK1A4QaO.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\icgkebwguoxsk1a4qao.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.093] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.093] GetFileType (hFile=0x19c) returned 0x1 [0077.093] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.093] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f1c0 | out: pbBuffer=0x10c6f1c0) returned 1 [0077.093] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f1d0 | out: pbBuffer=0x10c6f1d0) returned 1 [0077.093] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22001 | out: pbBuffer=0x10f22001) returned 1 [0077.093] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22201 | out: pbBuffer=0x10f22201) returned 1 [0077.094] ReadFile (in: hFile=0x19c, lpBuffer=0x10f2a000, nNumberOfBytesToRead=0x9326, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f2a000*, lpNumberOfBytesRead=0x10c89bf0*=0x9326, lpOverlapped=0x0) returned 1 [0077.095] GetFileType (hFile=0x19c) returned 0x1 [0077.095] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.095] WriteFile (in: hFile=0x19c, lpBuffer=0x10f34000*, nNumberOfBytesToWrite=0x9326, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f34000*, lpNumberOfBytesWritten=0x10c89bf0*=0x9326, lpOverlapped=0x10c89bf4) returned 1 [0077.095] GetFileType (hFile=0x19c) returned 0x1 [0077.095] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9326, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.095] GetFileType (hFile=0x19c) returned 0x1 [0077.095] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.095] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f22100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.095] GetFileType (hFile=0x19c) returned 0x1 [0077.095] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9326, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.095] GetFileType (hFile=0x19c) returned 0x1 [0077.095] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.095] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f22300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.096] GetFileType (hFile=0x19c) returned 0x1 [0077.096] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9326, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.096] GetFileType (hFile=0x19c) returned 0x1 [0077.096] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.096] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.096] GetFileType (hFile=0x19c) returned 0x1 [0077.096] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9326, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.096] CloseHandle (hObject=0x19c) returned 1 [0077.096] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\ICGKeBWGuOXsK1A4QaO.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\icgkebwguoxsk1a4qao.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\ICGKeBWGuOXsK1A4QaO.pptx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\icgkebwguoxsk1a4qao.pptx.trapget"), dwFlags=0x1) returned 1 [0077.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JC0ZW xEHGidpidTM6" (normalized: "c:\\users\\fd1hvy\\documents\\jc0zw xehgidpidtm6"), fInfoLevelId=0x0, lpFileInformation=0x10cd3f98 | out: lpFileInformation=0x10cd3f98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7c1b690, ftCreationTime.dwHighDateTime=0x1d62bba, ftLastAccessTime.dwLowDateTime=0xdba33460, ftLastAccessTime.dwHighDateTime=0x1d62409, ftLastWriteTime.dwLowDateTime=0xdba33460, ftLastWriteTime.dwHighDateTime=0x1d62409, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.096] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JC0ZW xEHGidpidTM6" (normalized: "c:\\users\\fd1hvy\\documents\\jc0zw xehgidpidtm6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.097] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JC0ZW xEHGidpidTM6\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7c1b690, ftCreationTime.dwHighDateTime=0x1d62bba, ftLastAccessTime.dwLowDateTime=0xdba33460, ftLastAccessTime.dwHighDateTime=0x1d62409, ftLastWriteTime.dwLowDateTime=0xdba33460, ftLastWriteTime.dwHighDateTime=0x1d62409, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efef8 [0077.097] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7c1b690, ftCreationTime.dwHighDateTime=0x1d62bba, ftLastAccessTime.dwLowDateTime=0xdba33460, ftLastAccessTime.dwHighDateTime=0x1d62409, ftLastWriteTime.dwLowDateTime=0xdba33460, ftLastWriteTime.dwHighDateTime=0x1d62409, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.097] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b5eff0, ftCreationTime.dwHighDateTime=0x1d62b42, ftLastAccessTime.dwLowDateTime=0x28832b80, ftLastAccessTime.dwHighDateTime=0x1d63109, ftLastWriteTime.dwLowDateTime=0x28832b80, ftLastWriteTime.dwHighDateTime=0x1d63109, nFileSizeHigh=0x0, nFileSizeLow=0x6e97, dwReserved0=0x0, dwReserved1=0x0, cFileName="hHpbyFXb1Kg3x5LCJ8C.ods", cAlternateFileName="HHPBYF~1.ODS")) returned 1 [0077.097] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa959b60, ftCreationTime.dwHighDateTime=0x1d628a5, ftLastAccessTime.dwLowDateTime=0xb77ea800, ftLastAccessTime.dwHighDateTime=0x1d62bbe, ftLastWriteTime.dwLowDateTime=0xb77ea800, ftLastWriteTime.dwHighDateTime=0x1d62bbe, nFileSizeHigh=0x0, nFileSizeLow=0x4218, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGsWVo.ods", cAlternateFileName="")) returned 1 [0077.097] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.097] FindClose (in: hFindFile=0x7efef8 | out: hFindFile=0x7efef8) returned 1 [0077.097] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JC0ZW xEHGidpidTM6\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\documents\\jc0zw xehgidpidtm6\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.101] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0077.101] GetFileType (hFile=0x19c) returned 0x1 [0077.101] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.101] WriteFile (in: hFile=0x19c, lpBuffer=0x10f40000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10f40000*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0077.102] GetFileType (hFile=0x19c) returned 0x1 [0077.102] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.102] CloseHandle (hObject=0x19c) returned 1 [0077.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JC0ZW xEHGidpidTM6\\RGsWVo.ods" (normalized: "c:\\users\\fd1hvy\\documents\\jc0zw xehgidpidtm6\\rgswvo.ods"), fInfoLevelId=0x0, lpFileInformation=0x110c60a8 | out: lpFileInformation=0x110c60a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa959b60, ftCreationTime.dwHighDateTime=0x1d628a5, ftLastAccessTime.dwLowDateTime=0xb77ea800, ftLastAccessTime.dwHighDateTime=0x1d62bbe, ftLastWriteTime.dwLowDateTime=0xb77ea800, ftLastWriteTime.dwHighDateTime=0x1d62bbe, nFileSizeHigh=0x0, nFileSizeLow=0x4218)) returned 1 [0077.102] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JC0ZW xEHGidpidTM6\\RGsWVo.ods" (normalized: "c:\\users\\fd1hvy\\documents\\jc0zw xehgidpidtm6\\rgswvo.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.102] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.102] GetFileType (hFile=0x19c) returned 0x1 [0077.102] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.102] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f300 | out: pbBuffer=0x10c6f300) returned 1 [0077.102] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f310 | out: pbBuffer=0x10c6f310) returned 1 [0077.102] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22401 | out: pbBuffer=0x10f22401) returned 1 [0077.103] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22601 | out: pbBuffer=0x10f22601) returned 1 [0077.103] ReadFile (in: hFile=0x19c, lpBuffer=0x10f4c000, nNumberOfBytesToRead=0x4218, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10f4c000*, lpNumberOfBytesRead=0x10c89b8c*=0x4218, lpOverlapped=0x0) returned 1 [0077.104] GetFileType (hFile=0x19c) returned 0x1 [0077.104] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.104] WriteFile (in: hFile=0x19c, lpBuffer=0x10f50800*, nNumberOfBytesToWrite=0x4218, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f50800*, lpNumberOfBytesWritten=0x10c89b8c*=0x4218, lpOverlapped=0x10c89b90) returned 1 [0077.104] GetFileType (hFile=0x19c) returned 0x1 [0077.104] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4218, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.104] GetFileType (hFile=0x19c) returned 0x1 [0077.104] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.104] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f22500*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.104] GetFileType (hFile=0x19c) returned 0x1 [0077.104] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4218, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.104] GetFileType (hFile=0x19c) returned 0x1 [0077.104] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.105] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f22700*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.105] GetFileType (hFile=0x19c) returned 0x1 [0077.105] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4218, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.105] GetFileType (hFile=0x19c) returned 0x1 [0077.105] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.105] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.105] GetFileType (hFile=0x19c) returned 0x1 [0077.105] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4218, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.105] CloseHandle (hObject=0x19c) returned 1 [0077.105] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\JC0ZW xEHGidpidTM6\\RGsWVo.ods" (normalized: "c:\\users\\fd1hvy\\documents\\jc0zw xehgidpidtm6\\rgswvo.ods"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\JC0ZW xEHGidpidTM6\\RGsWVo.ods.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\jc0zw xehgidpidtm6\\rgswvo.ods.trapget"), dwFlags=0x1) returned 1 [0077.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JC0ZW xEHGidpidTM6\\hHpbyFXb1Kg3x5LCJ8C.ods" (normalized: "c:\\users\\fd1hvy\\documents\\jc0zw xehgidpidtm6\\hhpbyfxb1kg3x5lcj8c.ods"), fInfoLevelId=0x0, lpFileInformation=0x110c61e8 | out: lpFileInformation=0x110c61e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b5eff0, ftCreationTime.dwHighDateTime=0x1d62b42, ftLastAccessTime.dwLowDateTime=0x28832b80, ftLastAccessTime.dwHighDateTime=0x1d63109, ftLastWriteTime.dwLowDateTime=0x28832b80, ftLastWriteTime.dwHighDateTime=0x1d63109, nFileSizeHigh=0x0, nFileSizeLow=0x6e97)) returned 1 [0077.105] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JC0ZW xEHGidpidTM6\\hHpbyFXb1Kg3x5LCJ8C.ods" (normalized: "c:\\users\\fd1hvy\\documents\\jc0zw xehgidpidtm6\\hhpbyfxb1kg3x5lcj8c.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.106] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.106] GetFileType (hFile=0x19c) returned 0x1 [0077.106] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.106] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f3e0 | out: pbBuffer=0x10c6f3e0) returned 1 [0077.106] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f3f0 | out: pbBuffer=0x10c6f3f0) returned 1 [0077.106] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22901 | out: pbBuffer=0x10f22901) returned 1 [0077.106] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22b01 | out: pbBuffer=0x10f22b01) returned 1 [0077.106] ReadFile (in: hFile=0x19c, lpBuffer=0x10f62000, nNumberOfBytesToRead=0x6e97, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10f62000*, lpNumberOfBytesRead=0x10c89b8c*=0x6e97, lpOverlapped=0x0) returned 1 [0077.107] GetFileType (hFile=0x19c) returned 0x1 [0077.107] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.107] WriteFile (in: hFile=0x19c, lpBuffer=0x10f69000*, nNumberOfBytesToWrite=0x6e97, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f69000*, lpNumberOfBytesWritten=0x10c89b8c*=0x6e97, lpOverlapped=0x10c89b90) returned 1 [0077.108] GetFileType (hFile=0x19c) returned 0x1 [0077.108] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6e97, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.108] GetFileType (hFile=0x19c) returned 0x1 [0077.108] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.108] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f22a00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.108] GetFileType (hFile=0x19c) returned 0x1 [0077.108] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6e97, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.108] GetFileType (hFile=0x19c) returned 0x1 [0077.108] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.108] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f22c00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.108] GetFileType (hFile=0x19c) returned 0x1 [0077.108] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6e97, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.108] GetFileType (hFile=0x19c) returned 0x1 [0077.108] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.108] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.108] GetFileType (hFile=0x19c) returned 0x1 [0077.108] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6e97, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.108] CloseHandle (hObject=0x19c) returned 1 [0077.109] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\JC0ZW xEHGidpidTM6\\hHpbyFXb1Kg3x5LCJ8C.ods" (normalized: "c:\\users\\fd1hvy\\documents\\jc0zw xehgidpidtm6\\hhpbyfxb1kg3x5lcj8c.ods"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\JC0ZW xEHGidpidTM6\\hHpbyFXb1Kg3x5LCJ8C.ods.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\jc0zw xehgidpidtm6\\hhpbyfxb1kg3x5lcj8c.ods.trapget"), dwFlags=0x1) returned 1 [0077.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Kmf4mSW5X7A.docx" (normalized: "c:\\users\\fd1hvy\\documents\\kmf4msw5x7a.docx"), fInfoLevelId=0x0, lpFileInformation=0x110c6328 | out: lpFileInformation=0x110c6328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eba5d40, ftCreationTime.dwHighDateTime=0x1d5c5fc, ftLastAccessTime.dwLowDateTime=0x7d329380, ftLastAccessTime.dwHighDateTime=0x1d5b79e, ftLastWriteTime.dwLowDateTime=0x7d329380, ftLastWriteTime.dwHighDateTime=0x1d5b79e, nFileSizeHigh=0x0, nFileSizeLow=0x653e)) returned 1 [0077.111] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Kmf4mSW5X7A.docx" (normalized: "c:\\users\\fd1hvy\\documents\\kmf4msw5x7a.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.111] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.111] GetFileType (hFile=0x19c) returned 0x1 [0077.111] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.111] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f4d0 | out: pbBuffer=0x10c6f4d0) returned 1 [0077.111] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f4e0 | out: pbBuffer=0x10c6f4e0) returned 1 [0077.111] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22d01 | out: pbBuffer=0x10f22d01) returned 1 [0077.112] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22f01 | out: pbBuffer=0x10f22f01) returned 1 [0077.112] ReadFile (in: hFile=0x19c, lpBuffer=0x10f7c000, nNumberOfBytesToRead=0x653e, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f7c000*, lpNumberOfBytesRead=0x10c89bf0*=0x653e, lpOverlapped=0x0) returned 1 [0077.113] GetFileType (hFile=0x19c) returned 0x1 [0077.113] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.113] WriteFile (in: hFile=0x19c, lpBuffer=0x10f82a80*, nNumberOfBytesToWrite=0x653e, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f82a80*, lpNumberOfBytesWritten=0x10c89bf0*=0x653e, lpOverlapped=0x10c89bf4) returned 1 [0077.113] GetFileType (hFile=0x19c) returned 0x1 [0077.113] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x653e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.113] GetFileType (hFile=0x19c) returned 0x1 [0077.113] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.113] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f22e00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.114] GetFileType (hFile=0x19c) returned 0x1 [0077.114] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x653e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.114] GetFileType (hFile=0x19c) returned 0x1 [0077.114] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.114] WriteFile (in: hFile=0x19c, lpBuffer=0x10f23000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f23000*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.114] GetFileType (hFile=0x19c) returned 0x1 [0077.114] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x653e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.114] GetFileType (hFile=0x19c) returned 0x1 [0077.114] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.114] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.114] GetFileType (hFile=0x19c) returned 0x1 [0077.114] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x653e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.114] CloseHandle (hObject=0x19c) returned 1 [0077.114] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Kmf4mSW5X7A.docx" (normalized: "c:\\users\\fd1hvy\\documents\\kmf4msw5x7a.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Kmf4mSW5X7A.docx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\kmf4msw5x7a.docx.trapget"), dwFlags=0x1) returned 1 [0077.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\MNDm695.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\mndm695.pptx"), fInfoLevelId=0x0, lpFileInformation=0x110c64b8 | out: lpFileInformation=0x110c64b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe148c9c0, ftCreationTime.dwHighDateTime=0x1d6263e, ftLastAccessTime.dwLowDateTime=0x38593b20, ftLastAccessTime.dwHighDateTime=0x1d60c2a, ftLastWriteTime.dwLowDateTime=0x38593b20, ftLastWriteTime.dwHighDateTime=0x1d60c2a, nFileSizeHigh=0x0, nFileSizeLow=0x136b2)) returned 1 [0077.115] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\MNDm695.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\mndm695.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.115] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.115] GetFileType (hFile=0x19c) returned 0x1 [0077.115] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.115] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f5c0 | out: pbBuffer=0x10c6f5c0) returned 1 [0077.115] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f5d0 | out: pbBuffer=0x10c6f5d0) returned 1 [0077.115] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f23101 | out: pbBuffer=0x10f23101) returned 1 [0077.115] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f23301 | out: pbBuffer=0x10f23301) returned 1 [0077.116] ReadFile (in: hFile=0x19c, lpBuffer=0x10f9c000, nNumberOfBytesToRead=0x136b2, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f9c000*, lpNumberOfBytesRead=0x10c89bf0*=0x136b2, lpOverlapped=0x0) returned 1 [0077.124] GetFileType (hFile=0x19c) returned 0x1 [0077.124] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.124] WriteFile (in: hFile=0x19c, lpBuffer=0x10fb0000*, nNumberOfBytesToWrite=0x136b2, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fb0000*, lpNumberOfBytesWritten=0x10c89bf0*=0x136b2, lpOverlapped=0x10c89bf4) returned 1 [0077.125] GetFileType (hFile=0x19c) returned 0x1 [0077.125] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x136b2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.125] GetFileType (hFile=0x19c) returned 0x1 [0077.125] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.125] WriteFile (in: hFile=0x19c, lpBuffer=0x10f23200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f23200*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.125] GetFileType (hFile=0x19c) returned 0x1 [0077.125] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x136b2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.125] GetFileType (hFile=0x19c) returned 0x1 [0077.125] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.125] WriteFile (in: hFile=0x19c, lpBuffer=0x10f23400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f23400*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.125] GetFileType (hFile=0x19c) returned 0x1 [0077.125] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x136b2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.125] GetFileType (hFile=0x19c) returned 0x1 [0077.125] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.125] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.126] GetFileType (hFile=0x19c) returned 0x1 [0077.126] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x136b2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.126] CloseHandle (hObject=0x19c) returned 1 [0077.126] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\MNDm695.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\mndm695.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\MNDm695.pptx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\mndm695.pptx.trapget"), dwFlags=0x1) returned 1 [0077.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music" (normalized: "c:\\users\\fd1hvy\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x110c65f8 | out: lpFileInformation=0x110c65f8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.127] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music" (normalized: "c:\\users\\fd1hvy\\documents\\my music"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.127] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0077.127] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10cc4a10*, nNumberOfCharsToWrite=0x32, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10cc4a10*, lpNumberOfCharsWritten=0x10c89754*=0x32) returned 1 [0077.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures" (normalized: "c:\\users\\fd1hvy\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x110c6648 | out: lpFileInformation=0x110c6648*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.137] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures" (normalized: "c:\\users\\fd1hvy\\documents\\my pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.137] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0077.137] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10cc4a80*, nNumberOfCharsToWrite=0x35, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10cc4a80*, lpNumberOfCharsWritten=0x10c89754*=0x35) returned 1 [0077.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x110c6698 | out: lpFileInformation=0x110c6698*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.152] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.152] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0278 [0077.152] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.152] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0077.152] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vssx", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0077.152] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0077.152] FindNextFileW (in: hFindFile=0x7f0278, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.152] FindClose (in: hFindFile=0x7f0278 | out: hFindFile=0x7f0278) returned 1 [0077.152] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.157] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0077.157] GetFileType (hFile=0x19c) returned 0x1 [0077.157] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.157] WriteFile (in: hFile=0x19c, lpBuffer=0x10f40900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10f40900*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0077.158] GetFileType (hFile=0x19c) returned 0x1 [0077.158] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.158] CloseHandle (hObject=0x19c) returned 1 [0077.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\favorites.vssx"), fInfoLevelId=0x0, lpFileInformation=0x110c6828 | out: lpFileInformation=0x110c6828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\favorites.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.158] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.158] GetFileType (hFile=0x19c) returned 0x1 [0077.158] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.158] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f720 | out: pbBuffer=0x10c6f720) returned 1 [0077.158] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f730 | out: pbBuffer=0x10c6f730) returned 1 [0077.158] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f23501 | out: pbBuffer=0x10f23501) returned 1 [0077.159] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f23701 | out: pbBuffer=0x10f23701) returned 1 [0077.159] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10cc2bd0*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x10c896e8, lpReserved=0x0 | out: lpBuffer=0x10cc2bd0*, lpNumberOfCharsWritten=0x10c896e8*=0x41) returned 1 [0077.170] CloseHandle (hObject=0x19c) returned 1 [0077.170] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\favorites.vssx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\Favorites.vssx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\favorites.vssx.trapget"), dwFlags=0x1) returned 1 [0077.171] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x110c6968 | out: lpFileInformation=0x110c6968*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.238] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x10c899a0 | out: lpFindFileData=0x10c899a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eff38 [0077.238] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.238] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0077.238] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.239] FindClose (in: hFindFile=0x7eff38 | out: hFindFile=0x7eff38) returned 1 [0077.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.239] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c04 | out: lpMode=0x10c89c04) returned 0 [0077.239] GetFileType (hFile=0x19c) returned 0x1 [0077.239] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0077.239] WriteFile (in: hFile=0x19c, lpBuffer=0x10f41200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89bf4, lpOverlapped=0x10c89bf8 | out: lpBuffer=0x10f41200*, lpNumberOfBytesWritten=0x10c89bf4*=0x464, lpOverlapped=0x10c89bf8) returned 1 [0077.240] GetFileType (hFile=0x19c) returned 0x1 [0077.240] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0077.240] CloseHandle (hObject=0x19c) returned 1 [0077.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x110c6a08 | out: lpFileInformation=0x110c6a08*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6)) returned 1 [0077.242] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.245] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0077.246] GetFileType (hFile=0x19c) returned 0x1 [0077.246] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0077.246] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f850 | out: pbBuffer=0x10c6f850) returned 1 [0077.246] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f860 | out: pbBuffer=0x10c6f860) returned 1 [0077.246] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f23901 | out: pbBuffer=0x10f23901) returned 1 [0077.246] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f23b01 | out: pbBuffer=0x10f23b01) returned 1 [0077.246] ReadFile (in: hFile=0x19c, lpBuffer=0x10fd8000, nNumberOfBytesToRead=0x74e6, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10fd8000*, lpNumberOfBytesRead=0x10c89b28*=0x74e6, lpOverlapped=0x0) returned 1 [0077.249] SetEvent (hEvent=0x158) returned 1 [0077.249] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0 [0077.254] SetEvent (hEvent=0x158) returned 1 [0077.254] SetEvent (hEvent=0x138) returned 1 [0077.254] SetEvent (hEvent=0x170) returned 1 [0077.254] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0077.262] SetEvent (hEvent=0x168) returned 1 [0077.262] SetEvent (hEvent=0x170) returned 1 [0077.262] GetFileType (hFile=0x19c) returned 0x1 [0077.262] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.262] WriteFile (in: hFile=0x19c, lpBuffer=0x10fe0000*, nNumberOfBytesToWrite=0x74e6, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10fe0000*, lpNumberOfBytesWritten=0x10c89b28*=0x74e6, lpOverlapped=0x10c89b2c) returned 1 [0077.263] GetFileType (hFile=0x19c) returned 0x1 [0077.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x74e6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.263] GetFileType (hFile=0x19c) returned 0x1 [0077.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.263] WriteFile (in: hFile=0x19c, lpBuffer=0x10f23a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f23a00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.263] GetFileType (hFile=0x19c) returned 0x1 [0077.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x74e6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.263] GetFileType (hFile=0x19c) returned 0x1 [0077.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.263] WriteFile (in: hFile=0x19c, lpBuffer=0x10f23c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f23c00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.263] GetFileType (hFile=0x19c) returned 0x1 [0077.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x74e6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.263] GetFileType (hFile=0x19c) returned 0x1 [0077.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.263] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0077.263] GetFileType (hFile=0x19c) returned 0x1 [0077.263] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x74e6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.263] CloseHandle (hObject=0x19c) returned 1 [0077.263] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico.trapget"), dwFlags=0x1) returned 1 [0077.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x110c6008 | out: lpFileInformation=0x110c6008*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0077.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.264] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.264] GetFileType (hFile=0x19c) returned 0x1 [0077.264] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.264] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0077.264] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e050 | out: pbBuffer=0x10c6e050) returned 1 [0077.265] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22101 | out: pbBuffer=0x10f22101) returned 1 [0077.265] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22301 | out: pbBuffer=0x10f22301) returned 1 [0077.265] ReadFile (in: hFile=0x19c, lpBuffer=0x10cec0e0, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10cec0e0*, lpNumberOfBytesRead=0x10c89b8c*=0xd8, lpOverlapped=0x0) returned 1 [0077.266] GetFileType (hFile=0x19c) returned 0x1 [0077.266] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.266] WriteFile (in: hFile=0x19c, lpBuffer=0x10cec1c0*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10cec1c0*, lpNumberOfBytesWritten=0x10c89b8c*=0xd8, lpOverlapped=0x10c89b90) returned 1 [0077.266] GetFileType (hFile=0x19c) returned 0x1 [0077.266] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.266] GetFileType (hFile=0x19c) returned 0x1 [0077.266] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.266] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f22200*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.266] GetFileType (hFile=0x19c) returned 0x1 [0077.266] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.266] GetFileType (hFile=0x19c) returned 0x1 [0077.266] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.266] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f22400*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.267] GetFileType (hFile=0x19c) returned 0x1 [0077.267] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.267] GetFileType (hFile=0x19c) returned 0x1 [0077.267] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.267] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.273] GetFileType (hFile=0x19c) returned 0x1 [0077.273] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.273] CloseHandle (hObject=0x19c) returned 1 [0077.273] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0077.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos" (normalized: "c:\\users\\fd1hvy\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x110c6148 | out: lpFileInformation=0x110c6148*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos" (normalized: "c:\\users\\fd1hvy\\documents\\my videos"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.274] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0077.274] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10cc4150*, nNumberOfCharsToWrite=0x33, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10cc4150*, lpNumberOfCharsWritten=0x10c89754*=0x33) returned 1 [0077.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\O7F5.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\o7f5.pptx"), fInfoLevelId=0x0, lpFileInformation=0x110c6198 | out: lpFileInformation=0x110c6198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442f8b60, ftCreationTime.dwHighDateTime=0x1d5c162, ftLastAccessTime.dwLowDateTime=0xba205210, ftLastAccessTime.dwHighDateTime=0x1d600d6, ftLastWriteTime.dwLowDateTime=0xba205210, ftLastWriteTime.dwHighDateTime=0x1d600d6, nFileSizeHigh=0x0, nFileSizeLow=0x584a)) returned 1 [0077.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\O7F5.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\o7f5.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.285] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.285] GetFileType (hFile=0x19c) returned 0x1 [0077.285] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.285] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e180 | out: pbBuffer=0x10c6e180) returned 1 [0077.285] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e220 | out: pbBuffer=0x10c6e220) returned 1 [0077.285] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22501 | out: pbBuffer=0x10f22501) returned 1 [0077.286] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22701 | out: pbBuffer=0x10f22701) returned 1 [0077.286] ReadFile (in: hFile=0x19c, lpBuffer=0x10cb6000, nNumberOfBytesToRead=0x584a, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10cb6000*, lpNumberOfBytesRead=0x10c89bf0*=0x584a, lpOverlapped=0x0) returned 1 [0077.287] GetFileType (hFile=0x19c) returned 0x1 [0077.287] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.287] WriteFile (in: hFile=0x19c, lpBuffer=0x10f92000*, nNumberOfBytesToWrite=0x584a, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f92000*, lpNumberOfBytesWritten=0x10c89bf0*=0x584a, lpOverlapped=0x10c89bf4) returned 1 [0077.288] GetFileType (hFile=0x19c) returned 0x1 [0077.288] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x584a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.288] GetFileType (hFile=0x19c) returned 0x1 [0077.288] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.288] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f22600*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.288] GetFileType (hFile=0x19c) returned 0x1 [0077.288] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x584a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.288] GetFileType (hFile=0x19c) returned 0x1 [0077.288] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.288] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f22800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.288] GetFileType (hFile=0x19c) returned 0x1 [0077.288] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x584a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.289] GetFileType (hFile=0x19c) returned 0x1 [0077.289] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.289] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.289] GetFileType (hFile=0x19c) returned 0x1 [0077.289] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x584a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.289] CloseHandle (hObject=0x19c) returned 1 [0077.289] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\O7F5.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\o7f5.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\O7F5.pptx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\o7f5.pptx.trapget"), dwFlags=0x1) returned 1 [0077.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x110c62d8 | out: lpFileInformation=0x110c62d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x67d00605, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.290] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.290] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efe78 [0077.290] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.290] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 1 [0077.290] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.290] FindClose (in: hFindFile=0x7efe78 | out: hFindFile=0x7efe78) returned 1 [0077.290] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.290] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0077.290] GetFileType (hFile=0x19c) returned 0x1 [0077.290] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.290] WriteFile (in: hFile=0x19c, lpBuffer=0x10cea480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10cea480*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0077.291] GetFileType (hFile=0x19c) returned 0x1 [0077.291] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.291] CloseHandle (hObject=0x19c) returned 1 [0077.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\kkcie@kdj.kd.pst"), fInfoLevelId=0x0, lpFileInformation=0x110c6378 | out: lpFileInformation=0x110c6378*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1 [0077.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\kkcie@kdj.kd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.292] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.292] GetFileType (hFile=0x19c) returned 0x1 [0077.292] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.292] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e4b0 | out: pbBuffer=0x10c6e4b0) returned 1 [0077.292] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e4c0 | out: pbBuffer=0x10c6e4c0) returned 1 [0077.292] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22a01 | out: pbBuffer=0x10f22a01) returned 1 [0077.292] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22c01 | out: pbBuffer=0x10f22c01) returned 1 [0077.293] ReadFile (in: hFile=0x19c, lpBuffer=0x10f24000, nNumberOfBytesToRead=0x42400, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10f24000*, lpNumberOfBytesRead=0x10c89b8c*=0x42400, lpOverlapped=0x0) returned 1 [0077.302] GetFileType (hFile=0x19c) returned 0x1 [0077.302] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.302] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x42400, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89b8c*=0x42400, lpOverlapped=0x10c89b90) returned 1 [0077.304] GetFileType (hFile=0x19c) returned 0x1 [0077.304] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x42400, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.304] GetFileType (hFile=0x19c) returned 0x1 [0077.304] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.304] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f22b00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.305] GetFileType (hFile=0x19c) returned 0x1 [0077.305] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x42400, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.305] GetFileType (hFile=0x19c) returned 0x1 [0077.305] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.305] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f22d00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.305] GetFileType (hFile=0x19c) returned 0x1 [0077.305] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x42400, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.305] GetFileType (hFile=0x19c) returned 0x1 [0077.305] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.305] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.305] GetFileType (hFile=0x19c) returned 0x1 [0077.305] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x42400, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.305] CloseHandle (hObject=0x19c) returned 1 [0077.305] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\kkcie@kdj.kd.pst"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\kkcie@kdj.kd.pst.trapget"), dwFlags=0x1) returned 1 [0077.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_gzhpkFjb -ZW.docx" (normalized: "c:\\users\\fd1hvy\\documents\\_gzhpkfjb -zw.docx"), fInfoLevelId=0x0, lpFileInformation=0x110c64b8 | out: lpFileInformation=0x110c64b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c264830, ftCreationTime.dwHighDateTime=0x1d5b388, ftLastAccessTime.dwLowDateTime=0xe746dc0, ftLastAccessTime.dwHighDateTime=0x1d62fac, ftLastWriteTime.dwLowDateTime=0xe746dc0, ftLastWriteTime.dwHighDateTime=0x1d62fac, nFileSizeHigh=0x0, nFileSizeLow=0xbe33)) returned 1 [0077.306] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_gzhpkFjb -ZW.docx" (normalized: "c:\\users\\fd1hvy\\documents\\_gzhpkfjb -zw.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.306] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.306] GetFileType (hFile=0x19c) returned 0x1 [0077.306] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.306] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e5a0 | out: pbBuffer=0x10c6e5a0) returned 1 [0077.306] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e5b0 | out: pbBuffer=0x10c6e5b0) returned 1 [0077.306] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f22e01 | out: pbBuffer=0x10f22e01) returned 1 [0077.307] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f23001 | out: pbBuffer=0x10f23001) returned 1 [0077.307] ReadFile (in: hFile=0x19c, lpBuffer=0x10fc8000, nNumberOfBytesToRead=0xbe33, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fc8000*, lpNumberOfBytesRead=0x10c89bf0*=0xbe33, lpOverlapped=0x0) returned 1 [0077.308] GetFileType (hFile=0x19c) returned 0x1 [0077.308] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.308] WriteFile (in: hFile=0x19c, lpBuffer=0x11092000*, nNumberOfBytesToWrite=0xbe33, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x11092000*, lpNumberOfBytesWritten=0x10c89bf0*=0xbe33, lpOverlapped=0x10c89bf4) returned 1 [0077.308] GetFileType (hFile=0x19c) returned 0x1 [0077.308] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe33, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.308] GetFileType (hFile=0x19c) returned 0x1 [0077.308] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.309] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f22f00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.309] GetFileType (hFile=0x19c) returned 0x1 [0077.309] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe33, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.309] GetFileType (hFile=0x19c) returned 0x1 [0077.309] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.309] WriteFile (in: hFile=0x19c, lpBuffer=0x10f23100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f23100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.309] GetFileType (hFile=0x19c) returned 0x1 [0077.309] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe33, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.309] GetFileType (hFile=0x19c) returned 0x1 [0077.309] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.309] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.309] GetFileType (hFile=0x19c) returned 0x1 [0077.309] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe33, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.309] CloseHandle (hObject=0x19c) returned 1 [0077.310] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_gzhpkFjb -ZW.docx" (normalized: "c:\\users\\fd1hvy\\documents\\_gzhpkfjb -zw.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_gzhpkFjb -ZW.docx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\_gzhpkfjb -zw.docx.trapget"), dwFlags=0x1) returned 1 [0077.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x110c65f8 | out: lpFileInformation=0x110c65f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0077.310] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\documents\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.310] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.310] GetFileType (hFile=0x19c) returned 0x1 [0077.310] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.310] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e700 | out: pbBuffer=0x10c6e700) returned 1 [0077.310] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e710 | out: pbBuffer=0x10c6e710) returned 1 [0077.310] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f23201 | out: pbBuffer=0x10f23201) returned 1 [0077.311] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f23401 | out: pbBuffer=0x10f23401) returned 1 [0077.311] ReadFile (in: hFile=0x19c, lpBuffer=0x10fc7040, nNumberOfBytesToRead=0x192, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fc7040*, lpNumberOfBytesRead=0x10c89bf0*=0x192, lpOverlapped=0x0) returned 1 [0077.312] GetFileType (hFile=0x19c) returned 0x1 [0077.312] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.312] WriteFile (in: hFile=0x19c, lpBuffer=0x10fc71e0*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fc71e0*, lpNumberOfBytesWritten=0x10c89bf0*=0x192, lpOverlapped=0x10c89bf4) returned 1 [0077.312] GetFileType (hFile=0x19c) returned 0x1 [0077.312] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x192, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.312] GetFileType (hFile=0x19c) returned 0x1 [0077.312] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.312] WriteFile (in: hFile=0x19c, lpBuffer=0x10f23300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f23300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.312] GetFileType (hFile=0x19c) returned 0x1 [0077.313] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x192, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.313] GetFileType (hFile=0x19c) returned 0x1 [0077.313] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.313] WriteFile (in: hFile=0x19c, lpBuffer=0x10f23500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f23500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.320] GetFileType (hFile=0x19c) returned 0x1 [0077.320] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x192, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.320] GetFileType (hFile=0x19c) returned 0x1 [0077.320] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.320] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.320] GetFileType (hFile=0x19c) returned 0x1 [0077.320] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x192, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.321] CloseHandle (hObject=0x19c) returned 1 [0077.321] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0077.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd"), fInfoLevelId=0x0, lpFileInformation=0x110c67d8 | out: lpFileInformation=0x110c67d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad929230, ftCreationTime.dwHighDateTime=0x1d6287f, ftLastAccessTime.dwLowDateTime=0x5a4d72b0, ftLastAccessTime.dwHighDateTime=0x1d62fa6, ftLastWriteTime.dwLowDateTime=0x5a4d72b0, ftLastWriteTime.dwHighDateTime=0x1d62fa6, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0077.321] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.321] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad929230, ftCreationTime.dwHighDateTime=0x1d6287f, ftLastAccessTime.dwLowDateTime=0x5a4d72b0, ftLastAccessTime.dwHighDateTime=0x1d62fa6, ftLastWriteTime.dwLowDateTime=0x5a4d72b0, ftLastWriteTime.dwHighDateTime=0x1d62fa6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0077.322] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad929230, ftCreationTime.dwHighDateTime=0x1d6287f, ftLastAccessTime.dwLowDateTime=0x5a4d72b0, ftLastAccessTime.dwHighDateTime=0x1d62fa6, ftLastWriteTime.dwLowDateTime=0x5a4d72b0, ftLastWriteTime.dwHighDateTime=0x1d62fa6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.322] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4f4b80, ftCreationTime.dwHighDateTime=0x1d62b38, ftLastAccessTime.dwLowDateTime=0xbc0bd490, ftLastAccessTime.dwHighDateTime=0x1d62558, ftLastWriteTime.dwLowDateTime=0xbc0bd490, ftLastWriteTime.dwHighDateTime=0x1d62558, nFileSizeHigh=0x0, nFileSizeLow=0x9149, dwReserved0=0x0, dwReserved1=0x0, cFileName="fYuN q6KQDgPwqu8rsH.doc", cAlternateFileName="FYUNQ6~1.DOC")) returned 1 [0077.322] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7994f960, ftCreationTime.dwHighDateTime=0x1d62f4a, ftLastAccessTime.dwLowDateTime=0xc9c2cad0, ftLastAccessTime.dwHighDateTime=0x1d62733, ftLastWriteTime.dwLowDateTime=0xc9c2cad0, ftLastWriteTime.dwHighDateTime=0x1d62733, nFileSizeHigh=0x0, nFileSizeLow=0xc69b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RNL9dZRhrzOLNWBDm.ods", cAlternateFileName="RNL9DZ~1.ODS")) returned 1 [0077.322] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a4bfce0, ftCreationTime.dwHighDateTime=0x1d62577, ftLastAccessTime.dwLowDateTime=0xb06a1790, ftLastAccessTime.dwHighDateTime=0x1d62b71, ftLastWriteTime.dwLowDateTime=0xb06a1790, ftLastWriteTime.dwHighDateTime=0x1d62b71, nFileSizeHigh=0x0, nFileSizeLow=0x10b3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="uX9yLNM7xMKaKx.ods", cAlternateFileName="UX9YLN~1.ODS")) returned 1 [0077.322] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf738310, ftCreationTime.dwHighDateTime=0x1d631ad, ftLastAccessTime.dwLowDateTime=0x1c232440, ftLastAccessTime.dwHighDateTime=0x1d6278f, ftLastWriteTime.dwLowDateTime=0x1c232440, ftLastWriteTime.dwHighDateTime=0x1d6278f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ysQZMUycG 1f", cAlternateFileName="YSQZMU~1")) returned 1 [0077.322] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.322] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0077.322] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.324] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0077.324] GetFileType (hFile=0x19c) returned 0x1 [0077.324] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.324] WriteFile (in: hFile=0x19c, lpBuffer=0x10cead80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10cead80*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0077.325] GetFileType (hFile=0x19c) returned 0x1 [0077.325] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.325] CloseHandle (hObject=0x19c) returned 1 [0077.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\RNL9dZRhrzOLNWBDm.ods" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\rnl9dzrhrzolnwbdm.ods"), fInfoLevelId=0x0, lpFileInformation=0x110c69b8 | out: lpFileInformation=0x110c69b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7994f960, ftCreationTime.dwHighDateTime=0x1d62f4a, ftLastAccessTime.dwLowDateTime=0xc9c2cad0, ftLastAccessTime.dwHighDateTime=0x1d62733, ftLastWriteTime.dwLowDateTime=0xc9c2cad0, ftLastWriteTime.dwHighDateTime=0x1d62733, nFileSizeHigh=0x0, nFileSizeLow=0xc69b)) returned 1 [0077.325] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\RNL9dZRhrzOLNWBDm.ods" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\rnl9dzrhrzolnwbdm.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.326] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.326] GetFileType (hFile=0x19c) returned 0x1 [0077.326] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.326] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e840 | out: pbBuffer=0x10c6e840) returned 1 [0077.326] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e850 | out: pbBuffer=0x10c6e850) returned 1 [0077.326] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f23601 | out: pbBuffer=0x10f23601) returned 1 [0077.326] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f23801 | out: pbBuffer=0x10f23801) returned 1 [0077.326] ReadFile (in: hFile=0x19c, lpBuffer=0x10fe8000, nNumberOfBytesToRead=0xc69b, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10fe8000*, lpNumberOfBytesRead=0x10c89b8c*=0xc69b, lpOverlapped=0x0) returned 1 [0077.328] GetFileType (hFile=0x19c) returned 0x1 [0077.328] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.328] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0xc69b, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89b8c*=0xc69b, lpOverlapped=0x10c89b90) returned 1 [0077.328] GetFileType (hFile=0x19c) returned 0x1 [0077.328] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc69b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.328] GetFileType (hFile=0x19c) returned 0x1 [0077.328] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.328] WriteFile (in: hFile=0x19c, lpBuffer=0x10f23700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f23700*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.328] GetFileType (hFile=0x19c) returned 0x1 [0077.328] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc69b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.328] GetFileType (hFile=0x19c) returned 0x1 [0077.328] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.328] WriteFile (in: hFile=0x19c, lpBuffer=0x10f23900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f23900*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.328] GetFileType (hFile=0x19c) returned 0x1 [0077.328] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc69b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.328] GetFileType (hFile=0x19c) returned 0x1 [0077.329] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.329] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.329] GetFileType (hFile=0x19c) returned 0x1 [0077.329] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc69b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.329] CloseHandle (hObject=0x19c) returned 1 [0077.329] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\RNL9dZRhrzOLNWBDm.ods" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\rnl9dzrhrzolnwbdm.ods"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\RNL9dZRhrzOLNWBDm.ods.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\rnl9dzrhrzolnwbdm.ods.trapget"), dwFlags=0x1) returned 1 [0077.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\fYuN q6KQDgPwqu8rsH.doc" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\fyun q6kqdgpwqu8rsh.doc"), fInfoLevelId=0x0, lpFileInformation=0x110c6b48 | out: lpFileInformation=0x110c6b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4f4b80, ftCreationTime.dwHighDateTime=0x1d62b38, ftLastAccessTime.dwLowDateTime=0xbc0bd490, ftLastAccessTime.dwHighDateTime=0x1d62558, ftLastWriteTime.dwLowDateTime=0xbc0bd490, ftLastWriteTime.dwHighDateTime=0x1d62558, nFileSizeHigh=0x0, nFileSizeLow=0x9149)) returned 1 [0077.329] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\fYuN q6KQDgPwqu8rsH.doc" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\fyun q6kqdgpwqu8rsh.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.329] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.329] GetFileType (hFile=0x19c) returned 0x1 [0077.330] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.330] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e920 | out: pbBuffer=0x10c6e920) returned 1 [0077.330] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e930 | out: pbBuffer=0x10c6e930) returned 1 [0077.330] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f23d01 | out: pbBuffer=0x10f23d01) returned 1 [0077.330] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f23f01 | out: pbBuffer=0x10f23f01) returned 1 [0077.330] ReadFile (in: hFile=0x19c, lpBuffer=0x1107a000, nNumberOfBytesToRead=0x9149, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x1107a000*, lpNumberOfBytesRead=0x10c89b8c*=0x9149, lpOverlapped=0x0) returned 1 [0077.331] GetFileType (hFile=0x19c) returned 0x1 [0077.331] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.331] WriteFile (in: hFile=0x19c, lpBuffer=0x10f78000*, nNumberOfBytesToWrite=0x9149, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f78000*, lpNumberOfBytesWritten=0x10c89b8c*=0x9149, lpOverlapped=0x10c89b90) returned 1 [0077.332] GetFileType (hFile=0x19c) returned 0x1 [0077.332] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9149, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.332] GetFileType (hFile=0x19c) returned 0x1 [0077.332] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.332] WriteFile (in: hFile=0x19c, lpBuffer=0x10f23e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f23e00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.332] GetFileType (hFile=0x19c) returned 0x1 [0077.332] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9149, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.332] GetFileType (hFile=0x19c) returned 0x1 [0077.332] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.332] WriteFile (in: hFile=0x19c, lpBuffer=0x110be000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x110be000*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.332] GetFileType (hFile=0x19c) returned 0x1 [0077.332] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9149, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.332] GetFileType (hFile=0x19c) returned 0x1 [0077.332] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.332] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.332] GetFileType (hFile=0x19c) returned 0x1 [0077.332] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9149, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.332] CloseHandle (hObject=0x19c) returned 1 [0077.332] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\fYuN q6KQDgPwqu8rsH.doc" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\fyun q6kqdgpwqu8rsh.doc"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\fYuN q6KQDgPwqu8rsH.doc.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\fyun q6kqdgpwqu8rsh.doc.trapget"), dwFlags=0x1) returned 1 [0077.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\uX9yLNM7xMKaKx.ods" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ux9ylnm7xmkakx.ods"), fInfoLevelId=0x0, lpFileInformation=0x110c6c88 | out: lpFileInformation=0x110c6c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a4bfce0, ftCreationTime.dwHighDateTime=0x1d62577, ftLastAccessTime.dwLowDateTime=0xb06a1790, ftLastAccessTime.dwHighDateTime=0x1d62b71, ftLastWriteTime.dwLowDateTime=0xb06a1790, ftLastWriteTime.dwHighDateTime=0x1d62b71, nFileSizeHigh=0x0, nFileSizeLow=0x10b3d)) returned 1 [0077.333] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\uX9yLNM7xMKaKx.ods" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ux9ylnm7xmkakx.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.333] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.333] GetFileType (hFile=0x19c) returned 0x1 [0077.333] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.333] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea10 | out: pbBuffer=0x10c6ea10) returned 1 [0077.333] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea20 | out: pbBuffer=0x10c6ea20) returned 1 [0077.333] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110be201 | out: pbBuffer=0x110be201) returned 1 [0077.334] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110be401 | out: pbBuffer=0x110be401) returned 1 [0077.334] ReadFile (in: hFile=0x19c, lpBuffer=0x10f9a000, nNumberOfBytesToRead=0x10b3d, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10f9a000*, lpNumberOfBytesRead=0x10c89b8c*=0x10b3d, lpOverlapped=0x0) returned 1 [0077.335] GetFileType (hFile=0x19c) returned 0x1 [0077.335] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.336] WriteFile (in: hFile=0x19c, lpBuffer=0x10fac000*, nNumberOfBytesToWrite=0x10b3d, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10fac000*, lpNumberOfBytesWritten=0x10c89b8c*=0x10b3d, lpOverlapped=0x10c89b90) returned 1 [0077.336] GetFileType (hFile=0x19c) returned 0x1 [0077.336] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10b3d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.336] GetFileType (hFile=0x19c) returned 0x1 [0077.336] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.336] WriteFile (in: hFile=0x19c, lpBuffer=0x110be300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x110be300*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.336] GetFileType (hFile=0x19c) returned 0x1 [0077.336] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10b3d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.336] GetFileType (hFile=0x19c) returned 0x1 [0077.336] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.336] WriteFile (in: hFile=0x19c, lpBuffer=0x110be500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x110be500*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.336] GetFileType (hFile=0x19c) returned 0x1 [0077.336] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10b3d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.336] GetFileType (hFile=0x19c) returned 0x1 [0077.336] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.336] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.337] GetFileType (hFile=0x19c) returned 0x1 [0077.337] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10b3d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.337] CloseHandle (hObject=0x19c) returned 1 [0077.337] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\uX9yLNM7xMKaKx.ods" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ux9ylnm7xmkakx.ods"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\uX9yLNM7xMKaKx.ods.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ux9ylnm7xmkakx.ods.trapget"), dwFlags=0x1) returned 1 [0077.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f"), fInfoLevelId=0x0, lpFileInformation=0x110c6dc8 | out: lpFileInformation=0x110c6dc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf738310, ftCreationTime.dwHighDateTime=0x1d631ad, ftLastAccessTime.dwLowDateTime=0x1c232440, ftLastAccessTime.dwHighDateTime=0x1d6278f, ftLastWriteTime.dwLowDateTime=0x1c232440, ftLastWriteTime.dwHighDateTime=0x1d6278f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0077.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.337] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\*", lpFindFileData=0x10c899a0 | out: lpFindFileData=0x10c899a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf738310, ftCreationTime.dwHighDateTime=0x1d631ad, ftLastAccessTime.dwLowDateTime=0x1c232440, ftLastAccessTime.dwHighDateTime=0x1d6278f, ftLastWriteTime.dwLowDateTime=0x1c232440, ftLastWriteTime.dwHighDateTime=0x1d6278f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eff78 [0077.337] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf738310, ftCreationTime.dwHighDateTime=0x1d631ad, ftLastAccessTime.dwLowDateTime=0x1c232440, ftLastAccessTime.dwHighDateTime=0x1d6278f, ftLastWriteTime.dwLowDateTime=0x1c232440, ftLastWriteTime.dwHighDateTime=0x1d6278f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.338] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x420c2e90, ftCreationTime.dwHighDateTime=0x1d623ac, ftLastAccessTime.dwLowDateTime=0x4c23fd80, ftLastAccessTime.dwHighDateTime=0x1d627d6, ftLastWriteTime.dwLowDateTime=0x4c23fd80, ftLastWriteTime.dwHighDateTime=0x1d627d6, nFileSizeHigh=0x0, nFileSizeLow=0x14a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="im82.ppt", cAlternateFileName="")) returned 1 [0077.338] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a2490, ftCreationTime.dwHighDateTime=0x1d6239c, ftLastAccessTime.dwLowDateTime=0x3edf6a40, ftLastAccessTime.dwHighDateTime=0x1d629ef, ftLastWriteTime.dwLowDateTime=0x3edf6a40, ftLastWriteTime.dwHighDateTime=0x1d629ef, nFileSizeHigh=0x0, nFileSizeLow=0x1873f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LcFlv.ppt", cAlternateFileName="")) returned 1 [0077.338] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd36a71b0, ftCreationTime.dwHighDateTime=0x1d6280e, ftLastAccessTime.dwLowDateTime=0xad3592c0, ftLastAccessTime.dwHighDateTime=0x1d6304e, ftLastWriteTime.dwLowDateTime=0xad3592c0, ftLastWriteTime.dwHighDateTime=0x1d6304e, nFileSizeHigh=0x0, nFileSizeLow=0x5cb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="mOLbgYDI-h7wKVr31k.pps", cAlternateFileName="MOLBGY~1.PPS")) returned 1 [0077.338] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x487fdc0, ftCreationTime.dwHighDateTime=0x1d62b44, ftLastAccessTime.dwLowDateTime=0x41e687d0, ftLastAccessTime.dwHighDateTime=0x1d62bf4, ftLastWriteTime.dwLowDateTime=0x41e687d0, ftLastWriteTime.dwHighDateTime=0x1d62bf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="O LSx", cAlternateFileName="OLSX~1")) returned 1 [0077.338] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef685520, ftCreationTime.dwHighDateTime=0x1d62882, ftLastAccessTime.dwLowDateTime=0x914cead0, ftLastAccessTime.dwHighDateTime=0x1d631e4, ftLastWriteTime.dwLowDateTime=0x914cead0, ftLastWriteTime.dwHighDateTime=0x1d631e4, nFileSizeHigh=0x0, nFileSizeLow=0x13cd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tKxFmNO.odt", cAlternateFileName="")) returned 1 [0077.338] FindNextFileW (in: hFindFile=0x7eff78, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.338] FindClose (in: hFindFile=0x7eff78 | out: hFindFile=0x7eff78) returned 1 [0077.338] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.338] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c04 | out: lpMode=0x10c89c04) returned 0 [0077.338] GetFileType (hFile=0x19c) returned 0x1 [0077.338] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0077.338] WriteFile (in: hFile=0x19c, lpBuffer=0x10ceb680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89bf4, lpOverlapped=0x10c89bf8 | out: lpBuffer=0x10ceb680*, lpNumberOfBytesWritten=0x10c89bf4*=0x464, lpOverlapped=0x10c89bf8) returned 1 [0077.339] GetFileType (hFile=0x19c) returned 0x1 [0077.339] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0077.339] CloseHandle (hObject=0x19c) returned 1 [0077.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\LcFlv.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\lcflv.ppt"), fInfoLevelId=0x0, lpFileInformation=0x110c6fa8 | out: lpFileInformation=0x110c6fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a2490, ftCreationTime.dwHighDateTime=0x1d6239c, ftLastAccessTime.dwLowDateTime=0x3edf6a40, ftLastAccessTime.dwHighDateTime=0x1d629ef, ftLastWriteTime.dwLowDateTime=0x3edf6a40, ftLastWriteTime.dwHighDateTime=0x1d629ef, nFileSizeHigh=0x0, nFileSizeLow=0x1873f)) returned 1 [0077.339] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\LcFlv.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\lcflv.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.339] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0077.339] GetFileType (hFile=0x19c) returned 0x1 [0077.339] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0077.339] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eb80 | out: pbBuffer=0x10c6eb80) returned 1 [0077.340] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eb90 | out: pbBuffer=0x10c6eb90) returned 1 [0077.340] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110be601 | out: pbBuffer=0x110be601) returned 1 [0077.340] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110be801 | out: pbBuffer=0x110be801) returned 1 [0077.341] ReadFile (in: hFile=0x19c, lpBuffer=0x11042000, nNumberOfBytesToRead=0x1873f, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x11042000*, lpNumberOfBytesRead=0x10c89b28*=0x1873f, lpOverlapped=0x0) returned 1 [0077.345] GetFileType (hFile=0x19c) returned 0x1 [0077.345] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.345] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee8000*, nNumberOfBytesToWrite=0x1873f, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ee8000*, lpNumberOfBytesWritten=0x10c89b28*=0x1873f, lpOverlapped=0x10c89b2c) returned 1 [0077.346] GetFileType (hFile=0x19c) returned 0x1 [0077.346] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1873f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.346] GetFileType (hFile=0x19c) returned 0x1 [0077.346] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.346] WriteFile (in: hFile=0x19c, lpBuffer=0x110be700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x110be700*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.346] GetFileType (hFile=0x19c) returned 0x1 [0077.346] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1873f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.346] GetFileType (hFile=0x19c) returned 0x1 [0077.346] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.346] WriteFile (in: hFile=0x19c, lpBuffer=0x110be900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x110be900*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.346] GetFileType (hFile=0x19c) returned 0x1 [0077.346] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1873f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.346] GetFileType (hFile=0x19c) returned 0x1 [0077.346] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.346] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0077.346] GetFileType (hFile=0x19c) returned 0x1 [0077.347] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1873f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.347] CloseHandle (hObject=0x19c) returned 1 [0077.347] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\LcFlv.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\lcflv.ppt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\LcFlv.ppt.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\lcflv.ppt.trapget"), dwFlags=0x1) returned 1 [0077.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx"), fInfoLevelId=0x0, lpFileInformation=0x110c70e8 | out: lpFileInformation=0x110c70e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x487fdc0, ftCreationTime.dwHighDateTime=0x1d62b44, ftLastAccessTime.dwLowDateTime=0x41e687d0, ftLastAccessTime.dwHighDateTime=0x1d62bf4, ftLastWriteTime.dwLowDateTime=0x41e687d0, ftLastWriteTime.dwHighDateTime=0x1d62bf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.347] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.347] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\*", lpFindFileData=0x10c8993c | out: lpFindFileData=0x10c8993c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x487fdc0, ftCreationTime.dwHighDateTime=0x1d62b44, ftLastAccessTime.dwLowDateTime=0x41e687d0, ftLastAccessTime.dwHighDateTime=0x1d62bf4, ftLastWriteTime.dwLowDateTime=0x41e687d0, ftLastWriteTime.dwHighDateTime=0x1d62bf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcb8 [0077.348] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c8995c | out: lpFindFileData=0x10c8995c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x487fdc0, ftCreationTime.dwHighDateTime=0x1d62b44, ftLastAccessTime.dwLowDateTime=0x41e687d0, ftLastAccessTime.dwHighDateTime=0x1d62bf4, ftLastWriteTime.dwLowDateTime=0x41e687d0, ftLastWriteTime.dwHighDateTime=0x1d62bf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.348] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c8995c | out: lpFindFileData=0x10c8995c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a13b600, ftCreationTime.dwHighDateTime=0x1d630c1, ftLastAccessTime.dwLowDateTime=0xb9478df0, ftLastAccessTime.dwHighDateTime=0x1d62b0a, ftLastWriteTime.dwLowDateTime=0xb9478df0, ftLastWriteTime.dwHighDateTime=0x1d62b0a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0TQQyllBa9evA", cAlternateFileName="0TQQYL~1")) returned 1 [0077.348] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c8995c | out: lpFindFileData=0x10c8995c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b905b0, ftCreationTime.dwHighDateTime=0x1d626f2, ftLastAccessTime.dwLowDateTime=0x36e32e00, ftLastAccessTime.dwHighDateTime=0x1d626e6, ftLastWriteTime.dwLowDateTime=0x36e32e00, ftLastWriteTime.dwHighDateTime=0x1d626e6, nFileSizeHigh=0x0, nFileSizeLow=0x2543, dwReserved0=0x0, dwReserved1=0x0, cFileName="dafSY_vV 1.ods", cAlternateFileName="DAFSY_~1.ODS")) returned 1 [0077.348] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c8995c | out: lpFindFileData=0x10c8995c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.348] FindClose (in: hFindFile=0x7efcb8 | out: hFindFile=0x7efcb8) returned 1 [0077.348] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.355] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ba0 | out: lpMode=0x10c89ba0) returned 0 [0077.355] GetFileType (hFile=0x19c) returned 0x1 [0077.355] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b78 | out: lpNewFilePointer=0x0) returned 1 [0077.355] WriteFile (in: hFile=0x19c, lpBuffer=0x10f88000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89b90, lpOverlapped=0x10c89b94 | out: lpBuffer=0x10f88000*, lpNumberOfBytesWritten=0x10c89b90*=0x464, lpOverlapped=0x10c89b94) returned 1 [0077.356] GetFileType (hFile=0x19c) returned 0x1 [0077.356] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b78 | out: lpNewFilePointer=0x0) returned 1 [0077.356] CloseHandle (hObject=0x19c) returned 1 [0077.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva"), fInfoLevelId=0x0, lpFileInformation=0x110c71d8 | out: lpFileInformation=0x110c71d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a13b600, ftCreationTime.dwHighDateTime=0x1d630c1, ftLastAccessTime.dwLowDateTime=0xb9478df0, ftLastAccessTime.dwHighDateTime=0x1d62b0a, ftLastWriteTime.dwLowDateTime=0xb9478df0, ftLastWriteTime.dwHighDateTime=0x1d62b0a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0077.356] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.356] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\*", lpFindFileData=0x10c898d8 | out: lpFindFileData=0x10c898d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a13b600, ftCreationTime.dwHighDateTime=0x1d630c1, ftLastAccessTime.dwLowDateTime=0xb9478df0, ftLastAccessTime.dwHighDateTime=0x1d62b0a, ftLastWriteTime.dwLowDateTime=0xb9478df0, ftLastWriteTime.dwHighDateTime=0x1d62b0a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f01f8 [0077.356] FindNextFileW (in: hFindFile=0x7f01f8, lpFindFileData=0x10c898f8 | out: lpFindFileData=0x10c898f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a13b600, ftCreationTime.dwHighDateTime=0x1d630c1, ftLastAccessTime.dwLowDateTime=0xb9478df0, ftLastAccessTime.dwHighDateTime=0x1d62b0a, ftLastWriteTime.dwLowDateTime=0xb9478df0, ftLastWriteTime.dwHighDateTime=0x1d62b0a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.356] FindNextFileW (in: hFindFile=0x7f01f8, lpFindFileData=0x10c898f8 | out: lpFindFileData=0x10c898f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4579e110, ftCreationTime.dwHighDateTime=0x1d62fc0, ftLastAccessTime.dwLowDateTime=0xf33add10, ftLastAccessTime.dwHighDateTime=0x1d62e79, ftLastWriteTime.dwLowDateTime=0xf33add10, ftLastWriteTime.dwHighDateTime=0x1d62e79, nFileSizeHigh=0x0, nFileSizeLow=0xa468, dwReserved0=0x0, dwReserved1=0x0, cFileName="2k_DWsCeC.docx", cAlternateFileName="2K_DWS~1.DOC")) returned 1 [0077.356] FindNextFileW (in: hFindFile=0x7f01f8, lpFindFileData=0x10c898f8 | out: lpFindFileData=0x10c898f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1f424c0, ftCreationTime.dwHighDateTime=0x1d625cb, ftLastAccessTime.dwLowDateTime=0xa5d64d20, ftLastAccessTime.dwHighDateTime=0x1d62c71, ftLastWriteTime.dwLowDateTime=0xa5d64d20, ftLastWriteTime.dwHighDateTime=0x1d62c71, nFileSizeHigh=0x0, nFileSizeLow=0x613b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3rljYQm6j4G_IZ.xls", cAlternateFileName="3RLJYQ~1.XLS")) returned 1 [0077.357] FindNextFileW (in: hFindFile=0x7f01f8, lpFindFileData=0x10c898f8 | out: lpFindFileData=0x10c898f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cf1d5e0, ftCreationTime.dwHighDateTime=0x1d62c37, ftLastAccessTime.dwLowDateTime=0xe4267250, ftLastAccessTime.dwHighDateTime=0x1d62a30, ftLastWriteTime.dwLowDateTime=0xe4267250, ftLastWriteTime.dwHighDateTime=0x1d62a30, nFileSizeHigh=0x0, nFileSizeLow=0x1f0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngWtk4VwGJ.ots", cAlternateFileName="NGWTK4~1.OTS")) returned 1 [0077.357] FindNextFileW (in: hFindFile=0x7f01f8, lpFindFileData=0x10c898f8 | out: lpFindFileData=0x10c898f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c2f8cb0, ftCreationTime.dwHighDateTime=0x1d62f1d, ftLastAccessTime.dwLowDateTime=0xb540acc0, ftLastAccessTime.dwHighDateTime=0x1d62f1d, ftLastWriteTime.dwLowDateTime=0xb540acc0, ftLastWriteTime.dwHighDateTime=0x1d62f1d, nFileSizeHigh=0x0, nFileSizeLow=0x14005, dwReserved0=0x0, dwReserved1=0x0, cFileName="XpUYvP0BeD5E.odt", cAlternateFileName="XPUYVP~1.ODT")) returned 1 [0077.357] FindNextFileW (in: hFindFile=0x7f01f8, lpFindFileData=0x10c898f8 | out: lpFindFileData=0x10c898f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.357] FindClose (in: hFindFile=0x7f01f8 | out: hFindFile=0x7f01f8) returned 1 [0077.357] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.357] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b3c | out: lpMode=0x10c89b3c) returned 0 [0077.357] GetFileType (hFile=0x19c) returned 0x1 [0077.357] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b14 | out: lpNewFilePointer=0x0) returned 1 [0077.357] WriteFile (in: hFile=0x19c, lpBuffer=0x10f88900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89b2c, lpOverlapped=0x10c89b30 | out: lpBuffer=0x10f88900*, lpNumberOfBytesWritten=0x10c89b2c*=0x464, lpOverlapped=0x10c89b30) returned 1 [0077.358] GetFileType (hFile=0x19c) returned 0x1 [0077.358] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b14 | out: lpNewFilePointer=0x0) returned 1 [0077.358] CloseHandle (hObject=0x19c) returned 1 [0077.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\2k_DWsCeC.docx" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\2k_dwscec.docx"), fInfoLevelId=0x0, lpFileInformation=0x110c7368 | out: lpFileInformation=0x110c7368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4579e110, ftCreationTime.dwHighDateTime=0x1d62fc0, ftLastAccessTime.dwLowDateTime=0xf33add10, ftLastAccessTime.dwHighDateTime=0x1d62e79, ftLastWriteTime.dwLowDateTime=0xf33add10, ftLastWriteTime.dwHighDateTime=0x1d62e79, nFileSizeHigh=0x0, nFileSizeLow=0xa468)) returned 1 [0077.358] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\2k_DWsCeC.docx" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\2k_dwscec.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.358] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89a70 | out: lpMode=0x10c89a70) returned 0 [0077.358] GetFileType (hFile=0x19c) returned 0x1 [0077.358] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89aa0 | out: lpFileInformation=0x10c89aa0) returned 1 [0077.358] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed00 | out: pbBuffer=0x10c6ed00) returned 1 [0077.358] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed10 | out: pbBuffer=0x10c6ed10) returned 1 [0077.358] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110bed01 | out: pbBuffer=0x110bed01) returned 1 [0077.359] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110bef01 | out: pbBuffer=0x110bef01) returned 1 [0077.359] ReadFile (in: hFile=0x19c, lpBuffer=0x11062000, nNumberOfBytesToRead=0xa468, lpNumberOfBytesRead=0x10c89a60, lpOverlapped=0x0 | out: lpBuffer=0x11062000*, lpNumberOfBytesRead=0x10c89a60*=0xa468, lpOverlapped=0x0) returned 1 [0077.360] GetFileType (hFile=0x19c) returned 0x1 [0077.360] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.360] WriteFile (in: hFile=0x19c, lpBuffer=0x10f02000*, nNumberOfBytesToWrite=0xa468, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x10f02000*, lpNumberOfBytesWritten=0x10c89a60*=0xa468, lpOverlapped=0x10c89a64) returned 1 [0077.360] GetFileType (hFile=0x19c) returned 0x1 [0077.360] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa468, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.360] GetFileType (hFile=0x19c) returned 0x1 [0077.360] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.360] WriteFile (in: hFile=0x19c, lpBuffer=0x110bee00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x110bee00*, lpNumberOfBytesWritten=0x10c89a60*=0x100, lpOverlapped=0x10c89a64) returned 1 [0077.361] GetFileType (hFile=0x19c) returned 0x1 [0077.361] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa468, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.361] GetFileType (hFile=0x19c) returned 0x1 [0077.361] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.361] WriteFile (in: hFile=0x19c, lpBuffer=0x110bf000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x110bf000*, lpNumberOfBytesWritten=0x10c89a60*=0x100, lpOverlapped=0x10c89a64) returned 1 [0077.361] GetFileType (hFile=0x19c) returned 0x1 [0077.361] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa468, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.361] GetFileType (hFile=0x19c) returned 0x1 [0077.361] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.361] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89b64*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x10c89b64*, lpNumberOfBytesWritten=0x10c89a60*=0x7, lpOverlapped=0x10c89a64) returned 1 [0077.361] GetFileType (hFile=0x19c) returned 0x1 [0077.361] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa468, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.361] CloseHandle (hObject=0x19c) returned 1 [0077.361] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\2k_DWsCeC.docx" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\2k_dwscec.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\2k_DWsCeC.docx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\2k_dwscec.docx.trapget"), dwFlags=0x1) returned 1 [0077.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\3rljYQm6j4G_IZ.xls" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\3rljyqm6j4g_iz.xls"), fInfoLevelId=0x0, lpFileInformation=0x110c74a8 | out: lpFileInformation=0x110c74a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1f424c0, ftCreationTime.dwHighDateTime=0x1d625cb, ftLastAccessTime.dwLowDateTime=0xa5d64d20, ftLastAccessTime.dwHighDateTime=0x1d62c71, ftLastWriteTime.dwLowDateTime=0xa5d64d20, ftLastWriteTime.dwHighDateTime=0x1d62c71, nFileSizeHigh=0x0, nFileSizeLow=0x613b)) returned 1 [0077.362] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\3rljYQm6j4G_IZ.xls" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\3rljyqm6j4g_iz.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.362] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89a70 | out: lpMode=0x10c89a70) returned 0 [0077.362] GetFileType (hFile=0x19c) returned 0x1 [0077.362] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89aa0 | out: lpFileInformation=0x10c89aa0) returned 1 [0077.362] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6edf0 | out: pbBuffer=0x10c6edf0) returned 1 [0077.362] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee00 | out: pbBuffer=0x10c6ee00) returned 1 [0077.362] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110bf101 | out: pbBuffer=0x110bf101) returned 1 [0077.362] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110bf301 | out: pbBuffer=0x110bf301) returned 1 [0077.363] ReadFile (in: hFile=0x19c, lpBuffer=0x10e6c000, nNumberOfBytesToRead=0x613b, lpNumberOfBytesRead=0x10c89a60, lpOverlapped=0x0 | out: lpBuffer=0x10e6c000*, lpNumberOfBytesRead=0x10c89a60*=0x613b, lpOverlapped=0x0) returned 1 [0077.363] GetFileType (hFile=0x19c) returned 0x1 [0077.363] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.363] WriteFile (in: hFile=0x19c, lpBuffer=0x10e72a80*, nNumberOfBytesToWrite=0x613b, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x10e72a80*, lpNumberOfBytesWritten=0x10c89a60*=0x613b, lpOverlapped=0x10c89a64) returned 1 [0077.364] GetFileType (hFile=0x19c) returned 0x1 [0077.364] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x613b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.364] GetFileType (hFile=0x19c) returned 0x1 [0077.364] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.364] WriteFile (in: hFile=0x19c, lpBuffer=0x110bf200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x110bf200*, lpNumberOfBytesWritten=0x10c89a60*=0x100, lpOverlapped=0x10c89a64) returned 1 [0077.364] GetFileType (hFile=0x19c) returned 0x1 [0077.364] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x613b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.364] GetFileType (hFile=0x19c) returned 0x1 [0077.364] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.364] WriteFile (in: hFile=0x19c, lpBuffer=0x110bf400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x110bf400*, lpNumberOfBytesWritten=0x10c89a60*=0x100, lpOverlapped=0x10c89a64) returned 1 [0077.364] GetFileType (hFile=0x19c) returned 0x1 [0077.364] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x613b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.364] GetFileType (hFile=0x19c) returned 0x1 [0077.364] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.364] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89b64*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x10c89b64*, lpNumberOfBytesWritten=0x10c89a60*=0x7, lpOverlapped=0x10c89a64) returned 1 [0077.364] GetFileType (hFile=0x19c) returned 0x1 [0077.364] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x613b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.364] CloseHandle (hObject=0x19c) returned 1 [0077.365] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\3rljYQm6j4G_IZ.xls" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\3rljyqm6j4g_iz.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\3rljYQm6j4G_IZ.xls.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\3rljyqm6j4g_iz.xls.trapget"), dwFlags=0x1) returned 1 [0077.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\XpUYvP0BeD5E.odt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\xpuyvp0bed5e.odt"), fInfoLevelId=0x0, lpFileInformation=0x110c75e8 | out: lpFileInformation=0x110c75e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c2f8cb0, ftCreationTime.dwHighDateTime=0x1d62f1d, ftLastAccessTime.dwLowDateTime=0xb540acc0, ftLastAccessTime.dwHighDateTime=0x1d62f1d, ftLastWriteTime.dwLowDateTime=0xb540acc0, ftLastWriteTime.dwHighDateTime=0x1d62f1d, nFileSizeHigh=0x0, nFileSizeLow=0x14005)) returned 1 [0077.365] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\XpUYvP0BeD5E.odt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\xpuyvp0bed5e.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.365] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89a70 | out: lpMode=0x10c89a70) returned 0 [0077.365] GetFileType (hFile=0x19c) returned 0x1 [0077.365] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89aa0 | out: lpFileInformation=0x10c89aa0) returned 1 [0077.365] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eee0 | out: pbBuffer=0x10c6eee0) returned 1 [0077.365] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eef0 | out: pbBuffer=0x10c6eef0) returned 1 [0077.365] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110bf501 | out: pbBuffer=0x110bf501) returned 1 [0077.366] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110bf701 | out: pbBuffer=0x110bf701) returned 1 [0077.366] ReadFile (in: hFile=0x19c, lpBuffer=0x10e80000, nNumberOfBytesToRead=0x14005, lpNumberOfBytesRead=0x10c89a60, lpOverlapped=0x0 | out: lpBuffer=0x10e80000*, lpNumberOfBytesRead=0x10c89a60*=0x14005, lpOverlapped=0x0) returned 1 [0077.368] GetFileType (hFile=0x19c) returned 0x1 [0077.368] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.368] WriteFile (in: hFile=0x19c, lpBuffer=0x10e96000*, nNumberOfBytesToWrite=0x14005, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x10e96000*, lpNumberOfBytesWritten=0x10c89a60*=0x14005, lpOverlapped=0x10c89a64) returned 1 [0077.368] GetFileType (hFile=0x19c) returned 0x1 [0077.368] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14005, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.368] GetFileType (hFile=0x19c) returned 0x1 [0077.368] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.368] WriteFile (in: hFile=0x19c, lpBuffer=0x110bf600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x110bf600*, lpNumberOfBytesWritten=0x10c89a60*=0x100, lpOverlapped=0x10c89a64) returned 1 [0077.368] GetFileType (hFile=0x19c) returned 0x1 [0077.368] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14005, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.368] GetFileType (hFile=0x19c) returned 0x1 [0077.368] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.368] WriteFile (in: hFile=0x19c, lpBuffer=0x110bf800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x110bf800*, lpNumberOfBytesWritten=0x10c89a60*=0x100, lpOverlapped=0x10c89a64) returned 1 [0077.368] GetFileType (hFile=0x19c) returned 0x1 [0077.368] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14005, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.368] GetFileType (hFile=0x19c) returned 0x1 [0077.368] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.369] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89b64*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x10c89b64*, lpNumberOfBytesWritten=0x10c89a60*=0x7, lpOverlapped=0x10c89a64) returned 1 [0077.369] GetFileType (hFile=0x19c) returned 0x1 [0077.369] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14005, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.369] CloseHandle (hObject=0x19c) returned 1 [0077.369] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\XpUYvP0BeD5E.odt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\xpuyvp0bed5e.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\XpUYvP0BeD5E.odt.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\xpuyvp0bed5e.odt.trapget"), dwFlags=0x1) returned 1 [0077.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\ngWtk4VwGJ.ots" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\ngwtk4vwgj.ots"), fInfoLevelId=0x0, lpFileInformation=0x110c7728 | out: lpFileInformation=0x110c7728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cf1d5e0, ftCreationTime.dwHighDateTime=0x1d62c37, ftLastAccessTime.dwLowDateTime=0xe4267250, ftLastAccessTime.dwHighDateTime=0x1d62a30, ftLastWriteTime.dwLowDateTime=0xe4267250, ftLastWriteTime.dwHighDateTime=0x1d62a30, nFileSizeHigh=0x0, nFileSizeLow=0x1f0d)) returned 1 [0077.369] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\ngWtk4VwGJ.ots" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\ngwtk4vwgj.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.369] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89a70 | out: lpMode=0x10c89a70) returned 0 [0077.369] GetFileType (hFile=0x19c) returned 0x1 [0077.369] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89aa0 | out: lpFileInformation=0x10c89aa0) returned 1 [0077.370] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6efc0 | out: pbBuffer=0x10c6efc0) returned 1 [0077.370] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6efd0 | out: pbBuffer=0x10c6efd0) returned 1 [0077.370] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110bf901 | out: pbBuffer=0x110bf901) returned 1 [0077.370] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110bfb01 | out: pbBuffer=0x110bfb01) returned 1 [0077.370] ReadFile (in: hFile=0x19c, lpBuffer=0x10eb4000, nNumberOfBytesToRead=0x1f0d, lpNumberOfBytesRead=0x10c89a60, lpOverlapped=0x0 | out: lpBuffer=0x10eb4000*, lpNumberOfBytesRead=0x10c89a60*=0x1f0d, lpOverlapped=0x0) returned 1 [0077.371] GetFileType (hFile=0x19c) returned 0x1 [0077.371] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.371] WriteFile (in: hFile=0x19c, lpBuffer=0x10eb6000*, nNumberOfBytesToWrite=0x1f0d, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x10eb6000*, lpNumberOfBytesWritten=0x10c89a60*=0x1f0d, lpOverlapped=0x10c89a64) returned 1 [0077.371] GetFileType (hFile=0x19c) returned 0x1 [0077.371] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f0d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.371] GetFileType (hFile=0x19c) returned 0x1 [0077.371] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.371] WriteFile (in: hFile=0x19c, lpBuffer=0x110bfa00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x110bfa00*, lpNumberOfBytesWritten=0x10c89a60*=0x100, lpOverlapped=0x10c89a64) returned 1 [0077.372] GetFileType (hFile=0x19c) returned 0x1 [0077.372] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f0d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.372] GetFileType (hFile=0x19c) returned 0x1 [0077.372] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.372] WriteFile (in: hFile=0x19c, lpBuffer=0x110bfc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x110bfc00*, lpNumberOfBytesWritten=0x10c89a60*=0x100, lpOverlapped=0x10c89a64) returned 1 [0077.372] GetFileType (hFile=0x19c) returned 0x1 [0077.372] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f0d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.372] GetFileType (hFile=0x19c) returned 0x1 [0077.372] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.372] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89b64*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89a60, lpOverlapped=0x10c89a64 | out: lpBuffer=0x10c89b64*, lpNumberOfBytesWritten=0x10c89a60*=0x7, lpOverlapped=0x10c89a64) returned 1 [0077.372] GetFileType (hFile=0x19c) returned 0x1 [0077.372] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f0d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89a48 | out: lpNewFilePointer=0x0) returned 1 [0077.372] CloseHandle (hObject=0x19c) returned 1 [0077.372] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\ngWtk4VwGJ.ots" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\ngwtk4vwgj.ots"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\0TQQyllBa9evA\\ngWtk4VwGJ.ots.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\0tqqyllba9eva\\ngwtk4vwgj.ots.trapget"), dwFlags=0x1) returned 1 [0077.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\dafSY_vV 1.ods" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\dafsy_vv 1.ods"), fInfoLevelId=0x0, lpFileInformation=0x110c78b8 | out: lpFileInformation=0x110c78b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b905b0, ftCreationTime.dwHighDateTime=0x1d626f2, ftLastAccessTime.dwLowDateTime=0x36e32e00, ftLastAccessTime.dwHighDateTime=0x1d626e6, ftLastWriteTime.dwLowDateTime=0x36e32e00, ftLastWriteTime.dwHighDateTime=0x1d626e6, nFileSizeHigh=0x0, nFileSizeLow=0x2543)) returned 1 [0077.373] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\dafSY_vV 1.ods" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\dafsy_vv 1.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.373] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ad4 | out: lpMode=0x10c89ad4) returned 0 [0077.373] GetFileType (hFile=0x19c) returned 0x1 [0077.373] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b04 | out: lpFileInformation=0x10c89b04) returned 1 [0077.373] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f0b0 | out: pbBuffer=0x10c6f0b0) returned 1 [0077.373] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f0c0 | out: pbBuffer=0x10c6f0c0) returned 1 [0077.373] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110bfd01 | out: pbBuffer=0x110bfd01) returned 1 [0077.373] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x110bff01 | out: pbBuffer=0x110bff01) returned 1 [0077.374] ReadFile (in: hFile=0x19c, lpBuffer=0x10ec6000, nNumberOfBytesToRead=0x2543, lpNumberOfBytesRead=0x10c89ac4, lpOverlapped=0x0 | out: lpBuffer=0x10ec6000*, lpNumberOfBytesRead=0x10c89ac4*=0x2543, lpOverlapped=0x0) returned 1 [0077.374] GetFileType (hFile=0x19c) returned 0x1 [0077.374] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89aac | out: lpNewFilePointer=0x0) returned 1 [0077.375] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec8600*, nNumberOfBytesToWrite=0x2543, lpNumberOfBytesWritten=0x10c89ac4, lpOverlapped=0x10c89ac8 | out: lpBuffer=0x10ec8600*, lpNumberOfBytesWritten=0x10c89ac4*=0x2543, lpOverlapped=0x10c89ac8) returned 1 [0077.375] GetFileType (hFile=0x19c) returned 0x1 [0077.375] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2543, lpNewFilePointer=0x0, dwMoveMethod=0x10c89aac | out: lpNewFilePointer=0x0) returned 1 [0077.375] GetFileType (hFile=0x19c) returned 0x1 [0077.375] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89aac | out: lpNewFilePointer=0x0) returned 1 [0077.375] WriteFile (in: hFile=0x19c, lpBuffer=0x110bfe00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89ac4, lpOverlapped=0x10c89ac8 | out: lpBuffer=0x110bfe00*, lpNumberOfBytesWritten=0x10c89ac4*=0x100, lpOverlapped=0x10c89ac8) returned 1 [0077.375] GetFileType (hFile=0x19c) returned 0x1 [0077.375] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2543, lpNewFilePointer=0x0, dwMoveMethod=0x10c89aac | out: lpNewFilePointer=0x0) returned 1 [0077.376] GetFileType (hFile=0x19c) returned 0x1 [0077.376] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89aac | out: lpNewFilePointer=0x0) returned 1 [0077.376] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec4000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89ac4, lpOverlapped=0x10c89ac8 | out: lpBuffer=0x10ec4000*, lpNumberOfBytesWritten=0x10c89ac4*=0x100, lpOverlapped=0x10c89ac8) returned 1 [0077.376] GetFileType (hFile=0x19c) returned 0x1 [0077.376] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2543, lpNewFilePointer=0x0, dwMoveMethod=0x10c89aac | out: lpNewFilePointer=0x0) returned 1 [0077.376] GetFileType (hFile=0x19c) returned 0x1 [0077.376] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89aac | out: lpNewFilePointer=0x0) returned 1 [0077.376] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89bc8*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89ac4, lpOverlapped=0x10c89ac8 | out: lpBuffer=0x10c89bc8*, lpNumberOfBytesWritten=0x10c89ac4*=0x7, lpOverlapped=0x10c89ac8) returned 1 [0077.376] GetFileType (hFile=0x19c) returned 0x1 [0077.376] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2543, lpNewFilePointer=0x0, dwMoveMethod=0x10c89aac | out: lpNewFilePointer=0x0) returned 1 [0077.376] CloseHandle (hObject=0x19c) returned 1 [0077.376] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\dafSY_vV 1.ods" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\dafsy_vv 1.ods"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\O LSx\\dafSY_vV 1.ods.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\o lsx\\dafsy_vv 1.ods.trapget"), dwFlags=0x1) returned 1 [0077.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\im82.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\im82.ppt"), fInfoLevelId=0x0, lpFileInformation=0x110c79f8 | out: lpFileInformation=0x110c79f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x420c2e90, ftCreationTime.dwHighDateTime=0x1d623ac, ftLastAccessTime.dwLowDateTime=0x4c23fd80, ftLastAccessTime.dwHighDateTime=0x1d627d6, ftLastWriteTime.dwLowDateTime=0x4c23fd80, ftLastWriteTime.dwHighDateTime=0x1d627d6, nFileSizeHigh=0x0, nFileSizeLow=0x14a94)) returned 1 [0077.377] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\im82.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\im82.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.377] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0077.377] GetFileType (hFile=0x19c) returned 0x1 [0077.377] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0077.377] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f1a0 | out: pbBuffer=0x10c6f1a0) returned 1 [0077.377] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f1b0 | out: pbBuffer=0x10c6f1b0) returned 1 [0077.377] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec4101 | out: pbBuffer=0x10ec4101) returned 1 [0077.378] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec4301 | out: pbBuffer=0x10ec4301) returned 1 [0077.378] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfa000, nNumberOfBytesToRead=0x14a94, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10cfa000*, lpNumberOfBytesRead=0x10c89b28*=0x14a94, lpOverlapped=0x0) returned 1 [0077.379] GetFileType (hFile=0x19c) returned 0x1 [0077.380] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.380] WriteFile (in: hFile=0x19c, lpBuffer=0x10d10000*, nNumberOfBytesToWrite=0x14a94, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10d10000*, lpNumberOfBytesWritten=0x10c89b28*=0x14a94, lpOverlapped=0x10c89b2c) returned 1 [0077.380] GetFileType (hFile=0x19c) returned 0x1 [0077.380] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14a94, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.380] GetFileType (hFile=0x19c) returned 0x1 [0077.380] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.380] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec4200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ec4200*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.380] GetFileType (hFile=0x19c) returned 0x1 [0077.380] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14a94, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.380] GetFileType (hFile=0x19c) returned 0x1 [0077.380] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.380] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec4400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ec4400*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.380] GetFileType (hFile=0x19c) returned 0x1 [0077.380] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14a94, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.380] GetFileType (hFile=0x19c) returned 0x1 [0077.380] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.380] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0077.381] GetFileType (hFile=0x19c) returned 0x1 [0077.381] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14a94, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.381] CloseHandle (hObject=0x19c) returned 1 [0077.381] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\im82.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\im82.ppt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\im82.ppt.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\im82.ppt.trapget"), dwFlags=0x1) returned 1 [0077.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\mOLbgYDI-h7wKVr31k.pps" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\molbgydi-h7wkvr31k.pps"), fInfoLevelId=0x0, lpFileInformation=0x110c7b38 | out: lpFileInformation=0x110c7b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd36a71b0, ftCreationTime.dwHighDateTime=0x1d6280e, ftLastAccessTime.dwLowDateTime=0xad3592c0, ftLastAccessTime.dwHighDateTime=0x1d6304e, ftLastWriteTime.dwLowDateTime=0xad3592c0, ftLastWriteTime.dwHighDateTime=0x1d6304e, nFileSizeHigh=0x0, nFileSizeLow=0x5cb3)) returned 1 [0077.381] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\mOLbgYDI-h7wKVr31k.pps" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\molbgydi-h7wkvr31k.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.381] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0077.381] GetFileType (hFile=0x19c) returned 0x1 [0077.381] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0077.382] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f290 | out: pbBuffer=0x10c6f290) returned 1 [0077.382] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f2a0 | out: pbBuffer=0x10c6f2a0) returned 1 [0077.382] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec4601 | out: pbBuffer=0x10ec4601) returned 1 [0077.382] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec4801 | out: pbBuffer=0x10ec4801) returned 1 [0077.382] ReadFile (in: hFile=0x19c, lpBuffer=0x10d26000, nNumberOfBytesToRead=0x5cb3, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10d26000*, lpNumberOfBytesRead=0x10c89b28*=0x5cb3, lpOverlapped=0x0) returned 1 [0077.383] GetFileType (hFile=0x19c) returned 0x1 [0077.383] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.383] WriteFile (in: hFile=0x19c, lpBuffer=0x10d2c000*, nNumberOfBytesToWrite=0x5cb3, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10d2c000*, lpNumberOfBytesWritten=0x10c89b28*=0x5cb3, lpOverlapped=0x10c89b2c) returned 1 [0077.383] GetFileType (hFile=0x19c) returned 0x1 [0077.383] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5cb3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.383] GetFileType (hFile=0x19c) returned 0x1 [0077.384] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.384] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec4700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ec4700*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.384] GetFileType (hFile=0x19c) returned 0x1 [0077.384] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5cb3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.384] GetFileType (hFile=0x19c) returned 0x1 [0077.384] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.384] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec4900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ec4900*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.384] GetFileType (hFile=0x19c) returned 0x1 [0077.384] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5cb3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.384] GetFileType (hFile=0x19c) returned 0x1 [0077.384] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.384] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0077.390] GetFileType (hFile=0x19c) returned 0x1 [0077.390] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5cb3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.390] CloseHandle (hObject=0x19c) returned 1 [0077.390] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\mOLbgYDI-h7wKVr31k.pps" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\molbgydi-h7wkvr31k.pps"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\mOLbgYDI-h7wKVr31k.pps.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\molbgydi-h7wkvr31k.pps.trapget"), dwFlags=0x1) returned 1 [0077.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\tKxFmNO.odt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\tkxfmno.odt"), fInfoLevelId=0x0, lpFileInformation=0x110c7c78 | out: lpFileInformation=0x110c7c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef685520, ftCreationTime.dwHighDateTime=0x1d62882, ftLastAccessTime.dwLowDateTime=0x914cead0, ftLastAccessTime.dwHighDateTime=0x1d631e4, ftLastWriteTime.dwLowDateTime=0x914cead0, ftLastWriteTime.dwHighDateTime=0x1d631e4, nFileSizeHigh=0x0, nFileSizeLow=0x13cd9)) returned 1 [0077.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\tKxFmNO.odt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\tkxfmno.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.391] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0077.391] GetFileType (hFile=0x19c) returned 0x1 [0077.391] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0077.391] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f370 | out: pbBuffer=0x10c6f370) returned 1 [0077.391] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f380 | out: pbBuffer=0x10c6f380) returned 1 [0077.391] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec4a01 | out: pbBuffer=0x10ec4a01) returned 1 [0077.392] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec4c01 | out: pbBuffer=0x10ec4c01) returned 1 [0077.392] ReadFile (in: hFile=0x19c, lpBuffer=0x10d34000, nNumberOfBytesToRead=0x13cd9, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10d34000*, lpNumberOfBytesRead=0x10c89b28*=0x13cd9, lpOverlapped=0x0) returned 1 [0077.393] GetFileType (hFile=0x19c) returned 0x1 [0077.394] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.394] WriteFile (in: hFile=0x19c, lpBuffer=0x10d48000*, nNumberOfBytesToWrite=0x13cd9, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10d48000*, lpNumberOfBytesWritten=0x10c89b28*=0x13cd9, lpOverlapped=0x10c89b2c) returned 1 [0077.394] GetFileType (hFile=0x19c) returned 0x1 [0077.394] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13cd9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.394] GetFileType (hFile=0x19c) returned 0x1 [0077.394] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.394] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec4b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ec4b00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.394] GetFileType (hFile=0x19c) returned 0x1 [0077.394] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13cd9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.394] GetFileType (hFile=0x19c) returned 0x1 [0077.394] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.394] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec4d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ec4d00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0077.394] GetFileType (hFile=0x19c) returned 0x1 [0077.394] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13cd9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.394] GetFileType (hFile=0x19c) returned 0x1 [0077.394] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.394] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0077.395] GetFileType (hFile=0x19c) returned 0x1 [0077.395] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13cd9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0077.395] CloseHandle (hObject=0x19c) returned 1 [0077.395] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\tKxFmNO.odt" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\tkxfmno.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\j2QD\\ysQZMUycG 1f\\tKxFmNO.odt.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\j2qd\\ysqzmuycg 1f\\tkxfmno.odt.trapget"), dwFlags=0x1) returned 1 [0077.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\k4xu4W0H0tZSl83p3" (normalized: "c:\\users\\fd1hvy\\documents\\k4xu4w0h0tzsl83p3"), fInfoLevelId=0x0, lpFileInformation=0x110c7db8 | out: lpFileInformation=0x110c7db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e8c00, ftCreationTime.dwHighDateTime=0x1d63311, ftLastAccessTime.dwLowDateTime=0x4bab9540, ftLastAccessTime.dwHighDateTime=0x1d6273e, ftLastWriteTime.dwLowDateTime=0x4bab9540, ftLastWriteTime.dwHighDateTime=0x1d6273e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.395] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\k4xu4W0H0tZSl83p3" (normalized: "c:\\users\\fd1hvy\\documents\\k4xu4w0h0tzsl83p3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.395] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\k4xu4W0H0tZSl83p3\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e8c00, ftCreationTime.dwHighDateTime=0x1d63311, ftLastAccessTime.dwLowDateTime=0x4bab9540, ftLastAccessTime.dwHighDateTime=0x1d6273e, ftLastWriteTime.dwLowDateTime=0x4bab9540, ftLastWriteTime.dwHighDateTime=0x1d6273e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f01f8 [0077.395] FindNextFileW (in: hFindFile=0x7f01f8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e8c00, ftCreationTime.dwHighDateTime=0x1d63311, ftLastAccessTime.dwLowDateTime=0x4bab9540, ftLastAccessTime.dwHighDateTime=0x1d6273e, ftLastWriteTime.dwLowDateTime=0x4bab9540, ftLastWriteTime.dwHighDateTime=0x1d6273e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.396] FindNextFileW (in: hFindFile=0x7f01f8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.396] FindClose (in: hFindFile=0x7f01f8 | out: hFindFile=0x7f01f8) returned 1 [0077.396] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\k4xu4W0H0tZSl83p3\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\documents\\k4xu4w0h0tzsl83p3\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.396] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0077.396] GetFileType (hFile=0x19c) returned 0x1 [0077.396] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.396] WriteFile (in: hFile=0x19c, lpBuffer=0x10f89200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10f89200*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0077.397] GetFileType (hFile=0x19c) returned 0x1 [0077.397] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.397] CloseHandle (hObject=0x19c) returned 1 [0077.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kEPJSD4o6.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\kepjsd4o6.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x110c7e08 | out: lpFileInformation=0x110c7e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884e0f80, ftCreationTime.dwHighDateTime=0x1d606b6, ftLastAccessTime.dwLowDateTime=0xa9d7e1b0, ftLastAccessTime.dwHighDateTime=0x1d5abdc, ftLastWriteTime.dwLowDateTime=0xa9d7e1b0, ftLastWriteTime.dwHighDateTime=0x1d5abdc, nFileSizeHigh=0x0, nFileSizeLow=0x8987)) returned 1 [0077.397] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kEPJSD4o6.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\kepjsd4o6.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.398] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.398] GetFileType (hFile=0x19c) returned 0x1 [0077.398] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.398] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f4b0 | out: pbBuffer=0x10c6f4b0) returned 1 [0077.398] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f4c0 | out: pbBuffer=0x10c6f4c0) returned 1 [0077.398] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec4f01 | out: pbBuffer=0x10ec4f01) returned 1 [0077.398] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec5101 | out: pbBuffer=0x10ec5101) returned 1 [0077.399] ReadFile (in: hFile=0x19c, lpBuffer=0x10d6a000, nNumberOfBytesToRead=0x8987, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d6a000*, lpNumberOfBytesRead=0x10c89bf0*=0x8987, lpOverlapped=0x0) returned 1 [0077.401] GetFileType (hFile=0x19c) returned 0x1 [0077.401] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.401] WriteFile (in: hFile=0x19c, lpBuffer=0x10d74000*, nNumberOfBytesToWrite=0x8987, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d74000*, lpNumberOfBytesWritten=0x10c89bf0*=0x8987, lpOverlapped=0x10c89bf4) returned 1 [0077.402] GetFileType (hFile=0x19c) returned 0x1 [0077.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x8987, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.402] GetFileType (hFile=0x19c) returned 0x1 [0077.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.402] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec5000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ec5000*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.402] GetFileType (hFile=0x19c) returned 0x1 [0077.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x8987, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.402] GetFileType (hFile=0x19c) returned 0x1 [0077.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.402] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec5200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ec5200*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.402] GetFileType (hFile=0x19c) returned 0x1 [0077.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x8987, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.402] GetFileType (hFile=0x19c) returned 0x1 [0077.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.402] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.402] GetFileType (hFile=0x19c) returned 0x1 [0077.403] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x8987, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.403] CloseHandle (hObject=0x19c) returned 1 [0077.403] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kEPJSD4o6.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\kepjsd4o6.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kEPJSD4o6.xlsx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\kepjsd4o6.xlsx.trapget"), dwFlags=0x1) returned 1 [0077.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kHGk0Ed67.csv" (normalized: "c:\\users\\fd1hvy\\documents\\khgk0ed67.csv"), fInfoLevelId=0x0, lpFileInformation=0x110c7f48 | out: lpFileInformation=0x110c7f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77524620, ftCreationTime.dwHighDateTime=0x1d630db, ftLastAccessTime.dwLowDateTime=0x43c62700, ftLastAccessTime.dwHighDateTime=0x1d63107, ftLastWriteTime.dwLowDateTime=0x43c62700, ftLastWriteTime.dwHighDateTime=0x1d63107, nFileSizeHigh=0x0, nFileSizeLow=0x15145)) returned 1 [0077.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kHGk0Ed67.csv" (normalized: "c:\\users\\fd1hvy\\documents\\khgk0ed67.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.404] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.404] GetFileType (hFile=0x19c) returned 0x1 [0077.404] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.404] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f590 | out: pbBuffer=0x10c6f590) returned 1 [0077.404] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f5a0 | out: pbBuffer=0x10c6f5a0) returned 1 [0077.404] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec5301 | out: pbBuffer=0x10ec5301) returned 1 [0077.404] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec5501 | out: pbBuffer=0x10ec5501) returned 1 [0077.405] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x15145, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89bf0*=0x15145, lpOverlapped=0x0) returned 1 [0077.406] GetFileType (hFile=0x19c) returned 0x1 [0077.407] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.407] WriteFile (in: hFile=0x19c, lpBuffer=0x10da2000*, nNumberOfBytesToWrite=0x15145, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10da2000*, lpNumberOfBytesWritten=0x10c89bf0*=0x15145, lpOverlapped=0x10c89bf4) returned 1 [0077.407] GetFileType (hFile=0x19c) returned 0x1 [0077.407] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15145, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.407] GetFileType (hFile=0x19c) returned 0x1 [0077.407] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.407] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec5400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ec5400*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.407] GetFileType (hFile=0x19c) returned 0x1 [0077.407] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15145, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.407] GetFileType (hFile=0x19c) returned 0x1 [0077.407] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.407] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec5600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ec5600*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.408] GetFileType (hFile=0x19c) returned 0x1 [0077.408] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15145, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.408] GetFileType (hFile=0x19c) returned 0x1 [0077.408] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.408] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.408] GetFileType (hFile=0x19c) returned 0x1 [0077.408] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15145, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.408] CloseHandle (hObject=0x19c) returned 1 [0077.408] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kHGk0Ed67.csv" (normalized: "c:\\users\\fd1hvy\\documents\\khgk0ed67.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kHGk0Ed67.csv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\khgk0ed67.csv.trapget"), dwFlags=0x1) returned 1 [0077.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\m3GMUKyDvqFeZ_.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\m3gmukydvqfez_.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x10cd20f8 | out: lpFileInformation=0x10cd20f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab4a790, ftCreationTime.dwHighDateTime=0x1d5eca5, ftLastAccessTime.dwLowDateTime=0xacf0640, ftLastAccessTime.dwHighDateTime=0x1d5d092, ftLastWriteTime.dwLowDateTime=0xacf0640, ftLastWriteTime.dwHighDateTime=0x1d5d092, nFileSizeHigh=0x0, nFileSizeLow=0xfc15)) returned 1 [0077.409] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\m3GMUKyDvqFeZ_.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\m3gmukydvqfez_.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.409] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.409] GetFileType (hFile=0x19c) returned 0x1 [0077.409] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.409] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f680 | out: pbBuffer=0x10c6f680) returned 1 [0077.409] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f690 | out: pbBuffer=0x10c6f690) returned 1 [0077.409] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec5701 | out: pbBuffer=0x10ec5701) returned 1 [0077.409] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec5901 | out: pbBuffer=0x10ec5901) returned 1 [0077.410] ReadFile (in: hFile=0x19c, lpBuffer=0x10dbe000, nNumberOfBytesToRead=0xfc15, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10dbe000*, lpNumberOfBytesRead=0x10c89bf0*=0xfc15, lpOverlapped=0x0) returned 1 [0077.412] GetFileType (hFile=0x19c) returned 0x1 [0077.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.412] WriteFile (in: hFile=0x19c, lpBuffer=0x10dce000*, nNumberOfBytesToWrite=0xfc15, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10dce000*, lpNumberOfBytesWritten=0x10c89bf0*=0xfc15, lpOverlapped=0x10c89bf4) returned 1 [0077.412] GetFileType (hFile=0x19c) returned 0x1 [0077.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfc15, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.412] GetFileType (hFile=0x19c) returned 0x1 [0077.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.412] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec5800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ec5800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.412] GetFileType (hFile=0x19c) returned 0x1 [0077.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfc15, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.412] GetFileType (hFile=0x19c) returned 0x1 [0077.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.412] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec5a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ec5a00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.412] GetFileType (hFile=0x19c) returned 0x1 [0077.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfc15, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.412] GetFileType (hFile=0x19c) returned 0x1 [0077.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.412] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.413] GetFileType (hFile=0x19c) returned 0x1 [0077.413] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfc15, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.413] CloseHandle (hObject=0x19c) returned 1 [0077.413] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\m3GMUKyDvqFeZ_.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\m3gmukydvqfez_.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\m3GMUKyDvqFeZ_.xlsx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\m3gmukydvqfez_.xlsx.trapget"), dwFlags=0x1) returned 1 [0077.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\r ok2RBGSg5uHFB.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\r ok2rbgsg5uhfb.pptx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2288 | out: lpFileInformation=0x10cd2288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf01b880, ftCreationTime.dwHighDateTime=0x1d621fc, ftLastAccessTime.dwLowDateTime=0xc8a886a0, ftLastAccessTime.dwHighDateTime=0x1d5c269, ftLastWriteTime.dwLowDateTime=0xc8a886a0, ftLastWriteTime.dwHighDateTime=0x1d5c269, nFileSizeHigh=0x0, nFileSizeLow=0x65fc)) returned 1 [0077.414] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\r ok2RBGSg5uHFB.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\r ok2rbgsg5uhfb.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.414] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.414] GetFileType (hFile=0x19c) returned 0x1 [0077.414] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.414] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f790 | out: pbBuffer=0x10c6f790) returned 1 [0077.414] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f7a0 | out: pbBuffer=0x10c6f7a0) returned 1 [0077.414] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec5b01 | out: pbBuffer=0x10ec5b01) returned 1 [0077.414] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec5d01 | out: pbBuffer=0x10ec5d01) returned 1 [0077.415] ReadFile (in: hFile=0x19c, lpBuffer=0x10e79500, nNumberOfBytesToRead=0x65fc, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10e79500*, lpNumberOfBytesRead=0x10c89bf0*=0x65fc, lpOverlapped=0x0) returned 1 [0077.416] GetFileType (hFile=0x19c) returned 0x1 [0077.416] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.416] WriteFile (in: hFile=0x19c, lpBuffer=0x10de8000*, nNumberOfBytesToWrite=0x65fc, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10de8000*, lpNumberOfBytesWritten=0x10c89bf0*=0x65fc, lpOverlapped=0x10c89bf4) returned 1 [0077.416] GetFileType (hFile=0x19c) returned 0x1 [0077.416] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x65fc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.416] GetFileType (hFile=0x19c) returned 0x1 [0077.416] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.416] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec5c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ec5c00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.416] GetFileType (hFile=0x19c) returned 0x1 [0077.416] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x65fc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.417] GetFileType (hFile=0x19c) returned 0x1 [0077.417] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.417] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec5e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ec5e00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.417] GetFileType (hFile=0x19c) returned 0x1 [0077.417] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x65fc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.417] GetFileType (hFile=0x19c) returned 0x1 [0077.417] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.417] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.417] GetFileType (hFile=0x19c) returned 0x1 [0077.417] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x65fc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.417] CloseHandle (hObject=0x19c) returned 1 [0077.417] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\r ok2RBGSg5uHFB.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\r ok2rbgsg5uhfb.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\r ok2RBGSg5uHFB.pptx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\r ok2rbgsg5uhfb.pptx.trapget"), dwFlags=0x1) returned 1 [0077.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht"), fInfoLevelId=0x0, lpFileInformation=0x10cd23c8 | out: lpFileInformation=0x10cd23c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc89501c0, ftCreationTime.dwHighDateTime=0x1d62e9d, ftLastAccessTime.dwLowDateTime=0x42256de0, ftLastAccessTime.dwHighDateTime=0x1d62a39, ftLastWriteTime.dwLowDateTime=0x42256de0, ftLastWriteTime.dwHighDateTime=0x1d62a39, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0077.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.418] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc89501c0, ftCreationTime.dwHighDateTime=0x1d62e9d, ftLastAccessTime.dwLowDateTime=0x42256de0, ftLastAccessTime.dwHighDateTime=0x1d62a39, ftLastWriteTime.dwLowDateTime=0x42256de0, ftLastWriteTime.dwHighDateTime=0x1d62a39, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0077.418] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc89501c0, ftCreationTime.dwHighDateTime=0x1d62e9d, ftLastAccessTime.dwLowDateTime=0x42256de0, ftLastAccessTime.dwHighDateTime=0x1d62a39, ftLastWriteTime.dwLowDateTime=0x42256de0, ftLastWriteTime.dwHighDateTime=0x1d62a39, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.418] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf804b20, ftCreationTime.dwHighDateTime=0x1d6303e, ftLastAccessTime.dwLowDateTime=0x78d4c020, ftLastAccessTime.dwHighDateTime=0x1d6301a, ftLastWriteTime.dwLowDateTime=0x78d4c020, ftLastWriteTime.dwHighDateTime=0x1d6301a, nFileSizeHigh=0x0, nFileSizeLow=0x92c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pIgDm.docx", cAlternateFileName="PIGDM~1.DOC")) returned 1 [0077.418] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e8a8b0, ftCreationTime.dwHighDateTime=0x1d62fb6, ftLastAccessTime.dwLowDateTime=0xa31e1380, ftLastAccessTime.dwHighDateTime=0x1d62ef9, ftLastWriteTime.dwLowDateTime=0xa31e1380, ftLastWriteTime.dwHighDateTime=0x1d62ef9, nFileSizeHigh=0x0, nFileSizeLow=0x17824, dwReserved0=0x0, dwReserved1=0x0, cFileName="rRtljtpSk5JuUvdDD1.doc", cAlternateFileName="RRTLJT~1.DOC")) returned 1 [0077.418] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca6a8630, ftCreationTime.dwHighDateTime=0x1d62a99, ftLastAccessTime.dwLowDateTime=0x135bb5d0, ftLastAccessTime.dwHighDateTime=0x1d625a4, ftLastWriteTime.dwLowDateTime=0x135bb5d0, ftLastWriteTime.dwHighDateTime=0x1d625a4, nFileSizeHigh=0x0, nFileSizeLow=0xef66, dwReserved0=0x0, dwReserved1=0x0, cFileName="WXV0.docx", cAlternateFileName="WXV0~1.DOC")) returned 1 [0077.418] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.419] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0077.419] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.422] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0077.423] GetFileType (hFile=0x19c) returned 0x1 [0077.423] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.423] WriteFile (in: hFile=0x19c, lpBuffer=0x10f89b00*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10f89b00*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0077.423] GetFileType (hFile=0x19c) returned 0x1 [0077.423] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.424] CloseHandle (hObject=0x19c) returned 1 [0077.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\WXV0.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht\\wxv0.docx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2508 | out: lpFileInformation=0x10cd2508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca6a8630, ftCreationTime.dwHighDateTime=0x1d62a99, ftLastAccessTime.dwLowDateTime=0x135bb5d0, ftLastAccessTime.dwHighDateTime=0x1d625a4, ftLastWriteTime.dwLowDateTime=0x135bb5d0, ftLastWriteTime.dwHighDateTime=0x1d625a4, nFileSizeHigh=0x0, nFileSizeLow=0xef66)) returned 1 [0077.424] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\WXV0.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht\\wxv0.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.424] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.424] GetFileType (hFile=0x19c) returned 0x1 [0077.424] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.424] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f900 | out: pbBuffer=0x10c6f900) returned 1 [0077.424] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f910 | out: pbBuffer=0x10c6f910) returned 1 [0077.424] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ec5f01 | out: pbBuffer=0x10ec5f01) returned 1 [0077.425] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e02101 | out: pbBuffer=0x10e02101) returned 1 [0077.425] ReadFile (in: hFile=0x19c, lpBuffer=0x10e08000, nNumberOfBytesToRead=0xef66, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10e08000*, lpNumberOfBytesRead=0x10c89b8c*=0xef66, lpOverlapped=0x0) returned 1 [0077.426] GetFileType (hFile=0x19c) returned 0x1 [0077.426] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.426] WriteFile (in: hFile=0x19c, lpBuffer=0x10e18000*, nNumberOfBytesToWrite=0xef66, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e18000*, lpNumberOfBytesWritten=0x10c89b8c*=0xef66, lpOverlapped=0x10c89b90) returned 1 [0077.426] GetFileType (hFile=0x19c) returned 0x1 [0077.427] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xef66, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.427] GetFileType (hFile=0x19c) returned 0x1 [0077.427] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.427] WriteFile (in: hFile=0x19c, lpBuffer=0x10e02000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e02000*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.427] GetFileType (hFile=0x19c) returned 0x1 [0077.427] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xef66, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.427] GetFileType (hFile=0x19c) returned 0x1 [0077.427] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.427] WriteFile (in: hFile=0x19c, lpBuffer=0x10e02200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e02200*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.427] GetFileType (hFile=0x19c) returned 0x1 [0077.427] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xef66, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.427] GetFileType (hFile=0x19c) returned 0x1 [0077.427] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.427] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.427] GetFileType (hFile=0x19c) returned 0x1 [0077.427] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xef66, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.427] CloseHandle (hObject=0x19c) returned 1 [0077.428] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\WXV0.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht\\wxv0.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\WXV0.docx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht\\wxv0.docx.trapget"), dwFlags=0x1) returned 1 [0077.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\pIgDm.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht\\pigdm.docx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2648 | out: lpFileInformation=0x10cd2648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf804b20, ftCreationTime.dwHighDateTime=0x1d6303e, ftLastAccessTime.dwLowDateTime=0x78d4c020, ftLastAccessTime.dwHighDateTime=0x1d6301a, ftLastWriteTime.dwLowDateTime=0x78d4c020, ftLastWriteTime.dwHighDateTime=0x1d6301a, nFileSizeHigh=0x0, nFileSizeLow=0x92c3)) returned 1 [0077.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\pIgDm.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht\\pigdm.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.428] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.428] GetFileType (hFile=0x19c) returned 0x1 [0077.428] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.428] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fa00 | out: pbBuffer=0x10c6fa00) returned 1 [0077.429] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fa10 | out: pbBuffer=0x10c6fa10) returned 1 [0077.429] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e02301 | out: pbBuffer=0x10e02301) returned 1 [0077.429] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e02501 | out: pbBuffer=0x10e02501) returned 1 [0077.429] ReadFile (in: hFile=0x19c, lpBuffer=0x10e34000, nNumberOfBytesToRead=0x92c3, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10e34000*, lpNumberOfBytesRead=0x10c89b8c*=0x92c3, lpOverlapped=0x0) returned 1 [0077.432] GetFileType (hFile=0x19c) returned 0x1 [0077.432] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.432] WriteFile (in: hFile=0x19c, lpBuffer=0x10e3e000*, nNumberOfBytesToWrite=0x92c3, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e3e000*, lpNumberOfBytesWritten=0x10c89b8c*=0x92c3, lpOverlapped=0x10c89b90) returned 1 [0077.432] GetFileType (hFile=0x19c) returned 0x1 [0077.432] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x92c3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.432] GetFileType (hFile=0x19c) returned 0x1 [0077.432] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.432] WriteFile (in: hFile=0x19c, lpBuffer=0x10e02400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e02400*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.432] GetFileType (hFile=0x19c) returned 0x1 [0077.432] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x92c3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.433] GetFileType (hFile=0x19c) returned 0x1 [0077.433] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.433] WriteFile (in: hFile=0x19c, lpBuffer=0x10e02600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e02600*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.433] GetFileType (hFile=0x19c) returned 0x1 [0077.433] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x92c3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.433] GetFileType (hFile=0x19c) returned 0x1 [0077.433] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.433] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.433] GetFileType (hFile=0x19c) returned 0x1 [0077.433] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x92c3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.433] CloseHandle (hObject=0x19c) returned 1 [0077.433] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\pIgDm.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht\\pigdm.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\pIgDm.docx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht\\pigdm.docx.trapget"), dwFlags=0x1) returned 1 [0077.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\rRtljtpSk5JuUvdDD1.doc" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht\\rrtljtpsk5juuvddd1.doc"), fInfoLevelId=0x0, lpFileInformation=0x10cd2788 | out: lpFileInformation=0x10cd2788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e8a8b0, ftCreationTime.dwHighDateTime=0x1d62fb6, ftLastAccessTime.dwLowDateTime=0xa31e1380, ftLastAccessTime.dwHighDateTime=0x1d62ef9, ftLastWriteTime.dwLowDateTime=0xa31e1380, ftLastWriteTime.dwHighDateTime=0x1d62ef9, nFileSizeHigh=0x0, nFileSizeLow=0x17824)) returned 1 [0077.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\rRtljtpSk5JuUvdDD1.doc" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht\\rrtljtpsk5juuvddd1.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.434] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.434] GetFileType (hFile=0x19c) returned 0x1 [0077.434] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.434] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fae0 | out: pbBuffer=0x10c6fae0) returned 1 [0077.434] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6faf0 | out: pbBuffer=0x10c6faf0) returned 1 [0077.434] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e02901 | out: pbBuffer=0x10e02901) returned 1 [0077.435] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e02b01 | out: pbBuffer=0x10e02b01) returned 1 [0077.435] SetEvent (hEvent=0x138) returned 1 [0077.435] ReadFile (in: hFile=0x19c, lpBuffer=0x10e4e000, nNumberOfBytesToRead=0x17824, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10e4e000*, lpNumberOfBytesRead=0x10c89b8c*=0x17824, lpOverlapped=0x0) returned 1 [0077.436] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0077.440] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0077.441] SetEvent (hEvent=0x138) returned 1 [0077.441] SetEvent (hEvent=0x170) returned 1 [0077.441] SetEvent (hEvent=0x158) returned 1 [0077.441] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0077.446] SetEvent (hEvent=0x168) returned 1 [0077.446] SetEvent (hEvent=0x158) returned 1 [0077.447] GetFileType (hFile=0x19c) returned 0x1 [0077.447] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.447] WriteFile (in: hFile=0x19c, lpBuffer=0x11042000*, nNumberOfBytesToWrite=0x17824, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x11042000*, lpNumberOfBytesWritten=0x10c89b8c*=0x17824, lpOverlapped=0x10c89b90) returned 1 [0077.447] GetFileType (hFile=0x19c) returned 0x1 [0077.447] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17824, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.447] GetFileType (hFile=0x19c) returned 0x1 [0077.447] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.447] WriteFile (in: hFile=0x19c, lpBuffer=0x10e02a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e02a00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.447] GetFileType (hFile=0x19c) returned 0x1 [0077.447] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17824, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.447] GetFileType (hFile=0x19c) returned 0x1 [0077.447] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.448] WriteFile (in: hFile=0x19c, lpBuffer=0x10e02c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e02c00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.448] GetFileType (hFile=0x19c) returned 0x1 [0077.448] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17824, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.448] GetFileType (hFile=0x19c) returned 0x1 [0077.448] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.448] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.448] GetFileType (hFile=0x19c) returned 0x1 [0077.448] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17824, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.448] CloseHandle (hObject=0x19c) returned 1 [0077.448] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\rRtljtpSk5JuUvdDD1.doc" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht\\rrtljtpsk5juuvddd1.doc"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\ryrPXn1yvmGWhT\\rRtljtpSk5JuUvdDD1.doc.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\ryrpxn1yvmgwht\\rrtljtpsk5juuvddd1.doc.trapget"), dwFlags=0x1) returned 1 [0077.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\vVxFfnW0ZcZ.docx" (normalized: "c:\\users\\fd1hvy\\documents\\vvxffnw0zcz.docx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd874efb0, ftCreationTime.dwHighDateTime=0x1d5c2e1, ftLastAccessTime.dwLowDateTime=0xbc5a0950, ftLastAccessTime.dwHighDateTime=0x1d5bc15, ftLastWriteTime.dwLowDateTime=0xbc5a0950, ftLastWriteTime.dwHighDateTime=0x1d5bc15, nFileSizeHigh=0x0, nFileSizeLow=0x11299)) returned 1 [0077.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\vVxFfnW0ZcZ.docx" (normalized: "c:\\users\\fd1hvy\\documents\\vvxffnw0zcz.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.449] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.449] GetFileType (hFile=0x19c) returned 0x1 [0077.449] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.449] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0077.449] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e050 | out: pbBuffer=0x10c6e050) returned 1 [0077.449] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e02101 | out: pbBuffer=0x10e02101) returned 1 [0077.450] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e02301 | out: pbBuffer=0x10e02301) returned 1 [0077.450] ReadFile (in: hFile=0x19c, lpBuffer=0x10f9a000, nNumberOfBytesToRead=0x11299, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f9a000*, lpNumberOfBytesRead=0x10c89bf0*=0x11299, lpOverlapped=0x0) returned 1 [0077.451] GetFileType (hFile=0x19c) returned 0x1 [0077.451] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.451] WriteFile (in: hFile=0x19c, lpBuffer=0x10fac000*, nNumberOfBytesToWrite=0x11299, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fac000*, lpNumberOfBytesWritten=0x10c89bf0*=0x11299, lpOverlapped=0x10c89bf4) returned 1 [0077.452] GetFileType (hFile=0x19c) returned 0x1 [0077.452] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11299, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.452] GetFileType (hFile=0x19c) returned 0x1 [0077.452] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.452] WriteFile (in: hFile=0x19c, lpBuffer=0x10e02200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e02200*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.452] GetFileType (hFile=0x19c) returned 0x1 [0077.452] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11299, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.452] GetFileType (hFile=0x19c) returned 0x1 [0077.452] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.452] WriteFile (in: hFile=0x19c, lpBuffer=0x10e02400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e02400*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.452] GetFileType (hFile=0x19c) returned 0x1 [0077.452] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11299, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.452] GetFileType (hFile=0x19c) returned 0x1 [0077.452] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.452] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.452] GetFileType (hFile=0x19c) returned 0x1 [0077.453] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11299, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.453] CloseHandle (hObject=0x19c) returned 1 [0077.453] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\vVxFfnW0ZcZ.docx" (normalized: "c:\\users\\fd1hvy\\documents\\vvxffnw0zcz.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\vVxFfnW0ZcZ.docx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\vvxffnw0zcz.docx.trapget"), dwFlags=0x1) returned 1 [0077.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\wLMPQvSSO5pQmB5syNXL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\wlmpqvsso5pqmb5synxl.pptx"), fInfoLevelId=0x0, lpFileInformation=0x10cd21e8 | out: lpFileInformation=0x10cd21e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4f09a0, ftCreationTime.dwHighDateTime=0x1d60ecc, ftLastAccessTime.dwLowDateTime=0x97da5f80, ftLastAccessTime.dwHighDateTime=0x1d5ad1f, ftLastWriteTime.dwLowDateTime=0x97da5f80, ftLastWriteTime.dwHighDateTime=0x1d5ad1f, nFileSizeHigh=0x0, nFileSizeLow=0xe718)) returned 1 [0077.455] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\wLMPQvSSO5pQmB5syNXL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\wlmpqvsso5pqmb5synxl.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.456] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.456] GetFileType (hFile=0x19c) returned 0x1 [0077.456] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.456] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e120 | out: pbBuffer=0x10c6e120) returned 1 [0077.456] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e180 | out: pbBuffer=0x10c6e180) returned 1 [0077.456] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e02501 | out: pbBuffer=0x10e02501) returned 1 [0077.456] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e02701 | out: pbBuffer=0x10e02701) returned 1 [0077.457] ReadFile (in: hFile=0x19c, lpBuffer=0x10dbe000, nNumberOfBytesToRead=0xe718, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10dbe000*, lpNumberOfBytesRead=0x10c89bf0*=0xe718, lpOverlapped=0x0) returned 1 [0077.459] GetFileType (hFile=0x19c) returned 0x1 [0077.459] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.459] WriteFile (in: hFile=0x19c, lpBuffer=0x10dce000*, nNumberOfBytesToWrite=0xe718, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10dce000*, lpNumberOfBytesWritten=0x10c89bf0*=0xe718, lpOverlapped=0x10c89bf4) returned 1 [0077.459] GetFileType (hFile=0x19c) returned 0x1 [0077.459] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe718, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.459] GetFileType (hFile=0x19c) returned 0x1 [0077.459] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.459] WriteFile (in: hFile=0x19c, lpBuffer=0x10e02600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e02600*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.459] GetFileType (hFile=0x19c) returned 0x1 [0077.459] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe718, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.459] GetFileType (hFile=0x19c) returned 0x1 [0077.459] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.459] WriteFile (in: hFile=0x19c, lpBuffer=0x10e02800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e02800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.459] GetFileType (hFile=0x19c) returned 0x1 [0077.459] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe718, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.459] GetFileType (hFile=0x19c) returned 0x1 [0077.459] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.460] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.460] GetFileType (hFile=0x19c) returned 0x1 [0077.460] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe718, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.460] CloseHandle (hObject=0x19c) returned 1 [0077.460] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\wLMPQvSSO5pQmB5syNXL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\wlmpqvsso5pqmb5synxl.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\wLMPQvSSO5pQmB5syNXL.pptx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\wlmpqvsso5pqmb5synxl.pptx.trapget"), dwFlags=0x1) returned 1 [0077.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xU6Ztvvg.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xu6ztvvg.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x10cd2328 | out: lpFileInformation=0x10cd2328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915fa800, ftCreationTime.dwHighDateTime=0x1d6002a, ftLastAccessTime.dwLowDateTime=0x97ab4140, ftLastAccessTime.dwHighDateTime=0x1d5c46d, ftLastWriteTime.dwLowDateTime=0x97ab4140, ftLastWriteTime.dwHighDateTime=0x1d5c46d, nFileSizeHigh=0x0, nFileSizeLow=0xd6d5)) returned 1 [0077.461] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\xU6Ztvvg.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xu6ztvvg.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.461] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.461] GetFileType (hFile=0x19c) returned 0x1 [0077.461] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.461] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e460 | out: pbBuffer=0x10c6e460) returned 1 [0077.461] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e470 | out: pbBuffer=0x10c6e470) returned 1 [0077.461] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e02901 | out: pbBuffer=0x10e02901) returned 1 [0077.461] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e02d01 | out: pbBuffer=0x10e02d01) returned 1 [0077.461] ReadFile (in: hFile=0x19c, lpBuffer=0x10fe8000, nNumberOfBytesToRead=0xd6d5, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fe8000*, lpNumberOfBytesRead=0x10c89bf0*=0xd6d5, lpOverlapped=0x0) returned 1 [0077.463] GetFileType (hFile=0x19c) returned 0x1 [0077.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.463] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0xd6d5, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89bf0*=0xd6d5, lpOverlapped=0x10c89bf4) returned 1 [0077.463] GetFileType (hFile=0x19c) returned 0x1 [0077.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd6d5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.463] GetFileType (hFile=0x19c) returned 0x1 [0077.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.463] WriteFile (in: hFile=0x19c, lpBuffer=0x10e02b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e02b00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.463] GetFileType (hFile=0x19c) returned 0x1 [0077.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd6d5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.463] GetFileType (hFile=0x19c) returned 0x1 [0077.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.463] WriteFile (in: hFile=0x19c, lpBuffer=0x10e02e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e02e00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.463] GetFileType (hFile=0x19c) returned 0x1 [0077.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd6d5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.463] GetFileType (hFile=0x19c) returned 0x1 [0077.464] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.464] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.464] GetFileType (hFile=0x19c) returned 0x1 [0077.464] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd6d5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.464] CloseHandle (hObject=0x19c) returned 1 [0077.464] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\xU6Ztvvg.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xu6ztvvg.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\xU6Ztvvg.xlsx.TRAPGET" (normalized: "c:\\users\\fd1hvy\\documents\\xu6ztvvg.xlsx.trapget"), dwFlags=0x1) returned 1 [0077.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads" (normalized: "c:\\users\\fd1hvy\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x10cd24b8 | out: lpFileInformation=0x10cd24b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0077.464] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Downloads" (normalized: "c:\\users\\fd1hvy\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.464] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0077.464] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.465] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0077.465] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.465] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0077.465] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Downloads\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\downloads\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.468] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0077.468] GetFileType (hFile=0x19c) returned 0x1 [0077.468] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0077.468] WriteFile (in: hFile=0x19c, lpBuffer=0x110c8480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x110c8480*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0077.469] GetFileType (hFile=0x19c) returned 0x1 [0077.469] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0077.469] CloseHandle (hObject=0x19c) returned 1 [0077.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd2558 | out: lpFileInformation=0x10cd2558*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0077.469] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Downloads\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\downloads\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.470] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.470] GetFileType (hFile=0x19c) returned 0x1 [0077.470] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.470] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e5a0 | out: pbBuffer=0x10c6e5a0) returned 1 [0077.470] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e5b0 | out: pbBuffer=0x10c6e5b0) returned 1 [0077.470] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e02f01 | out: pbBuffer=0x10e02f01) returned 1 [0077.470] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e03101 | out: pbBuffer=0x10e03101) returned 1 [0077.470] ReadFile (in: hFile=0x19c, lpBuffer=0x10dfdd40, nNumberOfBytesToRead=0x11a, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10dfdd40*, lpNumberOfBytesRead=0x10c89bf0*=0x11a, lpOverlapped=0x0) returned 1 [0077.471] GetFileType (hFile=0x19c) returned 0x1 [0077.471] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.471] WriteFile (in: hFile=0x19c, lpBuffer=0x10dfde60*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10dfde60*, lpNumberOfBytesWritten=0x10c89bf0*=0x11a, lpOverlapped=0x10c89bf4) returned 1 [0077.471] GetFileType (hFile=0x19c) returned 0x1 [0077.471] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.471] GetFileType (hFile=0x19c) returned 0x1 [0077.471] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.471] WriteFile (in: hFile=0x19c, lpBuffer=0x10e03000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e03000*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.471] GetFileType (hFile=0x19c) returned 0x1 [0077.471] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.471] GetFileType (hFile=0x19c) returned 0x1 [0077.471] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.472] WriteFile (in: hFile=0x19c, lpBuffer=0x10e03200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e03200*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.478] GetFileType (hFile=0x19c) returned 0x1 [0077.478] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.478] GetFileType (hFile=0x19c) returned 0x1 [0077.478] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.478] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.479] GetFileType (hFile=0x19c) returned 0x1 [0077.479] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.479] CloseHandle (hObject=0x19c) returned 1 [0077.479] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Downloads\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Downloads\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\downloads\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0077.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites" (normalized: "c:\\users\\fd1hvy\\favorites"), fInfoLevelId=0x0, lpFileInformation=0x10cd2698 | out: lpFileInformation=0x10cd2698*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.479] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Favorites" (normalized: "c:\\users\\fd1hvy\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.479] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efdf8 [0077.480] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.480] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bing.url", cAlternateFileName="")) returned 1 [0077.480] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0077.480] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0077.480] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.480] FindClose (in: hFindFile=0x7efdf8 | out: hFindFile=0x7efdf8) returned 1 [0077.480] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Favorites\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\favorites\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.484] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0077.484] GetFileType (hFile=0x19c) returned 0x1 [0077.484] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0077.484] WriteFile (in: hFile=0x19c, lpBuffer=0x110c8d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x110c8d80*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0077.485] GetFileType (hFile=0x19c) returned 0x1 [0077.485] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0077.485] CloseHandle (hObject=0x19c) returned 1 [0077.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url" (normalized: "c:\\users\\fd1hvy\\favorites\\bing.url"), fInfoLevelId=0x0, lpFileInformation=0x10cd2828 | out: lpFileInformation=0x10cd2828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0077.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links" (normalized: "c:\\users\\fd1hvy\\favorites\\links"), fInfoLevelId=0x0, lpFileInformation=0x10cd2878 | out: lpFileInformation=0x10cd2878*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.488] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links" (normalized: "c:\\users\\fd1hvy\\favorites\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.488] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0077.488] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.488] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0077.488] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.488] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0077.489] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\favorites\\links\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.494] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0077.494] GetFileType (hFile=0x19c) returned 0x1 [0077.495] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.495] WriteFile (in: hFile=0x19c, lpBuffer=0x110c9680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x110c9680*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0077.495] GetFileType (hFile=0x19c) returned 0x1 [0077.495] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.495] CloseHandle (hObject=0x19c) returned 1 [0077.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd2918 | out: lpFileInformation=0x10cd2918*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0077.496] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\favorites\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.496] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.496] GetFileType (hFile=0x19c) returned 0x1 [0077.496] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.496] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e7c0 | out: pbBuffer=0x10c6e7c0) returned 1 [0077.496] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e7d0 | out: pbBuffer=0x10c6e7d0) returned 1 [0077.496] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e03301 | out: pbBuffer=0x10e03301) returned 1 [0077.496] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e03501 | out: pbBuffer=0x10e03501) returned 1 [0077.497] ReadFile (in: hFile=0x19c, lpBuffer=0x10c723c0, nNumberOfBytesToRead=0x50, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10c723c0*, lpNumberOfBytesRead=0x10c89b8c*=0x50, lpOverlapped=0x0) returned 1 [0077.497] GetFileType (hFile=0x19c) returned 0x1 [0077.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.498] WriteFile (in: hFile=0x19c, lpBuffer=0x10c72410*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c72410*, lpNumberOfBytesWritten=0x10c89b8c*=0x50, lpOverlapped=0x10c89b90) returned 1 [0077.498] GetFileType (hFile=0x19c) returned 0x1 [0077.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.498] GetFileType (hFile=0x19c) returned 0x1 [0077.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.498] WriteFile (in: hFile=0x19c, lpBuffer=0x10e03400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e03400*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.498] GetFileType (hFile=0x19c) returned 0x1 [0077.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.498] GetFileType (hFile=0x19c) returned 0x1 [0077.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.498] WriteFile (in: hFile=0x19c, lpBuffer=0x10e03600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e03600*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.498] GetFileType (hFile=0x19c) returned 0x1 [0077.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.498] GetFileType (hFile=0x19c) returned 0x1 [0077.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.498] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.499] GetFileType (hFile=0x19c) returned 0x1 [0077.499] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.499] CloseHandle (hObject=0x19c) returned 1 [0077.499] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\favorites\\links\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\favorites\\links\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0077.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd2a58 | out: lpFileInformation=0x10cd2a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0077.499] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Favorites\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\favorites\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.499] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.500] GetFileType (hFile=0x19c) returned 0x1 [0077.500] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.500] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e8b0 | out: pbBuffer=0x10c6e8b0) returned 1 [0077.500] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e8c0 | out: pbBuffer=0x10c6e8c0) returned 1 [0077.500] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e03701 | out: pbBuffer=0x10e03701) returned 1 [0077.500] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e03901 | out: pbBuffer=0x10e03901) returned 1 [0077.500] ReadFile (in: hFile=0x19c, lpBuffer=0x10d7f380, nNumberOfBytesToRead=0x192, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d7f380*, lpNumberOfBytesRead=0x10c89bf0*=0x192, lpOverlapped=0x0) returned 1 [0077.501] GetFileType (hFile=0x19c) returned 0x1 [0077.501] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.501] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7f520*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d7f520*, lpNumberOfBytesWritten=0x10c89bf0*=0x192, lpOverlapped=0x10c89bf4) returned 1 [0077.501] GetFileType (hFile=0x19c) returned 0x1 [0077.501] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x192, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.501] GetFileType (hFile=0x19c) returned 0x1 [0077.501] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.501] WriteFile (in: hFile=0x19c, lpBuffer=0x10e03800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e03800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.501] GetFileType (hFile=0x19c) returned 0x1 [0077.501] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x192, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.501] GetFileType (hFile=0x19c) returned 0x1 [0077.501] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.501] WriteFile (in: hFile=0x19c, lpBuffer=0x10e03a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e03a00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.509] GetFileType (hFile=0x19c) returned 0x1 [0077.509] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x192, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.509] GetFileType (hFile=0x19c) returned 0x1 [0077.509] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.510] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.510] GetFileType (hFile=0x19c) returned 0x1 [0077.510] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x192, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.510] CloseHandle (hObject=0x19c) returned 1 [0077.510] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Favorites\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\favorites\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Favorites\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\favorites\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0077.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Links" (normalized: "c:\\users\\fd1hvy\\links"), fInfoLevelId=0x0, lpFileInformation=0x10cd2b98 | out: lpFileInformation=0x10cd2b98*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.511] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links" (normalized: "c:\\users\\fd1hvy\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.511] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0378 [0077.511] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.511] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcee4480b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0077.511] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce90d59d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0077.511] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcec7abde, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0077.511] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0077.511] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.511] FindClose (in: hFindFile=0x7f0378 | out: hFindFile=0x7f0378) returned 1 [0077.511] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\links\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.514] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0077.514] GetFileType (hFile=0x19c) returned 0x1 [0077.514] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0077.514] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffa000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10ffa000*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0077.515] GetFileType (hFile=0x19c) returned 0x1 [0077.515] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0077.515] CloseHandle (hObject=0x19c) returned 1 [0077.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x10cd2d28 | out: lpFileInformation=0x10cd2d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce90d59d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f5)) returned 1 [0077.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x10cd2d78 | out: lpFileInformation=0x10cd2d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcec7abde, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3ae)) returned 1 [0077.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk"), fInfoLevelId=0x0, lpFileInformation=0x10cd2dc8 | out: lpFileInformation=0x10cd2dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a)) returned 1 [0077.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd2e18 | out: lpFileInformation=0x10cd2e18*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcee4480b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0077.521] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.521] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.521] GetFileType (hFile=0x19c) returned 0x1 [0077.521] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.522] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea20 | out: pbBuffer=0x10c6ea20) returned 1 [0077.522] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea30 | out: pbBuffer=0x10c6ea30) returned 1 [0077.522] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e03b01 | out: pbBuffer=0x10e03b01) returned 1 [0077.522] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e03d01 | out: pbBuffer=0x10e03d01) returned 1 [0077.522] ReadFile (in: hFile=0x19c, lpBuffer=0x10de1600, nNumberOfBytesToRead=0x1f8, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10de1600*, lpNumberOfBytesRead=0x10c89bf0*=0x1f8, lpOverlapped=0x0) returned 1 [0077.523] GetFileType (hFile=0x19c) returned 0x1 [0077.523] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.523] WriteFile (in: hFile=0x19c, lpBuffer=0x10de1800*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10de1800*, lpNumberOfBytesWritten=0x10c89bf0*=0x1f8, lpOverlapped=0x10c89bf4) returned 1 [0077.523] GetFileType (hFile=0x19c) returned 0x1 [0077.523] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.523] GetFileType (hFile=0x19c) returned 0x1 [0077.523] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.523] WriteFile (in: hFile=0x19c, lpBuffer=0x10e03c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e03c00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.528] GetFileType (hFile=0x19c) returned 0x1 [0077.528] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.528] GetFileType (hFile=0x19c) returned 0x1 [0077.528] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.528] WriteFile (in: hFile=0x19c, lpBuffer=0x10e03e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e03e00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.528] GetFileType (hFile=0x19c) returned 0x1 [0077.528] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.528] GetFileType (hFile=0x19c) returned 0x1 [0077.528] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.528] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.528] GetFileType (hFile=0x19c) returned 0x1 [0077.528] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.528] CloseHandle (hObject=0x19c) returned 1 [0077.528] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Links\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\links\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Links\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\links\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0077.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Local Settings" (normalized: "c:\\users\\fd1hvy\\local settings"), fInfoLevelId=0x0, lpFileInformation=0x10cd2f58 | out: lpFileInformation=0x10cd2f58*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.529] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Local Settings" (normalized: "c:\\users\\fd1hvy\\local settings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.529] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Local Settings\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0077.529] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92420*, nNumberOfCharsToWrite=0x2e, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92420*, lpNumberOfCharsWritten=0x10c897b8*=0x2e) returned 1 [0077.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music" (normalized: "c:\\users\\fd1hvy\\music"), fInfoLevelId=0x0, lpFileInformation=0x10cd2fa8 | out: lpFileInformation=0x10cd2fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7b95ea, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7b95ea, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0077.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music" (normalized: "c:\\users\\fd1hvy\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.537] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7b95ea, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7b95ea, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f00b8 [0077.537] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7b95ea, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7b95ea, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd75e450, ftCreationTime.dwHighDateTime=0x1d62361, ftLastAccessTime.dwLowDateTime=0x293da980, ftLastAccessTime.dwHighDateTime=0x1d626a3, ftLastWriteTime.dwLowDateTime=0x293da980, ftLastWriteTime.dwHighDateTime=0x1d626a3, nFileSizeHigh=0x0, nFileSizeLow=0x7dfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="0cnUb_Gr 3BN.wav", cAlternateFileName="0CNUB_~1.WAV")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212926b0, ftCreationTime.dwHighDateTime=0x1d63045, ftLastAccessTime.dwLowDateTime=0xbddb2aa0, ftLastAccessTime.dwHighDateTime=0x1d631bf, ftLastWriteTime.dwLowDateTime=0xbddb2aa0, ftLastWriteTime.dwHighDateTime=0x1d631bf, nFileSizeHigh=0x0, nFileSizeLow=0x12ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ABXtVvU9.m4a", cAlternateFileName="")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2860ec40, ftCreationTime.dwHighDateTime=0x1d62ff2, ftLastAccessTime.dwLowDateTime=0xf3a8aba0, ftLastAccessTime.dwHighDateTime=0x1d62358, ftLastWriteTime.dwLowDateTime=0xf3a8aba0, ftLastWriteTime.dwHighDateTime=0x1d62358, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bJOs9A4", cAlternateFileName="")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd948a840, ftCreationTime.dwHighDateTime=0x1d6279b, ftLastAccessTime.dwLowDateTime=0xdb0dfdb0, ftLastAccessTime.dwHighDateTime=0x1d62363, ftLastWriteTime.dwLowDateTime=0xdb0dfdb0, ftLastWriteTime.dwHighDateTime=0x1d62363, nFileSizeHigh=0x0, nFileSizeLow=0xed48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ck1J5UIE7 mFH2.mp3", cAlternateFileName="CK1J5U~1.MP3")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf762f8e0, ftCreationTime.dwHighDateTime=0x1d6321c, ftLastAccessTime.dwLowDateTime=0x3eaec500, ftLastAccessTime.dwHighDateTime=0x1d62618, ftLastWriteTime.dwLowDateTime=0x3eaec500, ftLastWriteTime.dwHighDateTime=0x1d62618, nFileSizeHigh=0x0, nFileSizeLow=0xd903, dwReserved0=0x0, dwReserved1=0x0, cFileName="dxSoLia4uMRiYP.wav", cAlternateFileName="DXSOLI~1.WAV")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14977080, ftCreationTime.dwHighDateTime=0x1d62a8e, ftLastAccessTime.dwLowDateTime=0x946328d0, ftLastAccessTime.dwHighDateTime=0x1d63313, ftLastWriteTime.dwLowDateTime=0x946328d0, ftLastWriteTime.dwHighDateTime=0x1d63313, nFileSizeHigh=0x0, nFileSizeLow=0x1453d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBY2zEo1.mp3", cAlternateFileName="")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3046a180, ftCreationTime.dwHighDateTime=0x1d6258d, ftLastAccessTime.dwLowDateTime=0xd1803b0, ftLastAccessTime.dwHighDateTime=0x1d62ffc, ftLastWriteTime.dwLowDateTime=0xd1803b0, ftLastWriteTime.dwHighDateTime=0x1d62ffc, nFileSizeHigh=0x0, nFileSizeLow=0x111a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hOgVzNltZ.wav", cAlternateFileName="HOGVZN~1.WAV")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ea4670, ftCreationTime.dwHighDateTime=0x1d62dd7, ftLastAccessTime.dwLowDateTime=0x4fbd2190, ftLastAccessTime.dwHighDateTime=0x1d63020, ftLastWriteTime.dwLowDateTime=0x4fbd2190, ftLastWriteTime.dwHighDateTime=0x1d63020, nFileSizeHigh=0x0, nFileSizeLow=0xa785, dwReserved0=0x0, dwReserved1=0x0, cFileName="JS0PtkkWK.m4a", cAlternateFileName="JS0PTK~1.M4A")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0b68e0, ftCreationTime.dwHighDateTime=0x1d6323b, ftLastAccessTime.dwLowDateTime=0x69f03d60, ftLastAccessTime.dwHighDateTime=0x1d6274f, ftLastWriteTime.dwLowDateTime=0x69f03d60, ftLastWriteTime.dwHighDateTime=0x1d6274f, nFileSizeHigh=0x0, nFileSizeLow=0xa90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="l_D0.m4a", cAlternateFileName="")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd72f7500, ftCreationTime.dwHighDateTime=0x1d62ba8, ftLastAccessTime.dwLowDateTime=0x14f8d1c0, ftLastAccessTime.dwHighDateTime=0x1d62a8b, ftLastWriteTime.dwLowDateTime=0x14f8d1c0, ftLastWriteTime.dwHighDateTime=0x1d62a8b, nFileSizeHigh=0x0, nFileSizeLow=0x3757, dwReserved0=0x0, dwReserved1=0x0, cFileName="nAth2NZC2.m4a", cAlternateFileName="NATH2N~1.M4A")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9e6610, ftCreationTime.dwHighDateTime=0x1d62779, ftLastAccessTime.dwLowDateTime=0xbf2f7380, ftLastAccessTime.dwHighDateTime=0x1d63060, ftLastWriteTime.dwLowDateTime=0xbf2f7380, ftLastWriteTime.dwHighDateTime=0x1d63060, nFileSizeHigh=0x0, nFileSizeLow=0x13fe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="qkwHgzN615uKDy_42z9.wav", cAlternateFileName="QKWHGZ~1.WAV")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499a2850, ftCreationTime.dwHighDateTime=0x1d629d9, ftLastAccessTime.dwLowDateTime=0xa7be7220, ftLastAccessTime.dwHighDateTime=0x1d6269f, ftLastWriteTime.dwLowDateTime=0xa7be7220, ftLastWriteTime.dwHighDateTime=0x1d6269f, nFileSizeHigh=0x0, nFileSizeLow=0xeac2, dwReserved0=0x0, dwReserved1=0x0, cFileName="QyeM.m4a", cAlternateFileName="")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fac2450, ftCreationTime.dwHighDateTime=0x1d632ae, ftLastAccessTime.dwLowDateTime=0xc7257eb0, ftLastAccessTime.dwHighDateTime=0x1d62546, ftLastWriteTime.dwLowDateTime=0xc7257eb0, ftLastWriteTime.dwHighDateTime=0x1d62546, nFileSizeHigh=0x0, nFileSizeLow=0x4c3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ytxA2ow-9b3Q1cJ3Ji42.wav", cAlternateFileName="YTXA2O~1.WAV")) returned 1 [0077.538] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.538] FindClose (in: hFindFile=0x7f00b8 | out: hFindFile=0x7f00b8) returned 1 [0077.538] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\music\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.545] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0077.545] GetFileType (hFile=0x19c) returned 0x1 [0077.545] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0077.545] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffa900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10ffa900*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0077.546] GetFileType (hFile=0x19c) returned 0x1 [0077.546] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0077.546] CloseHandle (hObject=0x19c) returned 1 [0077.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\0cnUb_Gr 3BN.wav" (normalized: "c:\\users\\fd1hvy\\music\\0cnub_gr 3bn.wav"), fInfoLevelId=0x0, lpFileInformation=0x10cd3458 | out: lpFileInformation=0x10cd3458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd75e450, ftCreationTime.dwHighDateTime=0x1d62361, ftLastAccessTime.dwLowDateTime=0x293da980, ftLastAccessTime.dwHighDateTime=0x1d626a3, ftLastWriteTime.dwLowDateTime=0x293da980, ftLastWriteTime.dwHighDateTime=0x1d626a3, nFileSizeHigh=0x0, nFileSizeLow=0x7dfc)) returned 1 [0077.547] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\0cnUb_Gr 3BN.wav" (normalized: "c:\\users\\fd1hvy\\music\\0cnub_gr 3bn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.547] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.547] GetFileType (hFile=0x19c) returned 0x1 [0077.547] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.547] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ebe0 | out: pbBuffer=0x10c6ebe0) returned 1 [0077.547] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ebf0 | out: pbBuffer=0x10c6ebf0) returned 1 [0077.547] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e03f01 | out: pbBuffer=0x10e03f01) returned 1 [0077.547] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cde101 | out: pbBuffer=0x10cde101) returned 1 [0077.548] ReadFile (in: hFile=0x19c, lpBuffer=0x110ba000, nNumberOfBytesToRead=0x7dfc, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x110ba000*, lpNumberOfBytesRead=0x10c89bf0*=0x7dfc, lpOverlapped=0x0) returned 1 [0077.549] GetFileType (hFile=0x19c) returned 0x1 [0077.549] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.549] WriteFile (in: hFile=0x19c, lpBuffer=0x10fd8000*, nNumberOfBytesToWrite=0x7dfc, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fd8000*, lpNumberOfBytesWritten=0x10c89bf0*=0x7dfc, lpOverlapped=0x10c89bf4) returned 1 [0077.549] GetFileType (hFile=0x19c) returned 0x1 [0077.549] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7dfc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.549] GetFileType (hFile=0x19c) returned 0x1 [0077.549] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.549] WriteFile (in: hFile=0x19c, lpBuffer=0x10cde000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cde000*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.549] GetFileType (hFile=0x19c) returned 0x1 [0077.549] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7dfc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.549] GetFileType (hFile=0x19c) returned 0x1 [0077.549] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.549] WriteFile (in: hFile=0x19c, lpBuffer=0x10cde200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cde200*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.549] GetFileType (hFile=0x19c) returned 0x1 [0077.550] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7dfc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.550] GetFileType (hFile=0x19c) returned 0x1 [0077.550] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.550] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.550] GetFileType (hFile=0x19c) returned 0x1 [0077.550] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7dfc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.550] CloseHandle (hObject=0x19c) returned 1 [0077.550] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\0cnUb_Gr 3BN.wav" (normalized: "c:\\users\\fd1hvy\\music\\0cnub_gr 3bn.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\0cnUb_Gr 3BN.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\0cnub_gr 3bn.wav.trapget"), dwFlags=0x1) returned 1 [0077.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\ABXtVvU9.m4a" (normalized: "c:\\users\\fd1hvy\\music\\abxtvvu9.m4a"), fInfoLevelId=0x0, lpFileInformation=0x10cd3598 | out: lpFileInformation=0x10cd3598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212926b0, ftCreationTime.dwHighDateTime=0x1d63045, ftLastAccessTime.dwLowDateTime=0xbddb2aa0, ftLastAccessTime.dwHighDateTime=0x1d631bf, ftLastWriteTime.dwLowDateTime=0xbddb2aa0, ftLastWriteTime.dwHighDateTime=0x1d631bf, nFileSizeHigh=0x0, nFileSizeLow=0x12ed0)) returned 1 [0077.550] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\ABXtVvU9.m4a" (normalized: "c:\\users\\fd1hvy\\music\\abxtvvu9.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.551] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.551] GetFileType (hFile=0x19c) returned 0x1 [0077.551] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.551] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ecd0 | out: pbBuffer=0x10c6ecd0) returned 1 [0077.551] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ece0 | out: pbBuffer=0x10c6ece0) returned 1 [0077.551] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cde301 | out: pbBuffer=0x10cde301) returned 1 [0077.551] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cde501 | out: pbBuffer=0x10cde501) returned 1 [0077.551] ReadFile (in: hFile=0x19c, lpBuffer=0x10e34000, nNumberOfBytesToRead=0x12ed0, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10e34000*, lpNumberOfBytesRead=0x10c89bf0*=0x12ed0, lpOverlapped=0x0) returned 1 [0077.553] GetFileType (hFile=0x19c) returned 0x1 [0077.553] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.553] WriteFile (in: hFile=0x19c, lpBuffer=0x10de6000*, nNumberOfBytesToWrite=0x12ed0, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10de6000*, lpNumberOfBytesWritten=0x10c89bf0*=0x12ed0, lpOverlapped=0x10c89bf4) returned 1 [0077.553] GetFileType (hFile=0x19c) returned 0x1 [0077.553] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12ed0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.553] GetFileType (hFile=0x19c) returned 0x1 [0077.554] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.554] WriteFile (in: hFile=0x19c, lpBuffer=0x10cde400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cde400*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.554] GetFileType (hFile=0x19c) returned 0x1 [0077.554] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12ed0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.554] GetFileType (hFile=0x19c) returned 0x1 [0077.554] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.554] WriteFile (in: hFile=0x19c, lpBuffer=0x10cde600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cde600*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.554] GetFileType (hFile=0x19c) returned 0x1 [0077.554] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12ed0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.554] GetFileType (hFile=0x19c) returned 0x1 [0077.554] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.554] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.554] GetFileType (hFile=0x19c) returned 0x1 [0077.554] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12ed0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.554] CloseHandle (hObject=0x19c) returned 1 [0077.554] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\ABXtVvU9.m4a" (normalized: "c:\\users\\fd1hvy\\music\\abxtvvu9.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\ABXtVvU9.m4a.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\abxtvvu9.m4a.trapget"), dwFlags=0x1) returned 1 [0077.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\Ck1J5UIE7 mFH2.mp3" (normalized: "c:\\users\\fd1hvy\\music\\ck1j5uie7 mfh2.mp3"), fInfoLevelId=0x0, lpFileInformation=0x10cd36d8 | out: lpFileInformation=0x10cd36d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd948a840, ftCreationTime.dwHighDateTime=0x1d6279b, ftLastAccessTime.dwLowDateTime=0xdb0dfdb0, ftLastAccessTime.dwHighDateTime=0x1d62363, ftLastWriteTime.dwLowDateTime=0xdb0dfdb0, ftLastWriteTime.dwHighDateTime=0x1d62363, nFileSizeHigh=0x0, nFileSizeLow=0xed48)) returned 1 [0077.555] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\Ck1J5UIE7 mFH2.mp3" (normalized: "c:\\users\\fd1hvy\\music\\ck1j5uie7 mfh2.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.555] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.555] GetFileType (hFile=0x19c) returned 0x1 [0077.555] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.555] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6edb0 | out: pbBuffer=0x10c6edb0) returned 1 [0077.555] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6edc0 | out: pbBuffer=0x10c6edc0) returned 1 [0077.555] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cde701 | out: pbBuffer=0x10cde701) returned 1 [0077.555] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cde901 | out: pbBuffer=0x10cde901) returned 1 [0077.556] ReadFile (in: hFile=0x19c, lpBuffer=0x10fbe000, nNumberOfBytesToRead=0xed48, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fbe000*, lpNumberOfBytesRead=0x10c89bf0*=0xed48, lpOverlapped=0x0) returned 1 [0077.557] GetFileType (hFile=0x19c) returned 0x1 [0077.557] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.557] WriteFile (in: hFile=0x19c, lpBuffer=0x10d62000*, nNumberOfBytesToWrite=0xed48, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d62000*, lpNumberOfBytesWritten=0x10c89bf0*=0xed48, lpOverlapped=0x10c89bf4) returned 1 [0077.557] GetFileType (hFile=0x19c) returned 0x1 [0077.557] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xed48, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.557] GetFileType (hFile=0x19c) returned 0x1 [0077.558] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.558] WriteFile (in: hFile=0x19c, lpBuffer=0x10cde800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cde800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.558] GetFileType (hFile=0x19c) returned 0x1 [0077.558] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xed48, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.558] GetFileType (hFile=0x19c) returned 0x1 [0077.558] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.558] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdea00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdea00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.558] GetFileType (hFile=0x19c) returned 0x1 [0077.558] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xed48, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.558] GetFileType (hFile=0x19c) returned 0x1 [0077.558] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.558] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.558] GetFileType (hFile=0x19c) returned 0x1 [0077.558] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xed48, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.558] CloseHandle (hObject=0x19c) returned 1 [0077.558] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\Ck1J5UIE7 mFH2.mp3" (normalized: "c:\\users\\fd1hvy\\music\\ck1j5uie7 mfh2.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\Ck1J5UIE7 mFH2.mp3.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\ck1j5uie7 mfh2.mp3.trapget"), dwFlags=0x1) returned 1 [0077.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FBY2zEo1.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fby2zeo1.mp3"), fInfoLevelId=0x0, lpFileInformation=0x10cd3818 | out: lpFileInformation=0x10cd3818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14977080, ftCreationTime.dwHighDateTime=0x1d62a8e, ftLastAccessTime.dwLowDateTime=0x946328d0, ftLastAccessTime.dwHighDateTime=0x1d63313, ftLastWriteTime.dwLowDateTime=0x946328d0, ftLastWriteTime.dwHighDateTime=0x1d63313, nFileSizeHigh=0x0, nFileSizeLow=0x1453d)) returned 1 [0077.559] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FBY2zEo1.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fby2zeo1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.559] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.559] GetFileType (hFile=0x19c) returned 0x1 [0077.559] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.560] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eea0 | out: pbBuffer=0x10c6eea0) returned 1 [0077.560] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eeb0 | out: pbBuffer=0x10c6eeb0) returned 1 [0077.560] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdeb01 | out: pbBuffer=0x10cdeb01) returned 1 [0077.561] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cded01 | out: pbBuffer=0x10cded01) returned 1 [0077.561] ReadFile (in: hFile=0x19c, lpBuffer=0x10e06000, nNumberOfBytesToRead=0x1453d, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10e06000*, lpNumberOfBytesRead=0x10c89bf0*=0x1453d, lpOverlapped=0x0) returned 1 [0077.565] GetFileType (hFile=0x19c) returned 0x1 [0077.565] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.565] WriteFile (in: hFile=0x19c, lpBuffer=0x1105a000*, nNumberOfBytesToWrite=0x1453d, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x1105a000*, lpNumberOfBytesWritten=0x10c89bf0*=0x1453d, lpOverlapped=0x10c89bf4) returned 1 [0077.566] GetFileType (hFile=0x19c) returned 0x1 [0077.566] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1453d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.566] GetFileType (hFile=0x19c) returned 0x1 [0077.566] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.566] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdec00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdec00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.566] GetFileType (hFile=0x19c) returned 0x1 [0077.566] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1453d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.567] GetFileType (hFile=0x19c) returned 0x1 [0077.567] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.567] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdee00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdee00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.567] GetFileType (hFile=0x19c) returned 0x1 [0077.567] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1453d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.567] GetFileType (hFile=0x19c) returned 0x1 [0077.567] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.567] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.567] GetFileType (hFile=0x19c) returned 0x1 [0077.567] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1453d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.567] CloseHandle (hObject=0x19c) returned 1 [0077.567] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\FBY2zEo1.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fby2zeo1.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\FBY2zEo1.mp3.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\fby2zeo1.mp3.trapget"), dwFlags=0x1) returned 1 [0077.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\JS0PtkkWK.m4a" (normalized: "c:\\users\\fd1hvy\\music\\js0ptkkwk.m4a"), fInfoLevelId=0x0, lpFileInformation=0x10cd3958 | out: lpFileInformation=0x10cd3958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ea4670, ftCreationTime.dwHighDateTime=0x1d62dd7, ftLastAccessTime.dwLowDateTime=0x4fbd2190, ftLastAccessTime.dwHighDateTime=0x1d63020, ftLastWriteTime.dwLowDateTime=0x4fbd2190, ftLastWriteTime.dwHighDateTime=0x1d63020, nFileSizeHigh=0x0, nFileSizeLow=0xa785)) returned 1 [0077.569] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\JS0PtkkWK.m4a" (normalized: "c:\\users\\fd1hvy\\music\\js0ptkkwk.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.569] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.569] GetFileType (hFile=0x19c) returned 0x1 [0077.569] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.569] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ef90 | out: pbBuffer=0x10c6ef90) returned 1 [0077.569] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6efa0 | out: pbBuffer=0x10c6efa0) returned 1 [0077.569] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdef01 | out: pbBuffer=0x10cdef01) returned 1 [0077.570] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdf101 | out: pbBuffer=0x10cdf101) returned 1 [0077.571] ReadFile (in: hFile=0x19c, lpBuffer=0x10d72000, nNumberOfBytesToRead=0xa785, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d72000*, lpNumberOfBytesRead=0x10c89bf0*=0xa785, lpOverlapped=0x0) returned 1 [0077.572] GetFileType (hFile=0x19c) returned 0x1 [0077.572] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.572] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e000*, nNumberOfBytesToWrite=0xa785, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1e000*, lpNumberOfBytesWritten=0x10c89bf0*=0xa785, lpOverlapped=0x10c89bf4) returned 1 [0077.573] GetFileType (hFile=0x19c) returned 0x1 [0077.573] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa785, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.573] GetFileType (hFile=0x19c) returned 0x1 [0077.573] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.573] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdf000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdf000*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.573] GetFileType (hFile=0x19c) returned 0x1 [0077.573] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa785, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.573] GetFileType (hFile=0x19c) returned 0x1 [0077.573] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.573] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdf200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdf200*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.573] GetFileType (hFile=0x19c) returned 0x1 [0077.573] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa785, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.573] GetFileType (hFile=0x19c) returned 0x1 [0077.573] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.574] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.574] GetFileType (hFile=0x19c) returned 0x1 [0077.574] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa785, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.574] CloseHandle (hObject=0x19c) returned 1 [0077.574] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\JS0PtkkWK.m4a" (normalized: "c:\\users\\fd1hvy\\music\\js0ptkkwk.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\JS0PtkkWK.m4a.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\js0ptkkwk.m4a.trapget"), dwFlags=0x1) returned 1 [0077.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\QyeM.m4a" (normalized: "c:\\users\\fd1hvy\\music\\qyem.m4a"), fInfoLevelId=0x0, lpFileInformation=0x10cd3a98 | out: lpFileInformation=0x10cd3a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499a2850, ftCreationTime.dwHighDateTime=0x1d629d9, ftLastAccessTime.dwLowDateTime=0xa7be7220, ftLastAccessTime.dwHighDateTime=0x1d6269f, ftLastWriteTime.dwLowDateTime=0xa7be7220, ftLastWriteTime.dwHighDateTime=0x1d6269f, nFileSizeHigh=0x0, nFileSizeLow=0xeac2)) returned 1 [0077.575] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\QyeM.m4a" (normalized: "c:\\users\\fd1hvy\\music\\qyem.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.575] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.575] GetFileType (hFile=0x19c) returned 0x1 [0077.575] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.575] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f080 | out: pbBuffer=0x10c6f080) returned 1 [0077.575] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f090 | out: pbBuffer=0x10c6f090) returned 1 [0077.576] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdf301 | out: pbBuffer=0x10cdf301) returned 1 [0077.576] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdf501 | out: pbBuffer=0x10cdf501) returned 1 [0077.577] ReadFile (in: hFile=0x19c, lpBuffer=0x10d80000, nNumberOfBytesToRead=0xeac2, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d80000*, lpNumberOfBytesRead=0x10c89bf0*=0xeac2, lpOverlapped=0x0) returned 1 [0077.580] GetFileType (hFile=0x19c) returned 0x1 [0077.580] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.581] WriteFile (in: hFile=0x19c, lpBuffer=0x10d90000*, nNumberOfBytesToWrite=0xeac2, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d90000*, lpNumberOfBytesWritten=0x10c89bf0*=0xeac2, lpOverlapped=0x10c89bf4) returned 1 [0077.581] GetFileType (hFile=0x19c) returned 0x1 [0077.582] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeac2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.582] GetFileType (hFile=0x19c) returned 0x1 [0077.582] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.582] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdf400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdf400*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.582] GetFileType (hFile=0x19c) returned 0x1 [0077.583] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeac2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.583] GetFileType (hFile=0x19c) returned 0x1 [0077.583] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.583] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdf600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cdf600*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.583] GetFileType (hFile=0x19c) returned 0x1 [0077.583] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeac2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.583] GetFileType (hFile=0x19c) returned 0x1 [0077.583] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.583] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.583] GetFileType (hFile=0x19c) returned 0x1 [0077.583] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeac2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.583] CloseHandle (hObject=0x19c) returned 1 [0077.584] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\QyeM.m4a" (normalized: "c:\\users\\fd1hvy\\music\\qyem.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\QyeM.m4a.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\qyem.m4a.trapget"), dwFlags=0x1) returned 1 [0077.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4"), fInfoLevelId=0x0, lpFileInformation=0x10cd3bd8 | out: lpFileInformation=0x10cd3bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2860ec40, ftCreationTime.dwHighDateTime=0x1d62ff2, ftLastAccessTime.dwLowDateTime=0xf3a8aba0, ftLastAccessTime.dwHighDateTime=0x1d62358, ftLastWriteTime.dwLowDateTime=0xf3a8aba0, ftLastWriteTime.dwHighDateTime=0x1d62358, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0077.585] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.585] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2860ec40, ftCreationTime.dwHighDateTime=0x1d62ff2, ftLastAccessTime.dwLowDateTime=0xf3a8aba0, ftLastAccessTime.dwHighDateTime=0x1d62358, ftLastWriteTime.dwLowDateTime=0xf3a8aba0, ftLastWriteTime.dwHighDateTime=0x1d62358, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efe78 [0077.585] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2860ec40, ftCreationTime.dwHighDateTime=0x1d62ff2, ftLastAccessTime.dwLowDateTime=0xf3a8aba0, ftLastAccessTime.dwHighDateTime=0x1d62358, ftLastWriteTime.dwLowDateTime=0xf3a8aba0, ftLastWriteTime.dwHighDateTime=0x1d62358, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.585] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d4bb630, ftCreationTime.dwHighDateTime=0x1d6263e, ftLastAccessTime.dwLowDateTime=0x33173f80, ftLastAccessTime.dwHighDateTime=0x1d62391, ftLastWriteTime.dwLowDateTime=0x33173f80, ftLastWriteTime.dwHighDateTime=0x1d62391, nFileSizeHigh=0x0, nFileSizeLow=0x10e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="2MGDQudw8_9e.wav", cAlternateFileName="2MGDQU~1.WAV")) returned 1 [0077.585] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7647bf60, ftCreationTime.dwHighDateTime=0x1d62895, ftLastAccessTime.dwLowDateTime=0x7a774420, ftLastAccessTime.dwHighDateTime=0x1d62c0a, ftLastWriteTime.dwLowDateTime=0x7a774420, ftLastWriteTime.dwHighDateTime=0x1d62c0a, nFileSizeHigh=0x0, nFileSizeLow=0xfbab, dwReserved0=0x0, dwReserved1=0x0, cFileName="agpBuw-E4jT.mp3", cAlternateFileName="AGPBUW~1.MP3")) returned 1 [0077.585] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe275b500, ftCreationTime.dwHighDateTime=0x1d62883, ftLastAccessTime.dwLowDateTime=0x8cf82260, ftLastAccessTime.dwHighDateTime=0x1d62cd0, ftLastWriteTime.dwLowDateTime=0x8cf82260, ftLastWriteTime.dwHighDateTime=0x1d62cd0, nFileSizeHigh=0x0, nFileSizeLow=0x3008, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApWaJ2CVXZqQwTAC.wav", cAlternateFileName="APWAJ2~1.WAV")) returned 1 [0077.585] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b74690, ftCreationTime.dwHighDateTime=0x1d6269b, ftLastAccessTime.dwLowDateTime=0x374a6300, ftLastAccessTime.dwHighDateTime=0x1d630a4, ftLastWriteTime.dwLowDateTime=0x374a6300, ftLastWriteTime.dwHighDateTime=0x1d630a4, nFileSizeHigh=0x0, nFileSizeLow=0x2c5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cp0-oQtTBaFoVzA.wav", cAlternateFileName="CP0-OQ~1.WAV")) returned 1 [0077.585] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49a180, ftCreationTime.dwHighDateTime=0x1d63271, ftLastAccessTime.dwLowDateTime=0x758b3390, ftLastAccessTime.dwHighDateTime=0x1d6278c, ftLastWriteTime.dwLowDateTime=0x758b3390, ftLastWriteTime.dwHighDateTime=0x1d6278c, nFileSizeHigh=0x0, nFileSizeLow=0x17a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="eXSUfjTtNjWkcZ.wav", cAlternateFileName="EXSUFJ~1.WAV")) returned 1 [0077.585] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d06fb0, ftCreationTime.dwHighDateTime=0x1d6308b, ftLastAccessTime.dwLowDateTime=0xcc4fd060, ftLastAccessTime.dwHighDateTime=0x1d62beb, ftLastWriteTime.dwLowDateTime=0xcc4fd060, ftLastWriteTime.dwHighDateTime=0x1d62beb, nFileSizeHigh=0x0, nFileSizeLow=0xa401, dwReserved0=0x0, dwReserved1=0x0, cFileName="fFEtoRODrkXo0Q8Z.m4a", cAlternateFileName="FFETOR~1.M4A")) returned 1 [0077.585] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1be23c60, ftCreationTime.dwHighDateTime=0x1d6271b, ftLastAccessTime.dwLowDateTime=0x10605e0, ftLastAccessTime.dwHighDateTime=0x1d62976, ftLastWriteTime.dwLowDateTime=0x10605e0, ftLastWriteTime.dwHighDateTime=0x1d62976, nFileSizeHigh=0x0, nFileSizeLow=0x7644, dwReserved0=0x0, dwReserved1=0x0, cFileName="HjsFopPS5qUAax1y.mp3", cAlternateFileName="HJSFOP~1.MP3")) returned 1 [0077.585] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ecc8680, ftCreationTime.dwHighDateTime=0x1d62be1, ftLastAccessTime.dwLowDateTime=0x2703b770, ftLastAccessTime.dwHighDateTime=0x1d62c27, ftLastWriteTime.dwLowDateTime=0x2703b770, ftLastWriteTime.dwHighDateTime=0x1d62c27, nFileSizeHigh=0x0, nFileSizeLow=0xece4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOrzsf.wav", cAlternateFileName="")) returned 1 [0077.585] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9b2650, ftCreationTime.dwHighDateTime=0x1d62f4c, ftLastAccessTime.dwLowDateTime=0xf3225940, ftLastAccessTime.dwHighDateTime=0x1d62d4b, ftLastWriteTime.dwLowDateTime=0xf3225940, ftLastWriteTime.dwHighDateTime=0x1d62d4b, nFileSizeHigh=0x0, nFileSizeLow=0x134c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="HuUpT9o4emMEu_3P.m4a", cAlternateFileName="HUUPT9~1.M4A")) returned 1 [0077.585] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fb8830, ftCreationTime.dwHighDateTime=0x1d629cf, ftLastAccessTime.dwLowDateTime=0xf942df00, ftLastAccessTime.dwHighDateTime=0x1d623cf, ftLastWriteTime.dwLowDateTime=0xf942df00, ftLastWriteTime.dwHighDateTime=0x1d623cf, nFileSizeHigh=0x0, nFileSizeLow=0x17243, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmTdyR02Yo.wav", cAlternateFileName="JMTDYR~1.WAV")) returned 1 [0077.585] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642fcbc0, ftCreationTime.dwHighDateTime=0x1d62d17, ftLastAccessTime.dwLowDateTime=0xfc562950, ftLastAccessTime.dwHighDateTime=0x1d63300, ftLastWriteTime.dwLowDateTime=0xfc562950, ftLastWriteTime.dwHighDateTime=0x1d63300, nFileSizeHigh=0x0, nFileSizeLow=0x1668f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MceZV6.wav", cAlternateFileName="")) returned 1 [0077.586] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x132fb5c0, ftCreationTime.dwHighDateTime=0x1d62be4, ftLastAccessTime.dwLowDateTime=0xb8bebc10, ftLastAccessTime.dwHighDateTime=0x1d631f3, ftLastWriteTime.dwLowDateTime=0xb8bebc10, ftLastWriteTime.dwHighDateTime=0x1d631f3, nFileSizeHigh=0x0, nFileSizeLow=0x88b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Njby_9HMiS.wav", cAlternateFileName="NJBY_9~1.WAV")) returned 1 [0077.586] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f361420, ftCreationTime.dwHighDateTime=0x1d62c72, ftLastAccessTime.dwLowDateTime=0x9a831a70, ftLastAccessTime.dwHighDateTime=0x1d6317b, ftLastWriteTime.dwLowDateTime=0x9a831a70, ftLastWriteTime.dwHighDateTime=0x1d6317b, nFileSizeHigh=0x0, nFileSizeLow=0x21f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SfhC9hgIb1_VBe4Mx.m4a", cAlternateFileName="SFHC9H~1.M4A")) returned 1 [0077.586] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed39fb0, ftCreationTime.dwHighDateTime=0x1d62b76, ftLastAccessTime.dwLowDateTime=0x5f324930, ftLastAccessTime.dwHighDateTime=0x1d62a11, ftLastWriteTime.dwLowDateTime=0x5f324930, ftLastWriteTime.dwHighDateTime=0x1d62a11, nFileSizeHigh=0x0, nFileSizeLow=0x3fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrB91YSryom.mp3", cAlternateFileName="TRB91Y~1.MP3")) returned 1 [0077.586] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10d66b0, ftCreationTime.dwHighDateTime=0x1d6281a, ftLastAccessTime.dwLowDateTime=0x153d09e0, ftLastAccessTime.dwHighDateTime=0x1d625ad, ftLastWriteTime.dwLowDateTime=0x153d09e0, ftLastWriteTime.dwHighDateTime=0x1d625ad, nFileSizeHigh=0x0, nFileSizeLow=0x10fab, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzpJ-at.m4a", cAlternateFileName="")) returned 1 [0077.586] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a7e69c0, ftCreationTime.dwHighDateTime=0x1d6234f, ftLastAccessTime.dwLowDateTime=0xfe2358d0, ftLastAccessTime.dwHighDateTime=0x1d62aa8, ftLastWriteTime.dwLowDateTime=0xfe2358d0, ftLastWriteTime.dwHighDateTime=0x1d62aa8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="umJb93xiZZjmp3yke5.mp3", cAlternateFileName="UMJB93~1.MP3")) returned 1 [0077.586] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9e8d0, ftCreationTime.dwHighDateTime=0x1d628ae, ftLastAccessTime.dwLowDateTime=0xc601d9b0, ftLastAccessTime.dwHighDateTime=0x1d627cc, ftLastWriteTime.dwLowDateTime=0xc601d9b0, ftLastWriteTime.dwHighDateTime=0x1d627cc, nFileSizeHigh=0x0, nFileSizeLow=0xdfd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFRDY lFJE4s.wav", cAlternateFileName="VFRDYL~1.WAV")) returned 1 [0077.586] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76a0fa0, ftCreationTime.dwHighDateTime=0x1d62fd1, ftLastAccessTime.dwLowDateTime=0xcb013700, ftLastAccessTime.dwHighDateTime=0x1d62d01, ftLastWriteTime.dwLowDateTime=0xcb013700, ftLastWriteTime.dwHighDateTime=0x1d62d01, nFileSizeHigh=0x0, nFileSizeLow=0x15e3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIpy2EcK.mp3", cAlternateFileName="")) returned 1 [0077.586] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488b69f0, ftCreationTime.dwHighDateTime=0x1d63088, ftLastAccessTime.dwLowDateTime=0x27c59520, ftLastAccessTime.dwHighDateTime=0x1d62eca, ftLastWriteTime.dwLowDateTime=0x27c59520, ftLastWriteTime.dwHighDateTime=0x1d62eca, nFileSizeHigh=0x0, nFileSizeLow=0xe0aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="YcO_ZCe_C7Qs.wav", cAlternateFileName="YCO_ZC~1.WAV")) returned 1 [0077.586] FindNextFileW (in: hFindFile=0x7efe78, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.586] FindClose (in: hFindFile=0x7efe78 | out: hFindFile=0x7efe78) returned 1 [0077.586] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.590] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0077.590] GetFileType (hFile=0x19c) returned 0x1 [0077.590] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.591] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffb200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10ffb200*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0077.593] GetFileType (hFile=0x19c) returned 0x1 [0077.593] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0077.593] CloseHandle (hObject=0x19c) returned 1 [0077.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\2MGDQudw8_9e.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\2mgdqudw8_9e.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c6238 | out: lpFileInformation=0x110c6238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d4bb630, ftCreationTime.dwHighDateTime=0x1d6263e, ftLastAccessTime.dwLowDateTime=0x33173f80, ftLastAccessTime.dwHighDateTime=0x1d62391, ftLastWriteTime.dwLowDateTime=0x33173f80, ftLastWriteTime.dwHighDateTime=0x1d62391, nFileSizeHigh=0x0, nFileSizeLow=0x10e61)) returned 1 [0077.593] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\2MGDQudw8_9e.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\2mgdqudw8_9e.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.594] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.594] GetFileType (hFile=0x19c) returned 0x1 [0077.594] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.594] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f1f0 | out: pbBuffer=0x10c6f1f0) returned 1 [0077.594] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f200 | out: pbBuffer=0x10c6f200) returned 1 [0077.594] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdf701 | out: pbBuffer=0x10cdf701) returned 1 [0077.595] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdf901 | out: pbBuffer=0x10cdf901) returned 1 [0077.596] ReadFile (in: hFile=0x19c, lpBuffer=0x10da4000, nNumberOfBytesToRead=0x10e61, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10da4000*, lpNumberOfBytesRead=0x10c89b8c*=0x10e61, lpOverlapped=0x0) returned 1 [0077.597] GetFileType (hFile=0x19c) returned 0x1 [0077.597] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.597] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x10e61, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89b8c*=0x10e61, lpOverlapped=0x10c89b90) returned 1 [0077.598] GetFileType (hFile=0x19c) returned 0x1 [0077.598] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10e61, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.598] GetFileType (hFile=0x19c) returned 0x1 [0077.598] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.598] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdf800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10cdf800*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.598] GetFileType (hFile=0x19c) returned 0x1 [0077.598] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10e61, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.598] GetFileType (hFile=0x19c) returned 0x1 [0077.598] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.598] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdfa00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10cdfa00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.598] GetFileType (hFile=0x19c) returned 0x1 [0077.598] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10e61, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.598] GetFileType (hFile=0x19c) returned 0x1 [0077.598] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.598] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.599] GetFileType (hFile=0x19c) returned 0x1 [0077.599] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10e61, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.599] CloseHandle (hObject=0x19c) returned 1 [0077.599] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\2MGDQudw8_9e.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\2mgdqudw8_9e.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\2MGDQudw8_9e.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\2mgdqudw8_9e.wav.trapget"), dwFlags=0x1) returned 1 [0077.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\ApWaJ2CVXZqQwTAC.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\apwaj2cvxzqqwtac.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c6378 | out: lpFileInformation=0x110c6378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe275b500, ftCreationTime.dwHighDateTime=0x1d62883, ftLastAccessTime.dwLowDateTime=0x8cf82260, ftLastAccessTime.dwHighDateTime=0x1d62cd0, ftLastWriteTime.dwLowDateTime=0x8cf82260, ftLastWriteTime.dwHighDateTime=0x1d62cd0, nFileSizeHigh=0x0, nFileSizeLow=0x3008)) returned 1 [0077.599] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\ApWaJ2CVXZqQwTAC.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\apwaj2cvxzqqwtac.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.600] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.600] GetFileType (hFile=0x19c) returned 0x1 [0077.600] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.600] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f2d0 | out: pbBuffer=0x10c6f2d0) returned 1 [0077.600] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f2e0 | out: pbBuffer=0x10c6f2e0) returned 1 [0077.600] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdfb01 | out: pbBuffer=0x10cdfb01) returned 1 [0077.600] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdfd01 | out: pbBuffer=0x10cdfd01) returned 1 [0077.601] ReadFile (in: hFile=0x19c, lpBuffer=0x11010000, nNumberOfBytesToRead=0x3008, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x11010000*, lpNumberOfBytesRead=0x10c89b8c*=0x3008, lpOverlapped=0x0) returned 1 [0077.601] GetFileType (hFile=0x19c) returned 0x1 [0077.601] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.601] WriteFile (in: hFile=0x19c, lpBuffer=0x11013500*, nNumberOfBytesToWrite=0x3008, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x11013500*, lpNumberOfBytesWritten=0x10c89b8c*=0x3008, lpOverlapped=0x10c89b90) returned 1 [0077.601] GetFileType (hFile=0x19c) returned 0x1 [0077.601] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3008, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.602] GetFileType (hFile=0x19c) returned 0x1 [0077.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.602] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdfc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10cdfc00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.602] GetFileType (hFile=0x19c) returned 0x1 [0077.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3008, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.602] GetFileType (hFile=0x19c) returned 0x1 [0077.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.602] WriteFile (in: hFile=0x19c, lpBuffer=0x10cdfe00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10cdfe00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.602] GetFileType (hFile=0x19c) returned 0x1 [0077.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3008, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.602] GetFileType (hFile=0x19c) returned 0x1 [0077.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.602] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.602] GetFileType (hFile=0x19c) returned 0x1 [0077.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3008, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.602] CloseHandle (hObject=0x19c) returned 1 [0077.602] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\ApWaJ2CVXZqQwTAC.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\apwaj2cvxzqqwtac.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\ApWaJ2CVXZqQwTAC.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\apwaj2cvxzqqwtac.wav.trapget"), dwFlags=0x1) returned 1 [0077.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\Cp0-oQtTBaFoVzA.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\cp0-oqttbafovza.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c64b8 | out: lpFileInformation=0x110c64b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b74690, ftCreationTime.dwHighDateTime=0x1d6269b, ftLastAccessTime.dwLowDateTime=0x374a6300, ftLastAccessTime.dwHighDateTime=0x1d630a4, ftLastWriteTime.dwLowDateTime=0x374a6300, ftLastWriteTime.dwHighDateTime=0x1d630a4, nFileSizeHigh=0x0, nFileSizeLow=0x2c5c)) returned 1 [0077.608] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\Cp0-oQtTBaFoVzA.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\cp0-oqttbafovza.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.608] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.608] GetFileType (hFile=0x19c) returned 0x1 [0077.608] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.608] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f3c0 | out: pbBuffer=0x10c6f3c0) returned 1 [0077.608] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f3d0 | out: pbBuffer=0x10c6f3d0) returned 1 [0077.608] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10cdff01 | out: pbBuffer=0x10cdff01) returned 1 [0077.609] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101c101 | out: pbBuffer=0x1101c101) returned 1 [0077.609] ReadFile (in: hFile=0x19c, lpBuffer=0x11026000, nNumberOfBytesToRead=0x2c5c, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x11026000*, lpNumberOfBytesRead=0x10c89b8c*=0x2c5c, lpOverlapped=0x0) returned 1 [0077.610] GetFileType (hFile=0x19c) returned 0x1 [0077.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.610] WriteFile (in: hFile=0x19c, lpBuffer=0x11029000*, nNumberOfBytesToWrite=0x2c5c, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x11029000*, lpNumberOfBytesWritten=0x10c89b8c*=0x2c5c, lpOverlapped=0x10c89b90) returned 1 [0077.610] GetFileType (hFile=0x19c) returned 0x1 [0077.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2c5c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.610] GetFileType (hFile=0x19c) returned 0x1 [0077.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.610] WriteFile (in: hFile=0x19c, lpBuffer=0x1101c000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101c000*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.610] GetFileType (hFile=0x19c) returned 0x1 [0077.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2c5c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.610] GetFileType (hFile=0x19c) returned 0x1 [0077.610] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.610] WriteFile (in: hFile=0x19c, lpBuffer=0x1101c200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101c200*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.611] GetFileType (hFile=0x19c) returned 0x1 [0077.611] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2c5c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.611] GetFileType (hFile=0x19c) returned 0x1 [0077.611] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.611] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.611] GetFileType (hFile=0x19c) returned 0x1 [0077.611] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2c5c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.611] CloseHandle (hObject=0x19c) returned 1 [0077.611] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\Cp0-oQtTBaFoVzA.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\cp0-oqttbafovza.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\Cp0-oQtTBaFoVzA.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\cp0-oqttbafovza.wav.trapget"), dwFlags=0x1) returned 1 [0077.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\HOrzsf.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\horzsf.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c65f8 | out: lpFileInformation=0x110c65f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ecc8680, ftCreationTime.dwHighDateTime=0x1d62be1, ftLastAccessTime.dwLowDateTime=0x2703b770, ftLastAccessTime.dwHighDateTime=0x1d62c27, ftLastWriteTime.dwLowDateTime=0x2703b770, ftLastWriteTime.dwHighDateTime=0x1d62c27, nFileSizeHigh=0x0, nFileSizeLow=0xece4)) returned 1 [0077.612] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\HOrzsf.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\horzsf.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.612] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.612] GetFileType (hFile=0x19c) returned 0x1 [0077.612] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.612] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f4b0 | out: pbBuffer=0x10c6f4b0) returned 1 [0077.612] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f4c0 | out: pbBuffer=0x10c6f4c0) returned 1 [0077.612] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101c301 | out: pbBuffer=0x1101c301) returned 1 [0077.612] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101c501 | out: pbBuffer=0x1101c501) returned 1 [0077.613] ReadFile (in: hFile=0x19c, lpBuffer=0x11030000, nNumberOfBytesToRead=0xece4, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x11030000*, lpNumberOfBytesRead=0x10c89b8c*=0xece4, lpOverlapped=0x0) returned 1 [0077.614] GetFileType (hFile=0x19c) returned 0x1 [0077.614] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.614] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfa000*, nNumberOfBytesToWrite=0xece4, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10cfa000*, lpNumberOfBytesWritten=0x10c89b8c*=0xece4, lpOverlapped=0x10c89b90) returned 1 [0077.614] GetFileType (hFile=0x19c) returned 0x1 [0077.614] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xece4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.614] GetFileType (hFile=0x19c) returned 0x1 [0077.614] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.614] WriteFile (in: hFile=0x19c, lpBuffer=0x1101c400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101c400*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.614] GetFileType (hFile=0x19c) returned 0x1 [0077.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xece4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.615] GetFileType (hFile=0x19c) returned 0x1 [0077.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.615] WriteFile (in: hFile=0x19c, lpBuffer=0x1101c600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101c600*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.615] GetFileType (hFile=0x19c) returned 0x1 [0077.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xece4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.615] GetFileType (hFile=0x19c) returned 0x1 [0077.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.615] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.615] GetFileType (hFile=0x19c) returned 0x1 [0077.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xece4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.615] CloseHandle (hObject=0x19c) returned 1 [0077.615] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\HOrzsf.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\horzsf.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\HOrzsf.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\horzsf.wav.trapget"), dwFlags=0x1) returned 1 [0077.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\HjsFopPS5qUAax1y.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\hjsfopps5quaax1y.mp3"), fInfoLevelId=0x0, lpFileInformation=0x110c6788 | out: lpFileInformation=0x110c6788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1be23c60, ftCreationTime.dwHighDateTime=0x1d6271b, ftLastAccessTime.dwLowDateTime=0x10605e0, ftLastAccessTime.dwHighDateTime=0x1d62976, ftLastWriteTime.dwLowDateTime=0x10605e0, ftLastWriteTime.dwHighDateTime=0x1d62976, nFileSizeHigh=0x0, nFileSizeLow=0x7644)) returned 1 [0077.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\HjsFopPS5qUAax1y.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\hjsfopps5quaax1y.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.616] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.616] GetFileType (hFile=0x19c) returned 0x1 [0077.616] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.616] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f5a0 | out: pbBuffer=0x10c6f5a0) returned 1 [0077.616] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f5b0 | out: pbBuffer=0x10c6f5b0) returned 1 [0077.616] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101c701 | out: pbBuffer=0x1101c701) returned 1 [0077.616] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101c901 | out: pbBuffer=0x1101c901) returned 1 [0077.617] ReadFile (in: hFile=0x19c, lpBuffer=0x10d10000, nNumberOfBytesToRead=0x7644, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10d10000*, lpNumberOfBytesRead=0x10c89b8c*=0x7644, lpOverlapped=0x0) returned 1 [0077.618] GetFileType (hFile=0x19c) returned 0x1 [0077.618] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.618] WriteFile (in: hFile=0x19c, lpBuffer=0x10d18000*, nNumberOfBytesToWrite=0x7644, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10d18000*, lpNumberOfBytesWritten=0x10c89b8c*=0x7644, lpOverlapped=0x10c89b90) returned 1 [0077.618] GetFileType (hFile=0x19c) returned 0x1 [0077.618] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7644, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.618] GetFileType (hFile=0x19c) returned 0x1 [0077.618] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.618] WriteFile (in: hFile=0x19c, lpBuffer=0x1101c800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101c800*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.618] GetFileType (hFile=0x19c) returned 0x1 [0077.618] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7644, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.618] GetFileType (hFile=0x19c) returned 0x1 [0077.618] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.618] WriteFile (in: hFile=0x19c, lpBuffer=0x1101ca00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101ca00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.618] GetFileType (hFile=0x19c) returned 0x1 [0077.618] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7644, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.618] GetFileType (hFile=0x19c) returned 0x1 [0077.618] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.618] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.618] GetFileType (hFile=0x19c) returned 0x1 [0077.618] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7644, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.618] CloseHandle (hObject=0x19c) returned 1 [0077.619] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\HjsFopPS5qUAax1y.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\hjsfopps5quaax1y.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\HjsFopPS5qUAax1y.mp3.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\hjsfopps5quaax1y.mp3.trapget"), dwFlags=0x1) returned 1 [0077.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\HuUpT9o4emMEu_3P.m4a" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\huupt9o4emmeu_3p.m4a"), fInfoLevelId=0x0, lpFileInformation=0x110c68c8 | out: lpFileInformation=0x110c68c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9b2650, ftCreationTime.dwHighDateTime=0x1d62f4c, ftLastAccessTime.dwLowDateTime=0xf3225940, ftLastAccessTime.dwHighDateTime=0x1d62d4b, ftLastWriteTime.dwLowDateTime=0xf3225940, ftLastWriteTime.dwHighDateTime=0x1d62d4b, nFileSizeHigh=0x0, nFileSizeLow=0x134c9)) returned 1 [0077.619] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\HuUpT9o4emMEu_3P.m4a" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\huupt9o4emmeu_3p.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.619] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.619] GetFileType (hFile=0x19c) returned 0x1 [0077.619] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.619] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f680 | out: pbBuffer=0x10c6f680) returned 1 [0077.619] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f690 | out: pbBuffer=0x10c6f690) returned 1 [0077.619] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101cb01 | out: pbBuffer=0x1101cb01) returned 1 [0077.620] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101cd01 | out: pbBuffer=0x1101cd01) returned 1 [0077.620] ReadFile (in: hFile=0x19c, lpBuffer=0x10d32000, nNumberOfBytesToRead=0x134c9, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10d32000*, lpNumberOfBytesRead=0x10c89b8c*=0x134c9, lpOverlapped=0x0) returned 1 [0077.622] GetFileType (hFile=0x19c) returned 0x1 [0077.622] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.622] WriteFile (in: hFile=0x19c, lpBuffer=0x10d46000*, nNumberOfBytesToWrite=0x134c9, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10d46000*, lpNumberOfBytesWritten=0x10c89b8c*=0x134c9, lpOverlapped=0x10c89b90) returned 1 [0077.622] GetFileType (hFile=0x19c) returned 0x1 [0077.622] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x134c9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.622] GetFileType (hFile=0x19c) returned 0x1 [0077.622] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.622] WriteFile (in: hFile=0x19c, lpBuffer=0x1101cc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101cc00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.622] GetFileType (hFile=0x19c) returned 0x1 [0077.623] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x134c9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.623] GetFileType (hFile=0x19c) returned 0x1 [0077.623] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.623] WriteFile (in: hFile=0x19c, lpBuffer=0x1101ce00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101ce00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.623] GetFileType (hFile=0x19c) returned 0x1 [0077.623] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x134c9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.623] GetFileType (hFile=0x19c) returned 0x1 [0077.623] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.623] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.623] GetFileType (hFile=0x19c) returned 0x1 [0077.623] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x134c9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.623] CloseHandle (hObject=0x19c) returned 1 [0077.623] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\HuUpT9o4emMEu_3P.m4a" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\huupt9o4emmeu_3p.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\HuUpT9o4emMEu_3P.m4a.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\huupt9o4emmeu_3p.m4a.trapget"), dwFlags=0x1) returned 1 [0077.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\MceZV6.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\mcezv6.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c6a08 | out: lpFileInformation=0x110c6a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642fcbc0, ftCreationTime.dwHighDateTime=0x1d62d17, ftLastAccessTime.dwLowDateTime=0xfc562950, ftLastAccessTime.dwHighDateTime=0x1d63300, ftLastWriteTime.dwLowDateTime=0xfc562950, ftLastWriteTime.dwHighDateTime=0x1d63300, nFileSizeHigh=0x0, nFileSizeLow=0x1668f)) returned 1 [0077.624] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\MceZV6.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\mcezv6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.624] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.624] GetFileType (hFile=0x19c) returned 0x1 [0077.624] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.624] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f770 | out: pbBuffer=0x10c6f770) returned 1 [0077.624] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f780 | out: pbBuffer=0x10c6f780) returned 1 [0077.624] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101cf01 | out: pbBuffer=0x1101cf01) returned 1 [0077.624] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101d101 | out: pbBuffer=0x1101d101) returned 1 [0077.625] ReadFile (in: hFile=0x19c, lpBuffer=0x10f22000, nNumberOfBytesToRead=0x1668f, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10f22000*, lpNumberOfBytesRead=0x10c89b8c*=0x1668f, lpOverlapped=0x0) returned 1 [0077.626] GetFileType (hFile=0x19c) returned 0x1 [0077.626] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.627] WriteFile (in: hFile=0x19c, lpBuffer=0x10f3a000*, nNumberOfBytesToWrite=0x1668f, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f3a000*, lpNumberOfBytesWritten=0x10c89b8c*=0x1668f, lpOverlapped=0x10c89b90) returned 1 [0077.627] GetFileType (hFile=0x19c) returned 0x1 [0077.627] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1668f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.627] GetFileType (hFile=0x19c) returned 0x1 [0077.627] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.627] WriteFile (in: hFile=0x19c, lpBuffer=0x1101d000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101d000*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.627] GetFileType (hFile=0x19c) returned 0x1 [0077.627] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1668f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.627] GetFileType (hFile=0x19c) returned 0x1 [0077.627] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.627] WriteFile (in: hFile=0x19c, lpBuffer=0x1101d200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101d200*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.627] GetFileType (hFile=0x19c) returned 0x1 [0077.627] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1668f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.627] GetFileType (hFile=0x19c) returned 0x1 [0077.627] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.628] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.628] GetFileType (hFile=0x19c) returned 0x1 [0077.628] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1668f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.628] CloseHandle (hObject=0x19c) returned 1 [0077.628] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\MceZV6.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\mcezv6.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\MceZV6.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\mcezv6.wav.trapget"), dwFlags=0x1) returned 1 [0077.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\Njby_9HMiS.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\njby_9hmis.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c6b48 | out: lpFileInformation=0x110c6b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x132fb5c0, ftCreationTime.dwHighDateTime=0x1d62be4, ftLastAccessTime.dwLowDateTime=0xb8bebc10, ftLastAccessTime.dwHighDateTime=0x1d631f3, ftLastWriteTime.dwLowDateTime=0xb8bebc10, ftLastWriteTime.dwHighDateTime=0x1d631f3, nFileSizeHigh=0x0, nFileSizeLow=0x88b1)) returned 1 [0077.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\Njby_9HMiS.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\njby_9hmis.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.628] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.628] GetFileType (hFile=0x19c) returned 0x1 [0077.628] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.629] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f860 | out: pbBuffer=0x10c6f860) returned 1 [0077.629] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f870 | out: pbBuffer=0x10c6f870) returned 1 [0077.629] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101d301 | out: pbBuffer=0x1101d301) returned 1 [0077.629] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101d501 | out: pbBuffer=0x1101d501) returned 1 [0077.629] ReadFile (in: hFile=0x19c, lpBuffer=0x10f5c000, nNumberOfBytesToRead=0x88b1, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10f5c000*, lpNumberOfBytesRead=0x10c89b8c*=0x88b1, lpOverlapped=0x0) returned 1 [0077.630] GetFileType (hFile=0x19c) returned 0x1 [0077.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.630] WriteFile (in: hFile=0x19c, lpBuffer=0x10f66000*, nNumberOfBytesToWrite=0x88b1, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f66000*, lpNumberOfBytesWritten=0x10c89b8c*=0x88b1, lpOverlapped=0x10c89b90) returned 1 [0077.630] GetFileType (hFile=0x19c) returned 0x1 [0077.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x88b1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.631] GetFileType (hFile=0x19c) returned 0x1 [0077.631] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.631] WriteFile (in: hFile=0x19c, lpBuffer=0x1101d400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101d400*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.631] GetFileType (hFile=0x19c) returned 0x1 [0077.631] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x88b1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.631] GetFileType (hFile=0x19c) returned 0x1 [0077.631] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.631] WriteFile (in: hFile=0x19c, lpBuffer=0x1101d600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101d600*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.631] GetFileType (hFile=0x19c) returned 0x1 [0077.631] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x88b1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.631] GetFileType (hFile=0x19c) returned 0x1 [0077.631] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.631] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.631] GetFileType (hFile=0x19c) returned 0x1 [0077.631] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x88b1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.631] CloseHandle (hObject=0x19c) returned 1 [0077.631] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\Njby_9HMiS.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\njby_9hmis.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\Njby_9HMiS.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\njby_9hmis.wav.trapget"), dwFlags=0x1) returned 1 [0077.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\SfhC9hgIb1_VBe4Mx.m4a" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\sfhc9hgib1_vbe4mx.m4a"), fInfoLevelId=0x0, lpFileInformation=0x110c6c88 | out: lpFileInformation=0x110c6c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f361420, ftCreationTime.dwHighDateTime=0x1d62c72, ftLastAccessTime.dwLowDateTime=0x9a831a70, ftLastAccessTime.dwHighDateTime=0x1d6317b, ftLastWriteTime.dwLowDateTime=0x9a831a70, ftLastWriteTime.dwHighDateTime=0x1d6317b, nFileSizeHigh=0x0, nFileSizeLow=0x21f3)) returned 1 [0077.632] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\SfhC9hgIb1_VBe4Mx.m4a" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\sfhc9hgib1_vbe4mx.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.632] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.632] GetFileType (hFile=0x19c) returned 0x1 [0077.632] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.632] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f970 | out: pbBuffer=0x10c6f970) returned 1 [0077.632] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f980 | out: pbBuffer=0x10c6f980) returned 1 [0077.632] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101d701 | out: pbBuffer=0x1101d701) returned 1 [0077.633] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101d901 | out: pbBuffer=0x1101d901) returned 1 [0077.633] ReadFile (in: hFile=0x19c, lpBuffer=0x10f76000, nNumberOfBytesToRead=0x21f3, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10f76000*, lpNumberOfBytesRead=0x10c89b8c*=0x21f3, lpOverlapped=0x0) returned 1 [0077.633] GetFileType (hFile=0x19c) returned 0x1 [0077.634] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.634] WriteFile (in: hFile=0x19c, lpBuffer=0x10f78500*, nNumberOfBytesToWrite=0x21f3, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f78500*, lpNumberOfBytesWritten=0x10c89b8c*=0x21f3, lpOverlapped=0x10c89b90) returned 1 [0077.634] GetFileType (hFile=0x19c) returned 0x1 [0077.634] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x21f3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.634] GetFileType (hFile=0x19c) returned 0x1 [0077.634] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.634] WriteFile (in: hFile=0x19c, lpBuffer=0x1101d800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101d800*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.634] GetFileType (hFile=0x19c) returned 0x1 [0077.634] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x21f3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.634] GetFileType (hFile=0x19c) returned 0x1 [0077.634] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.634] WriteFile (in: hFile=0x19c, lpBuffer=0x1101da00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101da00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.634] GetFileType (hFile=0x19c) returned 0x1 [0077.634] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x21f3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.634] GetFileType (hFile=0x19c) returned 0x1 [0077.634] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.634] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.634] GetFileType (hFile=0x19c) returned 0x1 [0077.634] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x21f3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.634] CloseHandle (hObject=0x19c) returned 1 [0077.635] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\SfhC9hgIb1_VBe4Mx.m4a" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\sfhc9hgib1_vbe4mx.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\SfhC9hgIb1_VBe4Mx.m4a.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\sfhc9hgib1_vbe4mx.m4a.trapget"), dwFlags=0x1) returned 1 [0077.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\TrB91YSryom.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\trb91ysryom.mp3"), fInfoLevelId=0x0, lpFileInformation=0x110c6dc8 | out: lpFileInformation=0x110c6dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed39fb0, ftCreationTime.dwHighDateTime=0x1d62b76, ftLastAccessTime.dwLowDateTime=0x5f324930, ftLastAccessTime.dwHighDateTime=0x1d62a11, ftLastWriteTime.dwLowDateTime=0x5f324930, ftLastWriteTime.dwHighDateTime=0x1d62a11, nFileSizeHigh=0x0, nFileSizeLow=0x3fac)) returned 1 [0077.635] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\TrB91YSryom.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\trb91ysryom.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.635] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.635] GetFileType (hFile=0x19c) returned 0x1 [0077.635] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.635] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fa50 | out: pbBuffer=0x10c6fa50) returned 1 [0077.635] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fa60 | out: pbBuffer=0x10c6fa60) returned 1 [0077.635] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101db01 | out: pbBuffer=0x1101db01) returned 1 [0077.636] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101dd01 | out: pbBuffer=0x1101dd01) returned 1 [0077.636] ReadFile (in: hFile=0x19c, lpBuffer=0x10e6e000, nNumberOfBytesToRead=0x3fac, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10e6e000*, lpNumberOfBytesRead=0x10c89b8c*=0x3fac, lpOverlapped=0x0) returned 1 [0077.637] GetFileType (hFile=0x19c) returned 0x1 [0077.637] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.637] WriteFile (in: hFile=0x19c, lpBuffer=0x10e72000*, nNumberOfBytesToWrite=0x3fac, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e72000*, lpNumberOfBytesWritten=0x10c89b8c*=0x3fac, lpOverlapped=0x10c89b90) returned 1 [0077.637] GetFileType (hFile=0x19c) returned 0x1 [0077.637] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3fac, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.637] GetFileType (hFile=0x19c) returned 0x1 [0077.637] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.637] WriteFile (in: hFile=0x19c, lpBuffer=0x1101dc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101dc00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.637] GetFileType (hFile=0x19c) returned 0x1 [0077.637] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3fac, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.637] GetFileType (hFile=0x19c) returned 0x1 [0077.637] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.637] WriteFile (in: hFile=0x19c, lpBuffer=0x1101de00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1101de00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.638] GetFileType (hFile=0x19c) returned 0x1 [0077.638] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3fac, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.638] GetFileType (hFile=0x19c) returned 0x1 [0077.638] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.638] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.638] GetFileType (hFile=0x19c) returned 0x1 [0077.638] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3fac, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.638] CloseHandle (hObject=0x19c) returned 1 [0077.638] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\TrB91YSryom.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\trb91ysryom.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\TrB91YSryom.mp3.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\trb91ysryom.mp3.trapget"), dwFlags=0x1) returned 1 [0077.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\VFRDY lFJE4s.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\vfrdy lfje4s.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c6f08 | out: lpFileInformation=0x110c6f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9e8d0, ftCreationTime.dwHighDateTime=0x1d628ae, ftLastAccessTime.dwLowDateTime=0xc601d9b0, ftLastAccessTime.dwHighDateTime=0x1d627cc, ftLastWriteTime.dwLowDateTime=0xc601d9b0, ftLastWriteTime.dwHighDateTime=0x1d627cc, nFileSizeHigh=0x0, nFileSizeLow=0xdfd4)) returned 1 [0077.638] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\VFRDY lFJE4s.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\vfrdy lfje4s.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.639] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.639] GetFileType (hFile=0x19c) returned 0x1 [0077.639] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.639] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fb60 | out: pbBuffer=0x10c6fb60) returned 1 [0077.639] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fb70 | out: pbBuffer=0x10c6fb70) returned 1 [0077.639] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1101df01 | out: pbBuffer=0x1101df01) returned 1 [0077.639] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78101 | out: pbBuffer=0x10e78101) returned 1 [0077.640] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7e000, nNumberOfBytesToRead=0xdfd4, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10e7e000*, lpNumberOfBytesRead=0x10c89b8c*=0xdfd4, lpOverlapped=0x0) returned 1 [0077.644] GetFileType (hFile=0x19c) returned 0x1 [0077.644] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.645] WriteFile (in: hFile=0x19c, lpBuffer=0x10e8c000*, nNumberOfBytesToWrite=0xdfd4, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e8c000*, lpNumberOfBytesWritten=0x10c89b8c*=0xdfd4, lpOverlapped=0x10c89b90) returned 1 [0077.645] GetFileType (hFile=0x19c) returned 0x1 [0077.645] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdfd4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.645] GetFileType (hFile=0x19c) returned 0x1 [0077.645] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.645] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78000*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.645] GetFileType (hFile=0x19c) returned 0x1 [0077.645] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdfd4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.645] GetFileType (hFile=0x19c) returned 0x1 [0077.645] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.645] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78200*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.645] GetFileType (hFile=0x19c) returned 0x1 [0077.645] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdfd4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.645] GetFileType (hFile=0x19c) returned 0x1 [0077.645] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.646] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.646] GetFileType (hFile=0x19c) returned 0x1 [0077.646] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xdfd4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.646] CloseHandle (hObject=0x19c) returned 1 [0077.646] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\VFRDY lFJE4s.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\vfrdy lfje4s.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\VFRDY lFJE4s.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\vfrdy lfje4s.wav.trapget"), dwFlags=0x1) returned 1 [0077.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\VIpy2EcK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\vipy2eck.mp3"), fInfoLevelId=0x0, lpFileInformation=0x110c7048 | out: lpFileInformation=0x110c7048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76a0fa0, ftCreationTime.dwHighDateTime=0x1d62fd1, ftLastAccessTime.dwLowDateTime=0xcb013700, ftLastAccessTime.dwHighDateTime=0x1d62d01, ftLastWriteTime.dwLowDateTime=0xcb013700, ftLastWriteTime.dwHighDateTime=0x1d62d01, nFileSizeHigh=0x0, nFileSizeLow=0x15e3f)) returned 1 [0077.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\VIpy2EcK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\vipy2eck.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.647] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.647] GetFileType (hFile=0x19c) returned 0x1 [0077.647] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.647] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fc60 | out: pbBuffer=0x10c6fc60) returned 1 [0077.647] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fc70 | out: pbBuffer=0x10c6fc70) returned 1 [0077.647] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78301 | out: pbBuffer=0x10e78301) returned 1 [0077.647] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78501 | out: pbBuffer=0x10e78501) returned 1 [0077.647] ReadFile (in: hFile=0x19c, lpBuffer=0x10ea8000, nNumberOfBytesToRead=0x15e3f, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10ea8000*, lpNumberOfBytesRead=0x10c89b8c*=0x15e3f, lpOverlapped=0x0) returned 1 [0077.649] GetFileType (hFile=0x19c) returned 0x1 [0077.649] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.649] WriteFile (in: hFile=0x19c, lpBuffer=0x10ebe000*, nNumberOfBytesToWrite=0x15e3f, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ebe000*, lpNumberOfBytesWritten=0x10c89b8c*=0x15e3f, lpOverlapped=0x10c89b90) returned 1 [0077.649] GetFileType (hFile=0x19c) returned 0x1 [0077.650] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15e3f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.650] GetFileType (hFile=0x19c) returned 0x1 [0077.650] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.650] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78400*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.650] GetFileType (hFile=0x19c) returned 0x1 [0077.650] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15e3f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.650] GetFileType (hFile=0x19c) returned 0x1 [0077.650] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.650] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78600*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.650] GetFileType (hFile=0x19c) returned 0x1 [0077.650] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15e3f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.650] GetFileType (hFile=0x19c) returned 0x1 [0077.650] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.650] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.650] GetFileType (hFile=0x19c) returned 0x1 [0077.650] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15e3f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.650] CloseHandle (hObject=0x19c) returned 1 [0077.650] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\VIpy2EcK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\vipy2eck.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\VIpy2EcK.mp3.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\vipy2eck.mp3.trapget"), dwFlags=0x1) returned 1 [0077.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\YcO_ZCe_C7Qs.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\yco_zce_c7qs.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c7188 | out: lpFileInformation=0x110c7188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488b69f0, ftCreationTime.dwHighDateTime=0x1d63088, ftLastAccessTime.dwLowDateTime=0x27c59520, ftLastAccessTime.dwHighDateTime=0x1d62eca, ftLastWriteTime.dwLowDateTime=0x27c59520, ftLastWriteTime.dwHighDateTime=0x1d62eca, nFileSizeHigh=0x0, nFileSizeLow=0xe0aa)) returned 1 [0077.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\YcO_ZCe_C7Qs.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\yco_zce_c7qs.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.651] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.651] GetFileType (hFile=0x19c) returned 0x1 [0077.651] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.651] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fd50 | out: pbBuffer=0x10c6fd50) returned 1 [0077.651] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fd60 | out: pbBuffer=0x10c6fd60) returned 1 [0077.651] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78701 | out: pbBuffer=0x10e78701) returned 1 [0077.652] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78901 | out: pbBuffer=0x10e78901) returned 1 [0077.667] ReadFile (in: hFile=0x19c, lpBuffer=0x10edc000, nNumberOfBytesToRead=0xe0aa, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10edc000*, lpNumberOfBytesRead=0x10c89b8c*=0xe0aa, lpOverlapped=0x0) returned 1 [0077.678] GetFileType (hFile=0x19c) returned 0x1 [0077.678] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.679] WriteFile (in: hFile=0x19c, lpBuffer=0x10eec000*, nNumberOfBytesToWrite=0xe0aa, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10eec000*, lpNumberOfBytesWritten=0x10c89b8c*=0xe0aa, lpOverlapped=0x10c89b90) returned 1 [0077.679] GetFileType (hFile=0x19c) returned 0x1 [0077.679] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe0aa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.679] GetFileType (hFile=0x19c) returned 0x1 [0077.679] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.679] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78800*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.679] GetFileType (hFile=0x19c) returned 0x1 [0077.679] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe0aa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.679] GetFileType (hFile=0x19c) returned 0x1 [0077.679] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.679] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78a00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.679] GetFileType (hFile=0x19c) returned 0x1 [0077.679] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe0aa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.679] GetFileType (hFile=0x19c) returned 0x1 [0077.679] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.679] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.679] GetFileType (hFile=0x19c) returned 0x1 [0077.680] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe0aa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.680] CloseHandle (hObject=0x19c) returned 1 [0077.680] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\YcO_ZCe_C7Qs.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\yco_zce_c7qs.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\YcO_ZCe_C7Qs.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\yco_zce_c7qs.wav.trapget"), dwFlags=0x1) returned 1 [0077.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\agpBuw-E4jT.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\agpbuw-e4jt.mp3"), fInfoLevelId=0x0, lpFileInformation=0x110c72c8 | out: lpFileInformation=0x110c72c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7647bf60, ftCreationTime.dwHighDateTime=0x1d62895, ftLastAccessTime.dwLowDateTime=0x7a774420, ftLastAccessTime.dwHighDateTime=0x1d62c0a, ftLastWriteTime.dwLowDateTime=0x7a774420, ftLastWriteTime.dwHighDateTime=0x1d62c0a, nFileSizeHigh=0x0, nFileSizeLow=0xfbab)) returned 1 [0077.680] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\agpBuw-E4jT.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\agpbuw-e4jt.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.680] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.681] GetFileType (hFile=0x19c) returned 0x1 [0077.681] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.681] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fe30 | out: pbBuffer=0x10c6fe30) returned 1 [0077.681] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fe40 | out: pbBuffer=0x10c6fe40) returned 1 [0077.681] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78b01 | out: pbBuffer=0x10e78b01) returned 1 [0077.681] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78d01 | out: pbBuffer=0x10e78d01) returned 1 [0077.681] SetEvent (hEvent=0x170) returned 1 [0077.681] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0077.683] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0077.683] SetEvent (hEvent=0x170) returned 1 [0077.683] SetEvent (hEvent=0x158) returned 1 [0077.683] SetEvent (hEvent=0x138) returned 1 [0077.683] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0077.690] SetEvent (hEvent=0x168) returned 1 [0077.690] SetEvent (hEvent=0x138) returned 1 [0077.690] ReadFile (in: hFile=0x19c, lpBuffer=0x10dbe000, nNumberOfBytesToRead=0xfbab, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10dbe000*, lpNumberOfBytesRead=0x10c89b8c*=0xfbab, lpOverlapped=0x0) returned 1 [0077.691] GetFileType (hFile=0x19c) returned 0x1 [0077.692] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.692] WriteFile (in: hFile=0x19c, lpBuffer=0x10dce000*, nNumberOfBytesToWrite=0xfbab, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10dce000*, lpNumberOfBytesWritten=0x10c89b8c*=0xfbab, lpOverlapped=0x10c89b90) returned 1 [0077.692] GetFileType (hFile=0x19c) returned 0x1 [0077.692] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfbab, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.692] GetFileType (hFile=0x19c) returned 0x1 [0077.692] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.692] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78c00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.692] GetFileType (hFile=0x19c) returned 0x1 [0077.692] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfbab, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.692] GetFileType (hFile=0x19c) returned 0x1 [0077.692] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.692] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78000*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.692] GetFileType (hFile=0x19c) returned 0x1 [0077.692] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfbab, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.693] GetFileType (hFile=0x19c) returned 0x1 [0077.693] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.693] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.693] GetFileType (hFile=0x19c) returned 0x1 [0077.693] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfbab, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.693] CloseHandle (hObject=0x19c) returned 1 [0077.693] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\agpBuw-E4jT.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\agpbuw-e4jt.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\agpBuw-E4jT.mp3.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\agpbuw-e4jt.mp3.trapget"), dwFlags=0x1) returned 1 [0077.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\eXSUfjTtNjWkcZ.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\exsufjttnjwkcz.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c6008 | out: lpFileInformation=0x110c6008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49a180, ftCreationTime.dwHighDateTime=0x1d63271, ftLastAccessTime.dwLowDateTime=0x758b3390, ftLastAccessTime.dwHighDateTime=0x1d6278c, ftLastWriteTime.dwLowDateTime=0x758b3390, ftLastWriteTime.dwHighDateTime=0x1d6278c, nFileSizeHigh=0x0, nFileSizeLow=0x17a80)) returned 1 [0077.693] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\eXSUfjTtNjWkcZ.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\exsufjttnjwkcz.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.694] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.694] GetFileType (hFile=0x19c) returned 0x1 [0077.694] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.694] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e040 | out: pbBuffer=0x10c6e040) returned 1 [0077.694] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e050 | out: pbBuffer=0x10c6e050) returned 1 [0077.694] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78101 | out: pbBuffer=0x10e78101) returned 1 [0077.694] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78301 | out: pbBuffer=0x10e78301) returned 1 [0077.694] ReadFile (in: hFile=0x19c, lpBuffer=0x10e4e000, nNumberOfBytesToRead=0x17a80, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10e4e000*, lpNumberOfBytesRead=0x10c89b8c*=0x17a80, lpOverlapped=0x0) returned 1 [0077.696] GetFileType (hFile=0x19c) returned 0x1 [0077.696] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.696] WriteFile (in: hFile=0x19c, lpBuffer=0x11042000*, nNumberOfBytesToWrite=0x17a80, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x11042000*, lpNumberOfBytesWritten=0x10c89b8c*=0x17a80, lpOverlapped=0x10c89b90) returned 1 [0077.696] GetFileType (hFile=0x19c) returned 0x1 [0077.696] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17a80, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.697] GetFileType (hFile=0x19c) returned 0x1 [0077.697] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.697] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78200*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.697] GetFileType (hFile=0x19c) returned 0x1 [0077.697] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17a80, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.697] GetFileType (hFile=0x19c) returned 0x1 [0077.697] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.697] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78400*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.697] GetFileType (hFile=0x19c) returned 0x1 [0077.697] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17a80, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.697] GetFileType (hFile=0x19c) returned 0x1 [0077.697] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.697] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.697] GetFileType (hFile=0x19c) returned 0x1 [0077.697] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17a80, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.697] CloseHandle (hObject=0x19c) returned 1 [0077.697] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\eXSUfjTtNjWkcZ.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\exsufjttnjwkcz.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\eXSUfjTtNjWkcZ.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\exsufjttnjwkcz.wav.trapget"), dwFlags=0x1) returned 1 [0077.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\fFEtoRODrkXo0Q8Z.m4a" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\ffetorodrkxo0q8z.m4a"), fInfoLevelId=0x0, lpFileInformation=0x110c6148 | out: lpFileInformation=0x110c6148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d06fb0, ftCreationTime.dwHighDateTime=0x1d6308b, ftLastAccessTime.dwLowDateTime=0xcc4fd060, ftLastAccessTime.dwHighDateTime=0x1d62beb, ftLastWriteTime.dwLowDateTime=0xcc4fd060, ftLastWriteTime.dwHighDateTime=0x1d62beb, nFileSizeHigh=0x0, nFileSizeLow=0xa401)) returned 1 [0077.698] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\fFEtoRODrkXo0Q8Z.m4a" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\ffetorodrkxo0q8z.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.698] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.698] GetFileType (hFile=0x19c) returned 0x1 [0077.698] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.698] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e120 | out: pbBuffer=0x10c6e120) returned 1 [0077.698] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e130 | out: pbBuffer=0x10c6e130) returned 1 [0077.698] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78501 | out: pbBuffer=0x10e78501) returned 1 [0077.698] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78701 | out: pbBuffer=0x10e78701) returned 1 [0077.699] ReadFile (in: hFile=0x19c, lpBuffer=0x10d72000, nNumberOfBytesToRead=0xa401, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10d72000*, lpNumberOfBytesRead=0x10c89b8c*=0xa401, lpOverlapped=0x0) returned 1 [0077.700] GetFileType (hFile=0x19c) returned 0x1 [0077.700] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.700] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1e000*, nNumberOfBytesToWrite=0xa401, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e1e000*, lpNumberOfBytesWritten=0x10c89b8c*=0xa401, lpOverlapped=0x10c89b90) returned 1 [0077.700] GetFileType (hFile=0x19c) returned 0x1 [0077.700] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa401, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.700] GetFileType (hFile=0x19c) returned 0x1 [0077.700] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.701] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78600*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.701] GetFileType (hFile=0x19c) returned 0x1 [0077.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa401, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.701] GetFileType (hFile=0x19c) returned 0x1 [0077.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.701] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78800*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.701] GetFileType (hFile=0x19c) returned 0x1 [0077.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa401, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.701] GetFileType (hFile=0x19c) returned 0x1 [0077.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.701] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.701] GetFileType (hFile=0x19c) returned 0x1 [0077.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa401, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.701] CloseHandle (hObject=0x19c) returned 1 [0077.701] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\fFEtoRODrkXo0Q8Z.m4a" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\ffetorodrkxo0q8z.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\fFEtoRODrkXo0Q8Z.m4a.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\ffetorodrkxo0q8z.m4a.trapget"), dwFlags=0x1) returned 1 [0077.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\jmTdyR02Yo.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\jmtdyr02yo.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c6288 | out: lpFileInformation=0x110c6288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fb8830, ftCreationTime.dwHighDateTime=0x1d629cf, ftLastAccessTime.dwLowDateTime=0xf942df00, ftLastAccessTime.dwHighDateTime=0x1d623cf, ftLastWriteTime.dwLowDateTime=0xf942df00, ftLastWriteTime.dwHighDateTime=0x1d623cf, nFileSizeHigh=0x0, nFileSizeLow=0x17243)) returned 1 [0077.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\jmTdyR02Yo.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\jmtdyr02yo.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.702] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.702] GetFileType (hFile=0x19c) returned 0x1 [0077.702] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.702] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e210 | out: pbBuffer=0x10c6e210) returned 1 [0077.702] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e220 | out: pbBuffer=0x10c6e220) returned 1 [0077.702] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78901 | out: pbBuffer=0x10e78901) returned 1 [0077.703] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78b01 | out: pbBuffer=0x10e78b01) returned 1 [0077.703] ReadFile (in: hFile=0x19c, lpBuffer=0x10f22000, nNumberOfBytesToRead=0x17243, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10f22000*, lpNumberOfBytesRead=0x10c89b8c*=0x17243, lpOverlapped=0x0) returned 1 [0077.704] GetFileType (hFile=0x19c) returned 0x1 [0077.705] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.705] WriteFile (in: hFile=0x19c, lpBuffer=0x10f3a000*, nNumberOfBytesToWrite=0x17243, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f3a000*, lpNumberOfBytesWritten=0x10c89b8c*=0x17243, lpOverlapped=0x10c89b90) returned 1 [0077.705] GetFileType (hFile=0x19c) returned 0x1 [0077.705] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17243, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.705] GetFileType (hFile=0x19c) returned 0x1 [0077.705] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.705] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78a00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.705] GetFileType (hFile=0x19c) returned 0x1 [0077.705] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17243, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.705] GetFileType (hFile=0x19c) returned 0x1 [0077.705] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.705] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78d00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.705] GetFileType (hFile=0x19c) returned 0x1 [0077.705] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17243, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.705] GetFileType (hFile=0x19c) returned 0x1 [0077.705] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.705] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.706] GetFileType (hFile=0x19c) returned 0x1 [0077.706] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17243, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.706] CloseHandle (hObject=0x19c) returned 1 [0077.706] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\jmTdyR02Yo.wav" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\jmtdyr02yo.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\jmTdyR02Yo.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\jmtdyr02yo.wav.trapget"), dwFlags=0x1) returned 1 [0077.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\tzpJ-at.m4a" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\tzpj-at.m4a"), fInfoLevelId=0x0, lpFileInformation=0x110c63c8 | out: lpFileInformation=0x110c63c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10d66b0, ftCreationTime.dwHighDateTime=0x1d6281a, ftLastAccessTime.dwLowDateTime=0x153d09e0, ftLastAccessTime.dwHighDateTime=0x1d625ad, ftLastWriteTime.dwLowDateTime=0x153d09e0, ftLastWriteTime.dwHighDateTime=0x1d625ad, nFileSizeHigh=0x0, nFileSizeLow=0x10fab)) returned 1 [0077.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\tzpJ-at.m4a" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\tzpj-at.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.706] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.706] GetFileType (hFile=0x19c) returned 0x1 [0077.706] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.706] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e470 | out: pbBuffer=0x10c6e470) returned 1 [0077.706] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e480 | out: pbBuffer=0x10c6e480) returned 1 [0077.706] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e78e01 | out: pbBuffer=0x10e78e01) returned 1 [0077.707] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e79001 | out: pbBuffer=0x10e79001) returned 1 [0077.707] ReadFile (in: hFile=0x19c, lpBuffer=0x10f9a000, nNumberOfBytesToRead=0x10fab, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10f9a000*, lpNumberOfBytesRead=0x10c89b8c*=0x10fab, lpOverlapped=0x0) returned 1 [0077.708] GetFileType (hFile=0x19c) returned 0x1 [0077.708] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.709] WriteFile (in: hFile=0x19c, lpBuffer=0x10fac000*, nNumberOfBytesToWrite=0x10fab, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10fac000*, lpNumberOfBytesWritten=0x10c89b8c*=0x10fab, lpOverlapped=0x10c89b90) returned 1 [0077.709] GetFileType (hFile=0x19c) returned 0x1 [0077.709] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10fab, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.709] GetFileType (hFile=0x19c) returned 0x1 [0077.709] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.709] WriteFile (in: hFile=0x19c, lpBuffer=0x10e78f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e78f00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.709] GetFileType (hFile=0x19c) returned 0x1 [0077.709] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10fab, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.709] GetFileType (hFile=0x19c) returned 0x1 [0077.709] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.709] WriteFile (in: hFile=0x19c, lpBuffer=0x10e79100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e79100*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.709] GetFileType (hFile=0x19c) returned 0x1 [0077.709] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10fab, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.709] GetFileType (hFile=0x19c) returned 0x1 [0077.709] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.709] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.710] GetFileType (hFile=0x19c) returned 0x1 [0077.710] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10fab, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.710] CloseHandle (hObject=0x19c) returned 1 [0077.710] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\tzpJ-at.m4a" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\tzpj-at.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\tzpJ-at.m4a.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\tzpj-at.m4a.trapget"), dwFlags=0x1) returned 1 [0077.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\umJb93xiZZjmp3yke5.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\umjb93xizzjmp3yke5.mp3"), fInfoLevelId=0x0, lpFileInformation=0x110c6508 | out: lpFileInformation=0x110c6508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a7e69c0, ftCreationTime.dwHighDateTime=0x1d6234f, ftLastAccessTime.dwLowDateTime=0xfe2358d0, ftLastAccessTime.dwHighDateTime=0x1d62aa8, ftLastWriteTime.dwLowDateTime=0xfe2358d0, ftLastWriteTime.dwHighDateTime=0x1d62aa8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8b)) returned 1 [0077.710] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\umJb93xiZZjmp3yke5.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\umjb93xizzjmp3yke5.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.710] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0077.710] GetFileType (hFile=0x19c) returned 0x1 [0077.710] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0077.710] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e560 | out: pbBuffer=0x10c6e560) returned 1 [0077.710] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e570 | out: pbBuffer=0x10c6e570) returned 1 [0077.710] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e79201 | out: pbBuffer=0x10e79201) returned 1 [0077.711] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e79401 | out: pbBuffer=0x10e79401) returned 1 [0077.711] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7a000, nNumberOfBytesToRead=0x16e8b, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10e7a000*, lpNumberOfBytesRead=0x10c89b8c*=0x16e8b, lpOverlapped=0x0) returned 1 [0077.713] GetFileType (hFile=0x19c) returned 0x1 [0077.713] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.713] WriteFile (in: hFile=0x19c, lpBuffer=0x10eda000*, nNumberOfBytesToWrite=0x16e8b, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10eda000*, lpNumberOfBytesWritten=0x10c89b8c*=0x16e8b, lpOverlapped=0x10c89b90) returned 1 [0077.713] GetFileType (hFile=0x19c) returned 0x1 [0077.713] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16e8b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.713] GetFileType (hFile=0x19c) returned 0x1 [0077.713] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.713] WriteFile (in: hFile=0x19c, lpBuffer=0x10e79300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e79300*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.713] GetFileType (hFile=0x19c) returned 0x1 [0077.713] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16e8b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.713] GetFileType (hFile=0x19c) returned 0x1 [0077.713] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.713] WriteFile (in: hFile=0x19c, lpBuffer=0x10e79500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e79500*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0077.714] GetFileType (hFile=0x19c) returned 0x1 [0077.714] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16e8b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.714] GetFileType (hFile=0x19c) returned 0x1 [0077.714] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.714] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0077.714] GetFileType (hFile=0x19c) returned 0x1 [0077.714] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16e8b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0077.714] CloseHandle (hObject=0x19c) returned 1 [0077.715] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\umJb93xiZZjmp3yke5.mp3" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\umjb93xizzjmp3yke5.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\bJOs9A4\\umJb93xiZZjmp3yke5.mp3.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\bjos9a4\\umjb93xizzjmp3yke5.mp3.trapget"), dwFlags=0x1) returned 1 [0077.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x110c6648 | out: lpFileInformation=0x110c6648*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0077.726] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\music\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.726] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.726] GetFileType (hFile=0x19c) returned 0x1 [0077.726] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.726] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e6b0 | out: pbBuffer=0x10c6e6b0) returned 1 [0077.726] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e6c0 | out: pbBuffer=0x10c6e6c0) returned 1 [0077.726] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e79701 | out: pbBuffer=0x10e79701) returned 1 [0077.726] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e79901 | out: pbBuffer=0x10e79901) returned 1 [0077.727] ReadFile (in: hFile=0x19c, lpBuffer=0x10c91000, nNumberOfBytesToRead=0x1f8, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10c91000*, lpNumberOfBytesRead=0x10c89bf0*=0x1f8, lpOverlapped=0x0) returned 1 [0077.727] GetFileType (hFile=0x19c) returned 0x1 [0077.727] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.727] WriteFile (in: hFile=0x19c, lpBuffer=0x10c91200*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c91200*, lpNumberOfBytesWritten=0x10c89bf0*=0x1f8, lpOverlapped=0x10c89bf4) returned 1 [0077.727] GetFileType (hFile=0x19c) returned 0x1 [0077.727] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.728] GetFileType (hFile=0x19c) returned 0x1 [0077.728] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.728] WriteFile (in: hFile=0x19c, lpBuffer=0x10e79800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e79800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.730] GetFileType (hFile=0x19c) returned 0x1 [0077.730] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.730] GetFileType (hFile=0x19c) returned 0x1 [0077.730] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.730] WriteFile (in: hFile=0x19c, lpBuffer=0x10e79a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e79a00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.730] GetFileType (hFile=0x19c) returned 0x1 [0077.730] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.730] GetFileType (hFile=0x19c) returned 0x1 [0077.730] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.730] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.730] GetFileType (hFile=0x19c) returned 0x1 [0077.730] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.730] CloseHandle (hObject=0x19c) returned 1 [0077.730] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\music\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0077.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\dxSoLia4uMRiYP.wav" (normalized: "c:\\users\\fd1hvy\\music\\dxsolia4umriyp.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c67d8 | out: lpFileInformation=0x110c67d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf762f8e0, ftCreationTime.dwHighDateTime=0x1d6321c, ftLastAccessTime.dwLowDateTime=0x3eaec500, ftLastAccessTime.dwHighDateTime=0x1d62618, ftLastWriteTime.dwLowDateTime=0x3eaec500, ftLastWriteTime.dwHighDateTime=0x1d62618, nFileSizeHigh=0x0, nFileSizeLow=0xd903)) returned 1 [0077.731] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\dxSoLia4uMRiYP.wav" (normalized: "c:\\users\\fd1hvy\\music\\dxsolia4umriyp.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.731] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.731] GetFileType (hFile=0x19c) returned 0x1 [0077.731] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.731] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e7a0 | out: pbBuffer=0x10c6e7a0) returned 1 [0077.731] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e7b0 | out: pbBuffer=0x10c6e7b0) returned 1 [0077.731] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e79b01 | out: pbBuffer=0x10e79b01) returned 1 [0077.732] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e79d01 | out: pbBuffer=0x10e79d01) returned 1 [0077.732] ReadFile (in: hFile=0x19c, lpBuffer=0x10fd8000, nNumberOfBytesToRead=0xd903, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fd8000*, lpNumberOfBytesRead=0x10c89bf0*=0xd903, lpOverlapped=0x0) returned 1 [0077.733] GetFileType (hFile=0x19c) returned 0x1 [0077.733] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.733] WriteFile (in: hFile=0x19c, lpBuffer=0x11092000*, nNumberOfBytesToWrite=0xd903, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x11092000*, lpNumberOfBytesWritten=0x10c89bf0*=0xd903, lpOverlapped=0x10c89bf4) returned 1 [0077.734] GetFileType (hFile=0x19c) returned 0x1 [0077.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd903, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.734] GetFileType (hFile=0x19c) returned 0x1 [0077.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.734] WriteFile (in: hFile=0x19c, lpBuffer=0x10e79c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e79c00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.734] GetFileType (hFile=0x19c) returned 0x1 [0077.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd903, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.734] GetFileType (hFile=0x19c) returned 0x1 [0077.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.734] WriteFile (in: hFile=0x19c, lpBuffer=0x10e79e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e79e00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.734] GetFileType (hFile=0x19c) returned 0x1 [0077.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd903, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.734] GetFileType (hFile=0x19c) returned 0x1 [0077.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.734] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.746] GetFileType (hFile=0x19c) returned 0x1 [0077.746] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd903, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.747] CloseHandle (hObject=0x19c) returned 1 [0077.747] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\dxSoLia4uMRiYP.wav" (normalized: "c:\\users\\fd1hvy\\music\\dxsolia4umriyp.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\dxSoLia4uMRiYP.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\dxsolia4umriyp.wav.trapget"), dwFlags=0x1) returned 1 [0077.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\hOgVzNltZ.wav" (normalized: "c:\\users\\fd1hvy\\music\\hogvznltz.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c6918 | out: lpFileInformation=0x110c6918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3046a180, ftCreationTime.dwHighDateTime=0x1d6258d, ftLastAccessTime.dwLowDateTime=0xd1803b0, ftLastAccessTime.dwHighDateTime=0x1d62ffc, ftLastWriteTime.dwLowDateTime=0xd1803b0, ftLastWriteTime.dwHighDateTime=0x1d62ffc, nFileSizeHigh=0x0, nFileSizeLow=0x111a8)) returned 1 [0077.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\hOgVzNltZ.wav" (normalized: "c:\\users\\fd1hvy\\music\\hogvznltz.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.748] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.748] GetFileType (hFile=0x19c) returned 0x1 [0077.748] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.748] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e890 | out: pbBuffer=0x10c6e890) returned 1 [0077.748] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e8a0 | out: pbBuffer=0x10c6e8a0) returned 1 [0077.748] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e79f01 | out: pbBuffer=0x10e79f01) returned 1 [0077.748] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e68101 | out: pbBuffer=0x10e68101) returned 1 [0077.748] ReadFile (in: hFile=0x19c, lpBuffer=0x10fe8000, nNumberOfBytesToRead=0x111a8, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fe8000*, lpNumberOfBytesRead=0x10c89bf0*=0x111a8, lpOverlapped=0x0) returned 1 [0077.750] GetFileType (hFile=0x19c) returned 0x1 [0077.750] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.750] WriteFile (in: hFile=0x19c, lpBuffer=0x10e34000*, nNumberOfBytesToWrite=0x111a8, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e34000*, lpNumberOfBytesWritten=0x10c89bf0*=0x111a8, lpOverlapped=0x10c89bf4) returned 1 [0077.750] GetFileType (hFile=0x19c) returned 0x1 [0077.750] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111a8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.750] GetFileType (hFile=0x19c) returned 0x1 [0077.750] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.750] WriteFile (in: hFile=0x19c, lpBuffer=0x10e68000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e68000*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.750] GetFileType (hFile=0x19c) returned 0x1 [0077.750] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111a8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.751] GetFileType (hFile=0x19c) returned 0x1 [0077.751] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.751] WriteFile (in: hFile=0x19c, lpBuffer=0x10e68200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e68200*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.751] GetFileType (hFile=0x19c) returned 0x1 [0077.751] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111a8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.751] GetFileType (hFile=0x19c) returned 0x1 [0077.751] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.751] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.751] GetFileType (hFile=0x19c) returned 0x1 [0077.751] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x111a8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.751] CloseHandle (hObject=0x19c) returned 1 [0077.751] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\hOgVzNltZ.wav" (normalized: "c:\\users\\fd1hvy\\music\\hogvznltz.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\hOgVzNltZ.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\hogvznltz.wav.trapget"), dwFlags=0x1) returned 1 [0077.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\l_D0.m4a" (normalized: "c:\\users\\fd1hvy\\music\\l_d0.m4a"), fInfoLevelId=0x0, lpFileInformation=0x110c6a58 | out: lpFileInformation=0x110c6a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0b68e0, ftCreationTime.dwHighDateTime=0x1d6323b, ftLastAccessTime.dwLowDateTime=0x69f03d60, ftLastAccessTime.dwHighDateTime=0x1d6274f, ftLastWriteTime.dwLowDateTime=0x69f03d60, ftLastWriteTime.dwHighDateTime=0x1d6274f, nFileSizeHigh=0x0, nFileSizeLow=0xa90a)) returned 1 [0077.752] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\l_D0.m4a" (normalized: "c:\\users\\fd1hvy\\music\\l_d0.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.752] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.752] GetFileType (hFile=0x19c) returned 0x1 [0077.752] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.752] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e980 | out: pbBuffer=0x10c6e980) returned 1 [0077.752] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e990 | out: pbBuffer=0x10c6e990) returned 1 [0077.752] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e68301 | out: pbBuffer=0x10e68301) returned 1 [0077.754] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e68501 | out: pbBuffer=0x10e68501) returned 1 [0077.756] ReadFile (in: hFile=0x19c, lpBuffer=0x10ef2000, nNumberOfBytesToRead=0xa90a, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10ef2000*, lpNumberOfBytesRead=0x10c89bf0*=0xa90a, lpOverlapped=0x0) returned 1 [0077.804] GetFileType (hFile=0x19c) returned 0x1 [0077.804] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.804] WriteFile (in: hFile=0x19c, lpBuffer=0x10e06000*, nNumberOfBytesToWrite=0xa90a, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e06000*, lpNumberOfBytesWritten=0x10c89bf0*=0xa90a, lpOverlapped=0x10c89bf4) returned 1 [0077.804] GetFileType (hFile=0x19c) returned 0x1 [0077.805] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa90a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.805] GetFileType (hFile=0x19c) returned 0x1 [0077.805] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.805] WriteFile (in: hFile=0x19c, lpBuffer=0x10e68400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e68400*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.805] GetFileType (hFile=0x19c) returned 0x1 [0077.805] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa90a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.805] GetFileType (hFile=0x19c) returned 0x1 [0077.805] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.805] WriteFile (in: hFile=0x19c, lpBuffer=0x10e68600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e68600*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.805] GetFileType (hFile=0x19c) returned 0x1 [0077.805] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa90a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.805] GetFileType (hFile=0x19c) returned 0x1 [0077.805] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.805] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.805] GetFileType (hFile=0x19c) returned 0x1 [0077.805] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa90a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.805] CloseHandle (hObject=0x19c) returned 1 [0077.806] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\l_D0.m4a" (normalized: "c:\\users\\fd1hvy\\music\\l_d0.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\l_D0.m4a.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\l_d0.m4a.trapget"), dwFlags=0x1) returned 1 [0077.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\nAth2NZC2.m4a" (normalized: "c:\\users\\fd1hvy\\music\\nath2nzc2.m4a"), fInfoLevelId=0x0, lpFileInformation=0x110c6b98 | out: lpFileInformation=0x110c6b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd72f7500, ftCreationTime.dwHighDateTime=0x1d62ba8, ftLastAccessTime.dwLowDateTime=0x14f8d1c0, ftLastAccessTime.dwHighDateTime=0x1d62a8b, ftLastWriteTime.dwLowDateTime=0x14f8d1c0, ftLastWriteTime.dwHighDateTime=0x1d62a8b, nFileSizeHigh=0x0, nFileSizeLow=0x3757)) returned 1 [0077.806] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\nAth2NZC2.m4a" (normalized: "c:\\users\\fd1hvy\\music\\nath2nzc2.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.807] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.807] GetFileType (hFile=0x19c) returned 0x1 [0077.807] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.807] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea60 | out: pbBuffer=0x10c6ea60) returned 1 [0077.807] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea70 | out: pbBuffer=0x10c6ea70) returned 1 [0077.807] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e68701 | out: pbBuffer=0x10e68701) returned 1 [0077.807] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e68901 | out: pbBuffer=0x10e68901) returned 1 [0077.808] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x3757, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89bf0*=0x3757, lpOverlapped=0x0) returned 1 [0077.809] GetFileType (hFile=0x19c) returned 0x1 [0077.809] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.809] WriteFile (in: hFile=0x19c, lpBuffer=0x110af800*, nNumberOfBytesToWrite=0x3757, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110af800*, lpNumberOfBytesWritten=0x10c89bf0*=0x3757, lpOverlapped=0x10c89bf4) returned 1 [0077.809] GetFileType (hFile=0x19c) returned 0x1 [0077.809] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3757, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.809] GetFileType (hFile=0x19c) returned 0x1 [0077.809] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.809] WriteFile (in: hFile=0x19c, lpBuffer=0x10e68800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e68800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.809] GetFileType (hFile=0x19c) returned 0x1 [0077.809] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3757, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.809] GetFileType (hFile=0x19c) returned 0x1 [0077.809] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.809] WriteFile (in: hFile=0x19c, lpBuffer=0x10e68a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e68a00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.810] GetFileType (hFile=0x19c) returned 0x1 [0077.810] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3757, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.810] GetFileType (hFile=0x19c) returned 0x1 [0077.810] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.810] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.810] GetFileType (hFile=0x19c) returned 0x1 [0077.810] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3757, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.810] CloseHandle (hObject=0x19c) returned 1 [0077.810] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\nAth2NZC2.m4a" (normalized: "c:\\users\\fd1hvy\\music\\nath2nzc2.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\nAth2NZC2.m4a.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\nath2nzc2.m4a.trapget"), dwFlags=0x1) returned 1 [0077.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\qkwHgzN615uKDy_42z9.wav" (normalized: "c:\\users\\fd1hvy\\music\\qkwhgzn615ukdy_42z9.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c6cd8 | out: lpFileInformation=0x110c6cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9e6610, ftCreationTime.dwHighDateTime=0x1d62779, ftLastAccessTime.dwLowDateTime=0xbf2f7380, ftLastAccessTime.dwHighDateTime=0x1d63060, ftLastWriteTime.dwLowDateTime=0xbf2f7380, ftLastWriteTime.dwHighDateTime=0x1d63060, nFileSizeHigh=0x0, nFileSizeLow=0x13fe4)) returned 1 [0077.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\qkwHgzN615uKDy_42z9.wav" (normalized: "c:\\users\\fd1hvy\\music\\qkwhgzn615ukdy_42z9.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.811] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.811] GetFileType (hFile=0x19c) returned 0x1 [0077.811] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.811] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ebe0 | out: pbBuffer=0x10c6ebe0) returned 1 [0077.811] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ebf0 | out: pbBuffer=0x10c6ebf0) returned 1 [0077.811] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e68b01 | out: pbBuffer=0x10e68b01) returned 1 [0077.812] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e68d01 | out: pbBuffer=0x10e68d01) returned 1 [0077.812] ReadFile (in: hFile=0x19c, lpBuffer=0x10fbe000, nNumberOfBytesToRead=0x13fe4, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fbe000*, lpNumberOfBytesRead=0x10c89bf0*=0x13fe4, lpOverlapped=0x0) returned 1 [0077.814] GetFileType (hFile=0x19c) returned 0x1 [0077.814] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.814] WriteFile (in: hFile=0x19c, lpBuffer=0x10dde000*, nNumberOfBytesToWrite=0x13fe4, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10dde000*, lpNumberOfBytesWritten=0x10c89bf0*=0x13fe4, lpOverlapped=0x10c89bf4) returned 1 [0077.815] GetFileType (hFile=0x19c) returned 0x1 [0077.815] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13fe4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.815] GetFileType (hFile=0x19c) returned 0x1 [0077.815] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.815] WriteFile (in: hFile=0x19c, lpBuffer=0x10e68c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e68c00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.815] GetFileType (hFile=0x19c) returned 0x1 [0077.815] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13fe4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.815] GetFileType (hFile=0x19c) returned 0x1 [0077.815] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.815] WriteFile (in: hFile=0x19c, lpBuffer=0x10e68e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e68e00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.816] GetFileType (hFile=0x19c) returned 0x1 [0077.816] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13fe4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.816] GetFileType (hFile=0x19c) returned 0x1 [0077.816] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.816] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.816] GetFileType (hFile=0x19c) returned 0x1 [0077.816] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13fe4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.816] CloseHandle (hObject=0x19c) returned 1 [0077.816] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\qkwHgzN615uKDy_42z9.wav" (normalized: "c:\\users\\fd1hvy\\music\\qkwhgzn615ukdy_42z9.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\qkwHgzN615uKDy_42z9.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\qkwhgzn615ukdy_42z9.wav.trapget"), dwFlags=0x1) returned 1 [0077.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\ytxA2ow-9b3Q1cJ3Ji42.wav" (normalized: "c:\\users\\fd1hvy\\music\\ytxa2ow-9b3q1cj3ji42.wav"), fInfoLevelId=0x0, lpFileInformation=0x110c6e18 | out: lpFileInformation=0x110c6e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fac2450, ftCreationTime.dwHighDateTime=0x1d632ae, ftLastAccessTime.dwLowDateTime=0xc7257eb0, ftLastAccessTime.dwHighDateTime=0x1d62546, ftLastWriteTime.dwLowDateTime=0xc7257eb0, ftLastWriteTime.dwHighDateTime=0x1d62546, nFileSizeHigh=0x0, nFileSizeLow=0x4c3d)) returned 1 [0077.817] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\ytxA2ow-9b3Q1cJ3Ji42.wav" (normalized: "c:\\users\\fd1hvy\\music\\ytxa2ow-9b3q1cj3ji42.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0077.817] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0077.817] GetFileType (hFile=0x19c) returned 0x1 [0077.817] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0077.817] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ecd0 | out: pbBuffer=0x10c6ecd0) returned 1 [0077.817] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ece0 | out: pbBuffer=0x10c6ece0) returned 1 [0077.817] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e68f01 | out: pbBuffer=0x10e68f01) returned 1 [0077.817] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e69101 | out: pbBuffer=0x10e69101) returned 1 [0077.818] ReadFile (in: hFile=0x19c, lpBuffer=0x10df2000, nNumberOfBytesToRead=0x4c3d, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10df2000*, lpNumberOfBytesRead=0x10c89bf0*=0x4c3d, lpOverlapped=0x0) returned 1 [0077.818] GetFileType (hFile=0x19c) returned 0x1 [0077.818] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.818] WriteFile (in: hFile=0x19c, lpBuffer=0x10df7000*, nNumberOfBytesToWrite=0x4c3d, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10df7000*, lpNumberOfBytesWritten=0x10c89bf0*=0x4c3d, lpOverlapped=0x10c89bf4) returned 1 [0077.819] GetFileType (hFile=0x19c) returned 0x1 [0077.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4c3d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.819] GetFileType (hFile=0x19c) returned 0x1 [0077.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.819] WriteFile (in: hFile=0x19c, lpBuffer=0x10e69000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e69000*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.819] GetFileType (hFile=0x19c) returned 0x1 [0077.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4c3d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.819] GetFileType (hFile=0x19c) returned 0x1 [0077.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.819] WriteFile (in: hFile=0x19c, lpBuffer=0x10e69200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e69200*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0077.819] GetFileType (hFile=0x19c) returned 0x1 [0077.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4c3d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.819] GetFileType (hFile=0x19c) returned 0x1 [0077.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.819] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0077.819] GetFileType (hFile=0x19c) returned 0x1 [0077.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4c3d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0077.819] CloseHandle (hObject=0x19c) returned 1 [0077.819] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\ytxA2ow-9b3Q1cJ3Ji42.wav" (normalized: "c:\\users\\fd1hvy\\music\\ytxa2ow-9b3q1cj3ji42.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\ytxA2ow-9b3Q1cJ3Ji42.wav.TRAPGET" (normalized: "c:\\users\\fd1hvy\\music\\ytxa2ow-9b3q1cj3ji42.wav.trapget"), dwFlags=0x1) returned 1 [0077.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\My Documents" (normalized: "c:\\users\\fd1hvy\\my documents"), fInfoLevelId=0x0, lpFileInformation=0x110c6f58 | out: lpFileInformation=0x110c6f58*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.820] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\My Documents" (normalized: "c:\\users\\fd1hvy\\my documents"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.820] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\My Documents\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0077.820] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c927e0*, nNumberOfCharsToWrite=0x2c, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c927e0*, lpNumberOfCharsWritten=0x10c897b8*=0x2c) returned 1 [0077.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT" (normalized: "c:\\users\\fd1hvy\\ntuser.dat"), fInfoLevelId=0x0, lpFileInformation=0x110c6fa8 | out: lpFileInformation=0x110c6fa8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x6c4d382c, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6c4d382c, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0077.832] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT" (normalized: "c:\\users\\fd1hvy\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.832] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0077.832] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92840*, nNumberOfCharsToWrite=0x2a, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92840*, lpNumberOfCharsWritten=0x10c897b8*=0x2a) returned 1 [0077.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\fd1hvy\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x110c6ff8 | out: lpFileInformation=0x110c6ff8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0077.929] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\fd1hvy\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.929] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0077.929] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10e1d810*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10e1d810*, lpNumberOfCharsWritten=0x10c897b8*=0x57) returned 1 [0077.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\fd1hvy\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x110c7048 | out: lpFileInformation=0x110c7048*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0077.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\fd1hvy\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.975] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0077.975] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10e69300*, nNumberOfCharsToWrite=0x7c, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10e69300*, lpNumberOfCharsWritten=0x10c897b8*=0x7c) returned 1 [0078.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\fd1hvy\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x110c7098 | out: lpFileInformation=0x110c7098*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0078.030] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\fd1hvy\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.030] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0078.030] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10e69400*, nNumberOfCharsToWrite=0x7c, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10e69400*, lpNumberOfCharsWritten=0x10c897b8*=0x7c) returned 1 [0078.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\NetHood" (normalized: "c:\\users\\fd1hvy\\nethood"), fInfoLevelId=0x0, lpFileInformation=0x110c70e8 | out: lpFileInformation=0x110c70e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\NetHood" (normalized: "c:\\users\\fd1hvy\\nethood"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.056] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\NetHood\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0078.057] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c72550*, nNumberOfCharsToWrite=0x27, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c72550*, lpNumberOfCharsWritten=0x10c897b8*=0x27) returned 1 [0078.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive" (normalized: "c:\\users\\fd1hvy\\onedrive"), fInfoLevelId=0x0, lpFileInformation=0x110c7138 | out: lpFileInformation=0x110c7138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.072] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\OneDrive" (normalized: "c:\\users\\fd1hvy\\onedrive"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.072] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0078.075] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.075] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0078.075] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.075] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0078.075] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\OneDrive\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\onedrive\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.436] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0078.436] GetFileType (hFile=0x19c) returned 0x1 [0078.436] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0078.437] WriteFile (in: hFile=0x19c, lpBuffer=0x110bc480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x110bc480*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0078.437] GetFileType (hFile=0x19c) returned 0x1 [0078.437] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0078.437] CloseHandle (hObject=0x19c) returned 1 [0078.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\onedrive\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x110c71d8 | out: lpFileInformation=0x110c71d8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61)) returned 1 [0078.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\OneDrive\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\onedrive\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.442] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0078.442] GetFileType (hFile=0x19c) returned 0x1 [0078.442] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0078.442] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee40 | out: pbBuffer=0x10c6ee40) returned 1 [0078.442] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee50 | out: pbBuffer=0x10c6ee50) returned 1 [0078.442] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e69501 | out: pbBuffer=0x10e69501) returned 1 [0078.443] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e69701 | out: pbBuffer=0x10e69701) returned 1 [0078.443] ReadFile (in: hFile=0x19c, lpBuffer=0x10cc4bd0, nNumberOfBytesToRead=0x61, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10cc4bd0*, lpNumberOfBytesRead=0x10c89bf0*=0x61, lpOverlapped=0x0) returned 1 [0078.444] GetFileType (hFile=0x19c) returned 0x1 [0078.444] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.444] WriteFile (in: hFile=0x19c, lpBuffer=0x10cc4c40*, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10cc4c40*, lpNumberOfBytesWritten=0x10c89bf0*=0x61, lpOverlapped=0x10c89bf4) returned 1 [0078.444] GetFileType (hFile=0x19c) returned 0x1 [0078.444] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x61, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.444] GetFileType (hFile=0x19c) returned 0x1 [0078.444] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.444] WriteFile (in: hFile=0x19c, lpBuffer=0x10e69600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e69600*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0078.444] GetFileType (hFile=0x19c) returned 0x1 [0078.444] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x61, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.444] GetFileType (hFile=0x19c) returned 0x1 [0078.444] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.444] WriteFile (in: hFile=0x19c, lpBuffer=0x10e69800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e69800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0078.444] GetFileType (hFile=0x19c) returned 0x1 [0078.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x61, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.445] GetFileType (hFile=0x19c) returned 0x1 [0078.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.445] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0078.445] GetFileType (hFile=0x19c) returned 0x1 [0078.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x61, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.445] CloseHandle (hObject=0x19c) returned 1 [0078.459] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\OneDrive\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\onedrive\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\OneDrive\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\onedrive\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0078.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures" (normalized: "c:\\users\\fd1hvy\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x110c7368 | out: lpFileInformation=0x110c7368*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf8c45da, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf8c45da, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0078.476] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures" (normalized: "c:\\users\\fd1hvy\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.477] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf8c45da, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf8c45da, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efef8 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf8c45da, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf8c45da, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x901fd050, ftCreationTime.dwHighDateTime=0x1d62d61, ftLastAccessTime.dwLowDateTime=0x70c77da0, ftLastAccessTime.dwHighDateTime=0x1d625a2, ftLastWriteTime.dwLowDateTime=0x70c77da0, ftLastWriteTime.dwHighDateTime=0x1d625a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-vR8oRC26r7T1z", cAlternateFileName="-VR8OR~1")) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5007ca0, ftCreationTime.dwHighDateTime=0x1d627d5, ftLastAccessTime.dwLowDateTime=0xc7b0b250, ftLastAccessTime.dwHighDateTime=0x1d630b8, ftLastWriteTime.dwLowDateTime=0xc7b0b250, ftLastWriteTime.dwHighDateTime=0x1d630b8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-X99kpPqLOt-d0", cAlternateFileName="-X99KP~1")) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e936f60, ftCreationTime.dwHighDateTime=0x1d63129, ftLastAccessTime.dwLowDateTime=0x84972ba0, ftLastAccessTime.dwHighDateTime=0x1d62f7f, ftLastWriteTime.dwLowDateTime=0x84972ba0, ftLastWriteTime.dwHighDateTime=0x1d62f7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="79fS2LqKdTo", cAlternateFileName="79FS2L~1")) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56aff9a0, ftCreationTime.dwHighDateTime=0x1d62b11, ftLastAccessTime.dwLowDateTime=0xfb64f670, ftLastAccessTime.dwHighDateTime=0x1d62716, ftLastWriteTime.dwLowDateTime=0xfb64f670, ftLastWriteTime.dwHighDateTime=0x1d62716, nFileSizeHigh=0x0, nFileSizeLow=0x9499, dwReserved0=0x0, dwReserved1=0x0, cFileName="eUZvnV8pxop_afrjmM.png", cAlternateFileName="EUZVNV~1.PNG")) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d2e40, ftCreationTime.dwHighDateTime=0x1d62e0a, ftLastAccessTime.dwLowDateTime=0xc4454af0, ftLastAccessTime.dwHighDateTime=0x1d62e82, ftLastWriteTime.dwLowDateTime=0xc4454af0, ftLastWriteTime.dwHighDateTime=0x1d62e82, nFileSizeHigh=0x0, nFileSizeLow=0x114a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EwscMVRyCxlb.bmp", cAlternateFileName="EWSCMV~1.BMP")) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x860e6210, ftCreationTime.dwHighDateTime=0x1d62dad, ftLastAccessTime.dwLowDateTime=0x179bcf80, ftLastAccessTime.dwHighDateTime=0x1d62a91, ftLastWriteTime.dwLowDateTime=0x179bcf80, ftLastWriteTime.dwHighDateTime=0x1d62a91, nFileSizeHigh=0x0, nFileSizeLow=0x2ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nh-2wAT U.gif", cAlternateFileName="NH-2WA~1.GIF")) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3b599c50, ftCreationTime.dwHighDateTime=0x1d62e78, ftLastAccessTime.dwLowDateTime=0x2a9ac5a0, ftLastAccessTime.dwHighDateTime=0x1d62f00, ftLastWriteTime.dwLowDateTime=0x2a9ac5a0, ftLastWriteTime.dwHighDateTime=0x1d62f00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tQasCYSa_MpUoy5", cAlternateFileName="TQASCY~1")) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f160e40, ftCreationTime.dwHighDateTime=0x1d62b9c, ftLastAccessTime.dwLowDateTime=0x695b14e0, ftLastAccessTime.dwHighDateTime=0x1d62634, ftLastWriteTime.dwLowDateTime=0x695b14e0, ftLastWriteTime.dwHighDateTime=0x1d62634, nFileSizeHigh=0x0, nFileSizeLow=0x5390, dwReserved0=0x0, dwReserved1=0x0, cFileName="uN2IjxKDsl34uKOyg.gif", cAlternateFileName="UN2IJX~1.GIF")) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d940de0, ftCreationTime.dwHighDateTime=0x1d62723, ftLastAccessTime.dwLowDateTime=0x4e02e250, ftLastAccessTime.dwHighDateTime=0x1d62386, ftLastWriteTime.dwLowDateTime=0x4e02e250, ftLastWriteTime.dwHighDateTime=0x1d62386, nFileSizeHigh=0x0, nFileSizeLow=0x826a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WfLuB.gif", cAlternateFileName="")) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.477] FindClose (in: hFindFile=0x7efef8 | out: hFindFile=0x7efef8) returned 1 [0078.477] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.488] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0078.488] GetFileType (hFile=0x19c) returned 0x1 [0078.488] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0078.488] WriteFile (in: hFile=0x19c, lpBuffer=0x110bcd80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x110bcd80*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0078.489] GetFileType (hFile=0x19c) returned 0x1 [0078.489] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0078.489] CloseHandle (hObject=0x19c) returned 1 [0078.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-X99kpPqLOt-d0" (normalized: "c:\\users\\fd1hvy\\pictures\\-x99kppqlot-d0"), fInfoLevelId=0x0, lpFileInformation=0x110c7778 | out: lpFileInformation=0x110c7778*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5007ca0, ftCreationTime.dwHighDateTime=0x1d627d5, ftLastAccessTime.dwLowDateTime=0xc7b0b250, ftLastAccessTime.dwHighDateTime=0x1d630b8, ftLastWriteTime.dwLowDateTime=0xc7b0b250, ftLastWriteTime.dwHighDateTime=0x1d630b8, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.489] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-X99kpPqLOt-d0" (normalized: "c:\\users\\fd1hvy\\pictures\\-x99kppqlot-d0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.489] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-X99kpPqLOt-d0\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5007ca0, ftCreationTime.dwHighDateTime=0x1d627d5, ftLastAccessTime.dwLowDateTime=0xc7b0b250, ftLastAccessTime.dwHighDateTime=0x1d630b8, ftLastWriteTime.dwLowDateTime=0xc7b0b250, ftLastWriteTime.dwHighDateTime=0x1d630b8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0078 [0078.489] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5007ca0, ftCreationTime.dwHighDateTime=0x1d627d5, ftLastAccessTime.dwLowDateTime=0xc7b0b250, ftLastAccessTime.dwHighDateTime=0x1d630b8, ftLastWriteTime.dwLowDateTime=0xc7b0b250, ftLastWriteTime.dwHighDateTime=0x1d630b8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.489] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69ab4640, ftCreationTime.dwHighDateTime=0x1d62d0f, ftLastAccessTime.dwLowDateTime=0xd99ba050, ftLastAccessTime.dwHighDateTime=0x1d62c27, ftLastWriteTime.dwLowDateTime=0xd99ba050, ftLastWriteTime.dwHighDateTime=0x1d62c27, nFileSizeHigh=0x0, nFileSizeLow=0x1d8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="4dt8vwA95lfaJ.jpg", cAlternateFileName="4DT8VW~1.JPG")) returned 1 [0078.489] FindNextFileW (in: hFindFile=0x7f0078, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.489] FindClose (in: hFindFile=0x7f0078 | out: hFindFile=0x7f0078) returned 1 [0078.489] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-X99kpPqLOt-d0\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\-x99kppqlot-d0\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.490] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0078.490] GetFileType (hFile=0x19c) returned 0x1 [0078.490] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0078.490] WriteFile (in: hFile=0x19c, lpBuffer=0x110bd680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x110bd680*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0078.491] GetFileType (hFile=0x19c) returned 0x1 [0078.491] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0078.491] CloseHandle (hObject=0x19c) returned 1 [0078.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-X99kpPqLOt-d0\\4dt8vwA95lfaJ.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\-x99kppqlot-d0\\4dt8vwa95lfaj.jpg"), fInfoLevelId=0x0, lpFileInformation=0x110c7818 | out: lpFileInformation=0x110c7818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69ab4640, ftCreationTime.dwHighDateTime=0x1d62d0f, ftLastAccessTime.dwLowDateTime=0xd99ba050, ftLastAccessTime.dwHighDateTime=0x1d62c27, ftLastWriteTime.dwLowDateTime=0xd99ba050, ftLastWriteTime.dwHighDateTime=0x1d62c27, nFileSizeHigh=0x0, nFileSizeLow=0x1d8d)) returned 1 [0078.491] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-X99kpPqLOt-d0\\4dt8vwA95lfaJ.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\-x99kppqlot-d0\\4dt8vwa95lfaj.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.491] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0078.491] GetFileType (hFile=0x19c) returned 0x1 [0078.491] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0078.491] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f000 | out: pbBuffer=0x10c6f000) returned 1 [0078.491] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f010 | out: pbBuffer=0x10c6f010) returned 1 [0078.491] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e69a01 | out: pbBuffer=0x10e69a01) returned 1 [0078.492] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e69c01 | out: pbBuffer=0x10e69c01) returned 1 [0078.492] ReadFile (in: hFile=0x19c, lpBuffer=0x10e92000, nNumberOfBytesToRead=0x1d8d, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10e92000*, lpNumberOfBytesRead=0x10c89b8c*=0x1d8d, lpOverlapped=0x0) returned 1 [0078.493] GetFileType (hFile=0x19c) returned 0x1 [0078.493] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.493] WriteFile (in: hFile=0x19c, lpBuffer=0x10e96000*, nNumberOfBytesToWrite=0x1d8d, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e96000*, lpNumberOfBytesWritten=0x10c89b8c*=0x1d8d, lpOverlapped=0x10c89b90) returned 1 [0078.493] GetFileType (hFile=0x19c) returned 0x1 [0078.493] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1d8d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.493] GetFileType (hFile=0x19c) returned 0x1 [0078.493] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.493] WriteFile (in: hFile=0x19c, lpBuffer=0x10e69b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e69b00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.493] GetFileType (hFile=0x19c) returned 0x1 [0078.493] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1d8d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.493] GetFileType (hFile=0x19c) returned 0x1 [0078.493] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.493] WriteFile (in: hFile=0x19c, lpBuffer=0x10e69d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e69d00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.498] GetFileType (hFile=0x19c) returned 0x1 [0078.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1d8d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.498] GetFileType (hFile=0x19c) returned 0x1 [0078.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.498] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0078.498] GetFileType (hFile=0x19c) returned 0x1 [0078.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1d8d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.498] CloseHandle (hObject=0x19c) returned 1 [0078.498] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\-X99kpPqLOt-d0\\4dt8vwA95lfaJ.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\-x99kppqlot-d0\\4dt8vwa95lfaj.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\-X99kpPqLOt-d0\\4dt8vwA95lfaJ.jpg.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\-x99kppqlot-d0\\4dt8vwa95lfaj.jpg.trapget"), dwFlags=0x1) returned 1 [0078.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z"), fInfoLevelId=0x0, lpFileInformation=0x110c79a8 | out: lpFileInformation=0x110c79a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x901fd050, ftCreationTime.dwHighDateTime=0x1d62d61, ftLastAccessTime.dwLowDateTime=0x70c77da0, ftLastAccessTime.dwHighDateTime=0x1d625a2, ftLastWriteTime.dwLowDateTime=0x70c77da0, ftLastWriteTime.dwHighDateTime=0x1d625a2, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0078.499] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.499] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x901fd050, ftCreationTime.dwHighDateTime=0x1d62d61, ftLastAccessTime.dwLowDateTime=0x70c77da0, ftLastAccessTime.dwHighDateTime=0x1d625a2, ftLastWriteTime.dwLowDateTime=0x70c77da0, ftLastWriteTime.dwHighDateTime=0x1d625a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efeb8 [0078.499] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x901fd050, ftCreationTime.dwHighDateTime=0x1d62d61, ftLastAccessTime.dwLowDateTime=0x70c77da0, ftLastAccessTime.dwHighDateTime=0x1d625a2, ftLastWriteTime.dwLowDateTime=0x70c77da0, ftLastWriteTime.dwHighDateTime=0x1d625a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.499] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ca90110, ftCreationTime.dwHighDateTime=0x1d63101, ftLastAccessTime.dwLowDateTime=0x5472c350, ftLastAccessTime.dwHighDateTime=0x1d6292e, ftLastWriteTime.dwLowDateTime=0x5472c350, ftLastWriteTime.dwHighDateTime=0x1d6292e, nFileSizeHigh=0x0, nFileSizeLow=0x12724, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Z5V8CNEd.png", cAlternateFileName="1Z5V8C~1.PNG")) returned 1 [0078.499] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa65c0820, ftCreationTime.dwHighDateTime=0x1d62d93, ftLastAccessTime.dwLowDateTime=0x31871ef0, ftLastAccessTime.dwHighDateTime=0x1d62edc, ftLastWriteTime.dwLowDateTime=0x31871ef0, ftLastWriteTime.dwHighDateTime=0x1d62edc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AY1dtfrzF8l2", cAlternateFileName="AY1DTF~1")) returned 1 [0078.499] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6318770, ftCreationTime.dwHighDateTime=0x1d62dba, ftLastAccessTime.dwLowDateTime=0x1693d360, ftLastAccessTime.dwHighDateTime=0x1d62f89, ftLastWriteTime.dwLowDateTime=0x1693d360, ftLastWriteTime.dwHighDateTime=0x1d62f89, nFileSizeHigh=0x0, nFileSizeLow=0x6bc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ikJ3p 1nUVcl6LOqw.bmp", cAlternateFileName="IKJ3P1~1.BMP")) returned 1 [0078.499] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff76a1f0, ftCreationTime.dwHighDateTime=0x1d629e6, ftLastAccessTime.dwLowDateTime=0x66ec5df0, ftLastAccessTime.dwHighDateTime=0x1d62999, ftLastWriteTime.dwLowDateTime=0x66ec5df0, ftLastWriteTime.dwHighDateTime=0x1d62999, nFileSizeHigh=0x0, nFileSizeLow=0xe035, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jbshf.gif", cAlternateFileName="")) returned 1 [0078.499] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8c00c30, ftCreationTime.dwHighDateTime=0x1d62975, ftLastAccessTime.dwLowDateTime=0x85e8b4a0, ftLastAccessTime.dwHighDateTime=0x1d62b1b, ftLastWriteTime.dwLowDateTime=0x85e8b4a0, ftLastWriteTime.dwHighDateTime=0x1d62b1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rIginbc7", cAlternateFileName="")) returned 1 [0078.499] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x823e21b0, ftCreationTime.dwHighDateTime=0x1d63146, ftLastAccessTime.dwLowDateTime=0x852f4c70, ftLastAccessTime.dwHighDateTime=0x1d62488, ftLastWriteTime.dwLowDateTime=0x852f4c70, ftLastWriteTime.dwHighDateTime=0x1d62488, nFileSizeHigh=0x0, nFileSizeLow=0xb168, dwReserved0=0x0, dwReserved1=0x0, cFileName="thAb375jxBKIPbYUDM.gif", cAlternateFileName="THAB37~1.GIF")) returned 1 [0078.499] FindNextFileW (in: hFindFile=0x7efeb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.500] FindClose (in: hFindFile=0x7efeb8 | out: hFindFile=0x7efeb8) returned 1 [0078.500] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.500] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0078.500] GetFileType (hFile=0x19c) returned 0x1 [0078.500] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0078.500] WriteFile (in: hFile=0x19c, lpBuffer=0x10e98000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10e98000*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0078.501] GetFileType (hFile=0x19c) returned 0x1 [0078.501] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0078.501] CloseHandle (hObject=0x19c) returned 1 [0078.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\1Z5V8CNEd.png" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\1z5v8cned.png"), fInfoLevelId=0x0, lpFileInformation=0x110c7bd8 | out: lpFileInformation=0x110c7bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ca90110, ftCreationTime.dwHighDateTime=0x1d63101, ftLastAccessTime.dwLowDateTime=0x5472c350, ftLastAccessTime.dwHighDateTime=0x1d6292e, ftLastWriteTime.dwLowDateTime=0x5472c350, ftLastWriteTime.dwHighDateTime=0x1d6292e, nFileSizeHigh=0x0, nFileSizeLow=0x12724)) returned 1 [0078.501] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\1Z5V8CNEd.png" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\1z5v8cned.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.501] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0078.501] GetFileType (hFile=0x19c) returned 0x1 [0078.501] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0078.501] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f170 | out: pbBuffer=0x10c6f170) returned 1 [0078.501] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f1c0 | out: pbBuffer=0x10c6f1c0) returned 1 [0078.501] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e69f01 | out: pbBuffer=0x10e69f01) returned 1 [0078.502] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f00101 | out: pbBuffer=0x10f00101) returned 1 [0078.502] ReadFile (in: hFile=0x19c, lpBuffer=0x10f04000, nNumberOfBytesToRead=0x12724, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10f04000*, lpNumberOfBytesRead=0x10c89b8c*=0x12724, lpOverlapped=0x0) returned 1 [0078.503] GetFileType (hFile=0x19c) returned 0x1 [0078.503] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.504] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfa000*, nNumberOfBytesToWrite=0x12724, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10cfa000*, lpNumberOfBytesWritten=0x10c89b8c*=0x12724, lpOverlapped=0x10c89b90) returned 1 [0078.504] GetFileType (hFile=0x19c) returned 0x1 [0078.504] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12724, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.504] GetFileType (hFile=0x19c) returned 0x1 [0078.504] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.504] WriteFile (in: hFile=0x19c, lpBuffer=0x10f00000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f00000*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.504] GetFileType (hFile=0x19c) returned 0x1 [0078.504] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12724, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.504] GetFileType (hFile=0x19c) returned 0x1 [0078.504] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.504] WriteFile (in: hFile=0x19c, lpBuffer=0x10f00200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f00200*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.504] GetFileType (hFile=0x19c) returned 0x1 [0078.504] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12724, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.504] GetFileType (hFile=0x19c) returned 0x1 [0078.504] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.504] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0078.504] GetFileType (hFile=0x19c) returned 0x1 [0078.504] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12724, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.505] CloseHandle (hObject=0x19c) returned 1 [0078.505] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\1Z5V8CNEd.png" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\1z5v8cned.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\1Z5V8CNEd.png.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\1z5v8cned.png.trapget"), dwFlags=0x1) returned 1 [0078.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2"), fInfoLevelId=0x0, lpFileInformation=0x110c7d18 | out: lpFileInformation=0x110c7d18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa65c0820, ftCreationTime.dwHighDateTime=0x1d62d93, ftLastAccessTime.dwLowDateTime=0x31871ef0, ftLastAccessTime.dwHighDateTime=0x1d62edc, ftLastWriteTime.dwLowDateTime=0x31871ef0, ftLastWriteTime.dwHighDateTime=0x1d62edc, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0078.505] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.505] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\*", lpFindFileData=0x10c899a0 | out: lpFindFileData=0x10c899a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa65c0820, ftCreationTime.dwHighDateTime=0x1d62d93, ftLastAccessTime.dwLowDateTime=0x31871ef0, ftLastAccessTime.dwHighDateTime=0x1d62edc, ftLastWriteTime.dwLowDateTime=0x31871ef0, ftLastWriteTime.dwHighDateTime=0x1d62edc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0378 [0078.505] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa65c0820, ftCreationTime.dwHighDateTime=0x1d62d93, ftLastAccessTime.dwLowDateTime=0x31871ef0, ftLastAccessTime.dwHighDateTime=0x1d62edc, ftLastWriteTime.dwLowDateTime=0x31871ef0, ftLastWriteTime.dwHighDateTime=0x1d62edc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.505] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x153cb640, ftCreationTime.dwHighDateTime=0x1d624b1, ftLastAccessTime.dwLowDateTime=0xa2b9a240, ftLastAccessTime.dwHighDateTime=0x1d624ba, ftLastWriteTime.dwLowDateTime=0xa2b9a240, ftLastWriteTime.dwHighDateTime=0x1d624ba, nFileSizeHigh=0x0, nFileSizeLow=0x637c, dwReserved0=0x0, dwReserved1=0x0, cFileName="3OE4MZ.gif", cAlternateFileName="")) returned 1 [0078.505] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x476bf10, ftCreationTime.dwHighDateTime=0x1d6307b, ftLastAccessTime.dwLowDateTime=0x923537b0, ftLastAccessTime.dwHighDateTime=0x1d631d3, ftLastWriteTime.dwLowDateTime=0x923537b0, ftLastWriteTime.dwHighDateTime=0x1d631d3, nFileSizeHigh=0x0, nFileSizeLow=0x921b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jYAKDWZOA.png", cAlternateFileName="JYAKDW~1.PNG")) returned 1 [0078.505] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9e8f0, ftCreationTime.dwHighDateTime=0x1d62a27, ftLastAccessTime.dwLowDateTime=0xc8961070, ftLastAccessTime.dwHighDateTime=0x1d62e1f, ftLastWriteTime.dwLowDateTime=0xc8961070, ftLastWriteTime.dwHighDateTime=0x1d62e1f, nFileSizeHigh=0x0, nFileSizeLow=0x1d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="L5nlJ-C0.png", cAlternateFileName="")) returned 1 [0078.505] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf83c27e0, ftCreationTime.dwHighDateTime=0x1d62be7, ftLastAccessTime.dwLowDateTime=0x2f50c4e0, ftLastAccessTime.dwHighDateTime=0x1d627b3, ftLastWriteTime.dwLowDateTime=0x2f50c4e0, ftLastWriteTime.dwHighDateTime=0x1d627b3, nFileSizeHigh=0x0, nFileSizeLow=0xe0c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFX DP.gif", cAlternateFileName="QFXDP~1.GIF")) returned 1 [0078.506] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.506] FindClose (in: hFindFile=0x7f0378 | out: hFindFile=0x7f0378) returned 1 [0078.506] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.540] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c04 | out: lpMode=0x10c89c04) returned 0 [0078.540] GetFileType (hFile=0x19c) returned 0x1 [0078.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0078.540] WriteFile (in: hFile=0x19c, lpBuffer=0x10e98900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89bf4, lpOverlapped=0x10c89bf8 | out: lpBuffer=0x10e98900*, lpNumberOfBytesWritten=0x10c89bf4*=0x464, lpOverlapped=0x10c89bf8) returned 1 [0078.541] GetFileType (hFile=0x19c) returned 0x1 [0078.541] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0078.541] CloseHandle (hObject=0x19c) returned 1 [0078.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\3OE4MZ.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\3oe4mz.gif"), fInfoLevelId=0x0, lpFileInformation=0x110c7ea8 | out: lpFileInformation=0x110c7ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x153cb640, ftCreationTime.dwHighDateTime=0x1d624b1, ftLastAccessTime.dwLowDateTime=0xa2b9a240, ftLastAccessTime.dwHighDateTime=0x1d624ba, ftLastWriteTime.dwLowDateTime=0xa2b9a240, ftLastWriteTime.dwHighDateTime=0x1d624ba, nFileSizeHigh=0x0, nFileSizeLow=0x637c)) returned 1 [0078.541] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\3OE4MZ.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\3oe4mz.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.541] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.541] GetFileType (hFile=0x19c) returned 0x1 [0078.541] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.541] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f320 | out: pbBuffer=0x10c6f320) returned 1 [0078.541] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f330 | out: pbBuffer=0x10c6f330) returned 1 [0078.542] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f00601 | out: pbBuffer=0x10f00601) returned 1 [0078.542] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f00801 | out: pbBuffer=0x10f00801) returned 1 [0078.542] ReadFile (in: hFile=0x19c, lpBuffer=0x1105a000, nNumberOfBytesToRead=0x637c, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x1105a000*, lpNumberOfBytesRead=0x10c89b28*=0x637c, lpOverlapped=0x0) returned 1 [0078.543] GetFileType (hFile=0x19c) returned 0x1 [0078.543] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.543] WriteFile (in: hFile=0x19c, lpBuffer=0x11060a80*, nNumberOfBytesToWrite=0x637c, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x11060a80*, lpNumberOfBytesWritten=0x10c89b28*=0x637c, lpOverlapped=0x10c89b2c) returned 1 [0078.591] GetFileType (hFile=0x19c) returned 0x1 [0078.591] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x637c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.591] GetFileType (hFile=0x19c) returned 0x1 [0078.591] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.591] WriteFile (in: hFile=0x19c, lpBuffer=0x10f00700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f00700*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.599] GetFileType (hFile=0x19c) returned 0x1 [0078.599] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x637c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.599] GetFileType (hFile=0x19c) returned 0x1 [0078.599] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.599] WriteFile (in: hFile=0x19c, lpBuffer=0x10f00900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f00900*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.599] GetFileType (hFile=0x19c) returned 0x1 [0078.599] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x637c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.599] GetFileType (hFile=0x19c) returned 0x1 [0078.599] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.599] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.599] GetFileType (hFile=0x19c) returned 0x1 [0078.599] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x637c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.599] CloseHandle (hObject=0x19c) returned 1 [0078.599] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\3OE4MZ.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\3oe4mz.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\3OE4MZ.gif.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\3oe4mz.gif.trapget"), dwFlags=0x1) returned 1 [0078.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\L5nlJ-C0.png" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\l5nlj-c0.png"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9e8f0, ftCreationTime.dwHighDateTime=0x1d62a27, ftLastAccessTime.dwLowDateTime=0xc8961070, ftLastAccessTime.dwHighDateTime=0x1d62e1f, ftLastWriteTime.dwLowDateTime=0xc8961070, ftLastWriteTime.dwHighDateTime=0x1d62e1f, nFileSizeHigh=0x0, nFileSizeLow=0x1d76)) returned 1 [0078.600] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\L5nlJ-C0.png" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\l5nlj-c0.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.600] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.600] GetFileType (hFile=0x19c) returned 0x1 [0078.600] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.600] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f410 | out: pbBuffer=0x10c6f410) returned 1 [0078.601] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f420 | out: pbBuffer=0x10c6f420) returned 1 [0078.601] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f00b01 | out: pbBuffer=0x10f00b01) returned 1 [0078.601] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f00d01 | out: pbBuffer=0x10f00d01) returned 1 [0078.601] ReadFile (in: hFile=0x19c, lpBuffer=0x10d14000, nNumberOfBytesToRead=0x1d76, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10d14000*, lpNumberOfBytesRead=0x10c89b28*=0x1d76, lpOverlapped=0x0) returned 1 [0078.602] GetFileType (hFile=0x19c) returned 0x1 [0078.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.602] WriteFile (in: hFile=0x19c, lpBuffer=0x10d16000*, nNumberOfBytesToWrite=0x1d76, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10d16000*, lpNumberOfBytesWritten=0x10c89b28*=0x1d76, lpOverlapped=0x10c89b2c) returned 1 [0078.602] GetFileType (hFile=0x19c) returned 0x1 [0078.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1d76, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.602] GetFileType (hFile=0x19c) returned 0x1 [0078.602] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.602] WriteFile (in: hFile=0x19c, lpBuffer=0x10f00c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f00c00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.603] GetFileType (hFile=0x19c) returned 0x1 [0078.603] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1d76, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.603] GetFileType (hFile=0x19c) returned 0x1 [0078.603] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.603] WriteFile (in: hFile=0x19c, lpBuffer=0x10f00e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f00e00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.603] GetFileType (hFile=0x19c) returned 0x1 [0078.603] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1d76, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.603] GetFileType (hFile=0x19c) returned 0x1 [0078.603] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.603] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.603] GetFileType (hFile=0x19c) returned 0x1 [0078.603] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1d76, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.603] CloseHandle (hObject=0x19c) returned 1 [0078.603] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\L5nlJ-C0.png" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\l5nlj-c0.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\L5nlJ-C0.png.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\l5nlj-c0.png.trapget"), dwFlags=0x1) returned 1 [0078.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\QFX DP.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\qfx dp.gif"), fInfoLevelId=0x0, lpFileInformation=0x10cd2198 | out: lpFileInformation=0x10cd2198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf83c27e0, ftCreationTime.dwHighDateTime=0x1d62be7, ftLastAccessTime.dwLowDateTime=0x2f50c4e0, ftLastAccessTime.dwHighDateTime=0x1d627b3, ftLastWriteTime.dwLowDateTime=0x2f50c4e0, ftLastWriteTime.dwHighDateTime=0x1d627b3, nFileSizeHigh=0x0, nFileSizeLow=0xe0c3)) returned 1 [0078.604] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\QFX DP.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\qfx dp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.604] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.604] GetFileType (hFile=0x19c) returned 0x1 [0078.604] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.604] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f500 | out: pbBuffer=0x10c6f500) returned 1 [0078.604] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f510 | out: pbBuffer=0x10c6f510) returned 1 [0078.605] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f01101 | out: pbBuffer=0x10f01101) returned 1 [0078.605] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f01301 | out: pbBuffer=0x10f01301) returned 1 [0078.609] ReadFile (in: hFile=0x19c, lpBuffer=0x10ea8000, nNumberOfBytesToRead=0xe0c3, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10ea8000*, lpNumberOfBytesRead=0x10c89b28*=0xe0c3, lpOverlapped=0x0) returned 1 [0078.611] GetFileType (hFile=0x19c) returned 0x1 [0078.611] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.611] WriteFile (in: hFile=0x19c, lpBuffer=0x10eb8000*, nNumberOfBytesToWrite=0xe0c3, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10eb8000*, lpNumberOfBytesWritten=0x10c89b28*=0xe0c3, lpOverlapped=0x10c89b2c) returned 1 [0078.611] GetFileType (hFile=0x19c) returned 0x1 [0078.611] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe0c3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.611] GetFileType (hFile=0x19c) returned 0x1 [0078.611] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.611] WriteFile (in: hFile=0x19c, lpBuffer=0x10f01200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f01200*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.611] GetFileType (hFile=0x19c) returned 0x1 [0078.611] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe0c3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.611] GetFileType (hFile=0x19c) returned 0x1 [0078.611] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.612] WriteFile (in: hFile=0x19c, lpBuffer=0x10f01400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f01400*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.612] GetFileType (hFile=0x19c) returned 0x1 [0078.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe0c3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.612] GetFileType (hFile=0x19c) returned 0x1 [0078.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.612] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.612] GetFileType (hFile=0x19c) returned 0x1 [0078.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe0c3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.612] CloseHandle (hObject=0x19c) returned 1 [0078.612] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\QFX DP.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\qfx dp.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\QFX DP.gif.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\qfx dp.gif.trapget"), dwFlags=0x1) returned 1 [0078.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\jYAKDWZOA.png" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\jyakdwzoa.png"), fInfoLevelId=0x0, lpFileInformation=0x10cd22d8 | out: lpFileInformation=0x10cd22d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x476bf10, ftCreationTime.dwHighDateTime=0x1d6307b, ftLastAccessTime.dwLowDateTime=0x923537b0, ftLastAccessTime.dwHighDateTime=0x1d631d3, ftLastWriteTime.dwLowDateTime=0x923537b0, ftLastWriteTime.dwHighDateTime=0x1d631d3, nFileSizeHigh=0x0, nFileSizeLow=0x921b)) returned 1 [0078.613] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\jYAKDWZOA.png" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\jyakdwzoa.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.613] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.613] GetFileType (hFile=0x19c) returned 0x1 [0078.613] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.613] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f5e0 | out: pbBuffer=0x10c6f5e0) returned 1 [0078.613] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f5f0 | out: pbBuffer=0x10c6f5f0) returned 1 [0078.613] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f01601 | out: pbBuffer=0x10f01601) returned 1 [0078.614] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f01801 | out: pbBuffer=0x10f01801) returned 1 [0078.614] ReadFile (in: hFile=0x19c, lpBuffer=0x11076000, nNumberOfBytesToRead=0x921b, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x11076000*, lpNumberOfBytesRead=0x10c89b28*=0x921b, lpOverlapped=0x0) returned 1 [0078.615] GetFileType (hFile=0x19c) returned 0x1 [0078.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.615] WriteFile (in: hFile=0x19c, lpBuffer=0x10f52000*, nNumberOfBytesToWrite=0x921b, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f52000*, lpNumberOfBytesWritten=0x10c89b28*=0x921b, lpOverlapped=0x10c89b2c) returned 1 [0078.615] GetFileType (hFile=0x19c) returned 0x1 [0078.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x921b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.615] GetFileType (hFile=0x19c) returned 0x1 [0078.616] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.616] WriteFile (in: hFile=0x19c, lpBuffer=0x10f01700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f01700*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.616] GetFileType (hFile=0x19c) returned 0x1 [0078.616] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x921b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.616] GetFileType (hFile=0x19c) returned 0x1 [0078.616] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.616] WriteFile (in: hFile=0x19c, lpBuffer=0x10f01900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f01900*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.616] GetFileType (hFile=0x19c) returned 0x1 [0078.616] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x921b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.616] GetFileType (hFile=0x19c) returned 0x1 [0078.616] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.616] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.616] GetFileType (hFile=0x19c) returned 0x1 [0078.616] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x921b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.616] CloseHandle (hObject=0x19c) returned 1 [0078.616] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\jYAKDWZOA.png" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\jyakdwzoa.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\AY1dtfrzF8l2\\jYAKDWZOA.png.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ay1dtfrzf8l2\\jyakdwzoa.png.trapget"), dwFlags=0x1) returned 1 [0078.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\Jbshf.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\jbshf.gif"), fInfoLevelId=0x0, lpFileInformation=0x10cd2418 | out: lpFileInformation=0x10cd2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff76a1f0, ftCreationTime.dwHighDateTime=0x1d629e6, ftLastAccessTime.dwLowDateTime=0x66ec5df0, ftLastAccessTime.dwHighDateTime=0x1d62999, ftLastWriteTime.dwLowDateTime=0x66ec5df0, ftLastWriteTime.dwHighDateTime=0x1d62999, nFileSizeHigh=0x0, nFileSizeLow=0xe035)) returned 1 [0078.617] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\Jbshf.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\jbshf.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.617] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0078.617] GetFileType (hFile=0x19c) returned 0x1 [0078.617] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0078.618] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f6d0 | out: pbBuffer=0x10c6f6d0) returned 1 [0078.618] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f6e0 | out: pbBuffer=0x10c6f6e0) returned 1 [0078.618] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f01a01 | out: pbBuffer=0x10f01a01) returned 1 [0078.618] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f01c01 | out: pbBuffer=0x10f01c01) returned 1 [0078.618] ReadFile (in: hFile=0x19c, lpBuffer=0x10f60000, nNumberOfBytesToRead=0xe035, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10f60000*, lpNumberOfBytesRead=0x10c89b8c*=0xe035, lpOverlapped=0x0) returned 1 [0078.620] GetFileType (hFile=0x19c) returned 0x1 [0078.620] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.620] WriteFile (in: hFile=0x19c, lpBuffer=0x10f70000*, nNumberOfBytesToWrite=0xe035, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f70000*, lpNumberOfBytesWritten=0x10c89b8c*=0xe035, lpOverlapped=0x10c89b90) returned 1 [0078.621] GetFileType (hFile=0x19c) returned 0x1 [0078.621] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe035, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.621] GetFileType (hFile=0x19c) returned 0x1 [0078.621] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.621] WriteFile (in: hFile=0x19c, lpBuffer=0x10f01b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f01b00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.621] GetFileType (hFile=0x19c) returned 0x1 [0078.621] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe035, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.621] GetFileType (hFile=0x19c) returned 0x1 [0078.621] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.621] WriteFile (in: hFile=0x19c, lpBuffer=0x10f01d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f01d00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.621] GetFileType (hFile=0x19c) returned 0x1 [0078.621] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe035, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.621] GetFileType (hFile=0x19c) returned 0x1 [0078.621] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.621] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0078.623] GetFileType (hFile=0x19c) returned 0x1 [0078.623] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe035, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.623] CloseHandle (hObject=0x19c) returned 1 [0078.623] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\Jbshf.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\jbshf.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\Jbshf.gif.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\jbshf.gif.trapget"), dwFlags=0x1) returned 1 [0078.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\ikJ3p 1nUVcl6LOqw.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ikj3p 1nuvcl6loqw.bmp"), fInfoLevelId=0x0, lpFileInformation=0x10cd2558 | out: lpFileInformation=0x10cd2558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6318770, ftCreationTime.dwHighDateTime=0x1d62dba, ftLastAccessTime.dwLowDateTime=0x1693d360, ftLastAccessTime.dwHighDateTime=0x1d62f89, ftLastWriteTime.dwLowDateTime=0x1693d360, ftLastWriteTime.dwHighDateTime=0x1d62f89, nFileSizeHigh=0x0, nFileSizeLow=0x6bc3)) returned 1 [0078.624] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\ikJ3p 1nUVcl6LOqw.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ikj3p 1nuvcl6loqw.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.624] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0078.624] GetFileType (hFile=0x19c) returned 0x1 [0078.624] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0078.624] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f7c0 | out: pbBuffer=0x10c6f7c0) returned 1 [0078.624] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f7d0 | out: pbBuffer=0x10c6f7d0) returned 1 [0078.624] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2001 | out: pbBuffer=0x10ed2001) returned 1 [0078.625] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2201 | out: pbBuffer=0x10ed2201) returned 1 [0078.625] ReadFile (in: hFile=0x19c, lpBuffer=0x10d7e000, nNumberOfBytesToRead=0x6bc3, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10d7e000*, lpNumberOfBytesRead=0x10c89b8c*=0x6bc3, lpOverlapped=0x0) returned 1 [0078.626] GetFileType (hFile=0x19c) returned 0x1 [0078.626] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.626] WriteFile (in: hFile=0x19c, lpBuffer=0x10d85000*, nNumberOfBytesToWrite=0x6bc3, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10d85000*, lpNumberOfBytesWritten=0x10c89b8c*=0x6bc3, lpOverlapped=0x10c89b90) returned 1 [0078.626] GetFileType (hFile=0x19c) returned 0x1 [0078.626] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6bc3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.626] GetFileType (hFile=0x19c) returned 0x1 [0078.626] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.626] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed2100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ed2100*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.626] GetFileType (hFile=0x19c) returned 0x1 [0078.626] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6bc3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.626] GetFileType (hFile=0x19c) returned 0x1 [0078.626] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.626] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed2300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ed2300*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.626] GetFileType (hFile=0x19c) returned 0x1 [0078.627] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6bc3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.627] GetFileType (hFile=0x19c) returned 0x1 [0078.627] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.627] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0078.627] GetFileType (hFile=0x19c) returned 0x1 [0078.627] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6bc3, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.627] CloseHandle (hObject=0x19c) returned 1 [0078.627] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\ikJ3p 1nUVcl6LOqw.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ikj3p 1nuvcl6loqw.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\ikJ3p 1nUVcl6LOqw.bmp.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\ikj3p 1nuvcl6loqw.bmp.trapget"), dwFlags=0x1) returned 1 [0078.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7"), fInfoLevelId=0x0, lpFileInformation=0x10cd2698 | out: lpFileInformation=0x10cd2698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8c00c30, ftCreationTime.dwHighDateTime=0x1d62975, ftLastAccessTime.dwLowDateTime=0x85e8b4a0, ftLastAccessTime.dwHighDateTime=0x1d62b1b, ftLastWriteTime.dwLowDateTime=0x85e8b4a0, ftLastWriteTime.dwHighDateTime=0x1d62b1b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0078.627] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.627] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\*", lpFindFileData=0x10c899a0 | out: lpFindFileData=0x10c899a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8c00c30, ftCreationTime.dwHighDateTime=0x1d62975, ftLastAccessTime.dwLowDateTime=0x85e8b4a0, ftLastAccessTime.dwHighDateTime=0x1d62b1b, ftLastWriteTime.dwLowDateTime=0x85e8b4a0, ftLastWriteTime.dwHighDateTime=0x1d62b1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcb8 [0078.628] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8c00c30, ftCreationTime.dwHighDateTime=0x1d62975, ftLastAccessTime.dwLowDateTime=0x85e8b4a0, ftLastAccessTime.dwHighDateTime=0x1d62b1b, ftLastWriteTime.dwLowDateTime=0x85e8b4a0, ftLastWriteTime.dwHighDateTime=0x1d62b1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.628] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7629e3c0, ftCreationTime.dwHighDateTime=0x1d622da, ftLastAccessTime.dwLowDateTime=0x41345340, ftLastAccessTime.dwHighDateTime=0x1d632a1, ftLastWriteTime.dwLowDateTime=0x41345340, ftLastWriteTime.dwHighDateTime=0x1d632a1, nFileSizeHigh=0x0, nFileSizeLow=0x10a07, dwReserved0=0x0, dwReserved1=0x0, cFileName="14KJ41Pa8eCAx3.jpg", cAlternateFileName="14KJ41~1.JPG")) returned 1 [0078.628] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647eb4a0, ftCreationTime.dwHighDateTime=0x1d62fc0, ftLastAccessTime.dwLowDateTime=0x6c36c370, ftLastAccessTime.dwHighDateTime=0x1d6313e, ftLastWriteTime.dwLowDateTime=0x6c36c370, ftLastWriteTime.dwHighDateTime=0x1d6313e, nFileSizeHigh=0x0, nFileSizeLow=0x385b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dmDhuuc.jpg", cAlternateFileName="")) returned 1 [0078.628] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39489b70, ftCreationTime.dwHighDateTime=0x1d626c9, ftLastAccessTime.dwLowDateTime=0xef6e13a0, ftLastAccessTime.dwHighDateTime=0x1d62794, ftLastWriteTime.dwLowDateTime=0xef6e13a0, ftLastWriteTime.dwHighDateTime=0x1d62794, nFileSizeHigh=0x0, nFileSizeLow=0x84cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="q4kqSY.png", cAlternateFileName="")) returned 1 [0078.628] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf80470, ftCreationTime.dwHighDateTime=0x1d62369, ftLastAccessTime.dwLowDateTime=0xb087d060, ftLastAccessTime.dwHighDateTime=0x1d6242c, ftLastWriteTime.dwLowDateTime=0xb087d060, ftLastWriteTime.dwHighDateTime=0x1d6242c, nFileSizeHigh=0x0, nFileSizeLow=0xeab6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UyM46wH68Kv8Uest20.bmp", cAlternateFileName="UYM46W~1.BMP")) returned 1 [0078.628] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.628] FindClose (in: hFindFile=0x7efcb8 | out: hFindFile=0x7efcb8) returned 1 [0078.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.628] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c04 | out: lpMode=0x10c89c04) returned 0 [0078.628] GetFileType (hFile=0x19c) returned 0x1 [0078.628] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0078.632] WriteFile (in: hFile=0x19c, lpBuffer=0x10e99200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89bf4, lpOverlapped=0x10c89bf8 | out: lpBuffer=0x10e99200*, lpNumberOfBytesWritten=0x10c89bf4*=0x464, lpOverlapped=0x10c89bf8) returned 1 [0078.633] GetFileType (hFile=0x19c) returned 0x1 [0078.633] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0078.633] CloseHandle (hObject=0x19c) returned 1 [0078.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\14KJ41Pa8eCAx3.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\14kj41pa8ecax3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x10cd2828 | out: lpFileInformation=0x10cd2828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7629e3c0, ftCreationTime.dwHighDateTime=0x1d622da, ftLastAccessTime.dwLowDateTime=0x41345340, ftLastAccessTime.dwHighDateTime=0x1d632a1, ftLastWriteTime.dwLowDateTime=0x41345340, ftLastWriteTime.dwHighDateTime=0x1d632a1, nFileSizeHigh=0x0, nFileSizeLow=0x10a07)) returned 1 [0078.633] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\14KJ41Pa8eCAx3.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\14kj41pa8ecax3.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.634] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.634] GetFileType (hFile=0x19c) returned 0x1 [0078.634] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.634] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f910 | out: pbBuffer=0x10c6f910) returned 1 [0078.634] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f920 | out: pbBuffer=0x10c6f920) returned 1 [0078.634] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2501 | out: pbBuffer=0x10ed2501) returned 1 [0078.634] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2701 | out: pbBuffer=0x10ed2701) returned 1 [0078.634] ReadFile (in: hFile=0x19c, lpBuffer=0x10d96000, nNumberOfBytesToRead=0x10a07, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10d96000*, lpNumberOfBytesRead=0x10c89b28*=0x10a07, lpOverlapped=0x0) returned 1 [0078.636] GetFileType (hFile=0x19c) returned 0x1 [0078.636] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.636] WriteFile (in: hFile=0x19c, lpBuffer=0x10da8000*, nNumberOfBytesToWrite=0x10a07, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10da8000*, lpNumberOfBytesWritten=0x10c89b28*=0x10a07, lpOverlapped=0x10c89b2c) returned 1 [0078.636] GetFileType (hFile=0x19c) returned 0x1 [0078.636] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10a07, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.636] GetFileType (hFile=0x19c) returned 0x1 [0078.636] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.636] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed2600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed2600*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.636] GetFileType (hFile=0x19c) returned 0x1 [0078.636] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10a07, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.636] GetFileType (hFile=0x19c) returned 0x1 [0078.636] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.637] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed2800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed2800*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.637] GetFileType (hFile=0x19c) returned 0x1 [0078.637] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10a07, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.637] GetFileType (hFile=0x19c) returned 0x1 [0078.637] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.637] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.637] GetFileType (hFile=0x19c) returned 0x1 [0078.637] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10a07, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.637] CloseHandle (hObject=0x19c) returned 1 [0078.637] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\14KJ41Pa8eCAx3.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\14kj41pa8ecax3.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\14KJ41Pa8eCAx3.jpg.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\14kj41pa8ecax3.jpg.trapget"), dwFlags=0x1) returned 1 [0078.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\UyM46wH68Kv8Uest20.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\uym46wh68kv8uest20.bmp"), fInfoLevelId=0x0, lpFileInformation=0x10cd2968 | out: lpFileInformation=0x10cd2968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf80470, ftCreationTime.dwHighDateTime=0x1d62369, ftLastAccessTime.dwLowDateTime=0xb087d060, ftLastAccessTime.dwHighDateTime=0x1d6242c, ftLastWriteTime.dwLowDateTime=0xb087d060, ftLastWriteTime.dwHighDateTime=0x1d6242c, nFileSizeHigh=0x0, nFileSizeLow=0xeab6)) returned 1 [0078.638] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\UyM46wH68Kv8Uest20.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\uym46wh68kv8uest20.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.638] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.638] GetFileType (hFile=0x19c) returned 0x1 [0078.638] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.638] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fa00 | out: pbBuffer=0x10c6fa00) returned 1 [0078.638] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fa10 | out: pbBuffer=0x10c6fa10) returned 1 [0078.638] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2901 | out: pbBuffer=0x10ed2901) returned 1 [0078.638] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2b01 | out: pbBuffer=0x10ed2b01) returned 1 [0078.639] ReadFile (in: hFile=0x19c, lpBuffer=0x1100c000, nNumberOfBytesToRead=0xeab6, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x1100c000*, lpNumberOfBytesRead=0x10c89b28*=0xeab6, lpOverlapped=0x0) returned 1 [0078.640] GetFileType (hFile=0x19c) returned 0x1 [0078.640] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.640] WriteFile (in: hFile=0x19c, lpBuffer=0x1101c000*, nNumberOfBytesToWrite=0xeab6, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1101c000*, lpNumberOfBytesWritten=0x10c89b28*=0xeab6, lpOverlapped=0x10c89b2c) returned 1 [0078.640] GetFileType (hFile=0x19c) returned 0x1 [0078.640] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeab6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.640] GetFileType (hFile=0x19c) returned 0x1 [0078.640] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.641] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed2a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed2a00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.641] GetFileType (hFile=0x19c) returned 0x1 [0078.641] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeab6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.641] GetFileType (hFile=0x19c) returned 0x1 [0078.641] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.641] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed2c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed2c00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.641] GetFileType (hFile=0x19c) returned 0x1 [0078.641] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeab6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.641] GetFileType (hFile=0x19c) returned 0x1 [0078.641] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.641] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.641] GetFileType (hFile=0x19c) returned 0x1 [0078.641] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeab6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.641] CloseHandle (hObject=0x19c) returned 1 [0078.641] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\UyM46wH68Kv8Uest20.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\uym46wh68kv8uest20.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\UyM46wH68Kv8Uest20.bmp.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\uym46wh68kv8uest20.bmp.trapget"), dwFlags=0x1) returned 1 [0078.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\dmDhuuc.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\dmdhuuc.jpg"), fInfoLevelId=0x0, lpFileInformation=0x10cd2aa8 | out: lpFileInformation=0x10cd2aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647eb4a0, ftCreationTime.dwHighDateTime=0x1d62fc0, ftLastAccessTime.dwLowDateTime=0x6c36c370, ftLastAccessTime.dwHighDateTime=0x1d6313e, ftLastWriteTime.dwLowDateTime=0x6c36c370, ftLastWriteTime.dwHighDateTime=0x1d6313e, nFileSizeHigh=0x0, nFileSizeLow=0x385b)) returned 1 [0078.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\dmDhuuc.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\dmdhuuc.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.642] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.642] GetFileType (hFile=0x19c) returned 0x1 [0078.642] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.642] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6faf0 | out: pbBuffer=0x10c6faf0) returned 1 [0078.642] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fb00 | out: pbBuffer=0x10c6fb00) returned 1 [0078.642] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2f01 | out: pbBuffer=0x10ed2f01) returned 1 [0078.642] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed3101 | out: pbBuffer=0x10ed3101) returned 1 [0078.643] ReadFile (in: hFile=0x19c, lpBuffer=0x11030000, nNumberOfBytesToRead=0x385b, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x11030000*, lpNumberOfBytesRead=0x10c89b28*=0x385b, lpOverlapped=0x0) returned 1 [0078.644] GetFileType (hFile=0x19c) returned 0x1 [0078.644] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.644] WriteFile (in: hFile=0x19c, lpBuffer=0x11034000*, nNumberOfBytesToWrite=0x385b, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x11034000*, lpNumberOfBytesWritten=0x10c89b28*=0x385b, lpOverlapped=0x10c89b2c) returned 1 [0078.644] GetFileType (hFile=0x19c) returned 0x1 [0078.644] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x385b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.644] GetFileType (hFile=0x19c) returned 0x1 [0078.644] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.644] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed3000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed3000*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.644] GetFileType (hFile=0x19c) returned 0x1 [0078.644] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x385b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.644] GetFileType (hFile=0x19c) returned 0x1 [0078.644] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.644] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed3200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed3200*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.644] GetFileType (hFile=0x19c) returned 0x1 [0078.644] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x385b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.644] GetFileType (hFile=0x19c) returned 0x1 [0078.645] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.645] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.645] GetFileType (hFile=0x19c) returned 0x1 [0078.645] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x385b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.645] CloseHandle (hObject=0x19c) returned 1 [0078.645] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\dmDhuuc.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\dmdhuuc.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\dmDhuuc.jpg.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\dmdhuuc.jpg.trapget"), dwFlags=0x1) returned 1 [0078.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\q4kqSY.png" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\q4kqsy.png"), fInfoLevelId=0x0, lpFileInformation=0x10cd2be8 | out: lpFileInformation=0x10cd2be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39489b70, ftCreationTime.dwHighDateTime=0x1d626c9, ftLastAccessTime.dwLowDateTime=0xef6e13a0, ftLastAccessTime.dwHighDateTime=0x1d62794, ftLastWriteTime.dwLowDateTime=0xef6e13a0, ftLastWriteTime.dwHighDateTime=0x1d62794, nFileSizeHigh=0x0, nFileSizeLow=0x84cb)) returned 1 [0078.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\q4kqSY.png" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\q4kqsy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.645] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.645] GetFileType (hFile=0x19c) returned 0x1 [0078.646] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.646] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fbd0 | out: pbBuffer=0x10c6fbd0) returned 1 [0078.646] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fbe0 | out: pbBuffer=0x10c6fbe0) returned 1 [0078.646] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed3401 | out: pbBuffer=0x10ed3401) returned 1 [0078.646] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed3601 | out: pbBuffer=0x10ed3601) returned 1 [0078.646] ReadFile (in: hFile=0x19c, lpBuffer=0x10d2a000, nNumberOfBytesToRead=0x84cb, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10d2a000*, lpNumberOfBytesRead=0x10c89b28*=0x84cb, lpOverlapped=0x0) returned 1 [0078.647] GetFileType (hFile=0x19c) returned 0x1 [0078.647] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.647] WriteFile (in: hFile=0x19c, lpBuffer=0x10d34000*, nNumberOfBytesToWrite=0x84cb, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10d34000*, lpNumberOfBytesWritten=0x10c89b28*=0x84cb, lpOverlapped=0x10c89b2c) returned 1 [0078.648] GetFileType (hFile=0x19c) returned 0x1 [0078.648] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x84cb, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.648] GetFileType (hFile=0x19c) returned 0x1 [0078.648] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.648] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed3500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed3500*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.648] GetFileType (hFile=0x19c) returned 0x1 [0078.648] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x84cb, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.648] GetFileType (hFile=0x19c) returned 0x1 [0078.648] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.648] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed3700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed3700*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.648] GetFileType (hFile=0x19c) returned 0x1 [0078.648] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x84cb, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.648] GetFileType (hFile=0x19c) returned 0x1 [0078.648] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.648] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.648] GetFileType (hFile=0x19c) returned 0x1 [0078.648] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x84cb, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.648] CloseHandle (hObject=0x19c) returned 1 [0078.649] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\q4kqSY.png" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\q4kqsy.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\rIginbc7\\q4kqSY.png.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\riginbc7\\q4kqsy.png.trapget"), dwFlags=0x1) returned 1 [0078.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\thAb375jxBKIPbYUDM.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\thab375jxbkipbyudm.gif"), fInfoLevelId=0x0, lpFileInformation=0x10cd2d28 | out: lpFileInformation=0x10cd2d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x823e21b0, ftCreationTime.dwHighDateTime=0x1d63146, ftLastAccessTime.dwLowDateTime=0x852f4c70, ftLastAccessTime.dwHighDateTime=0x1d62488, ftLastWriteTime.dwLowDateTime=0x852f4c70, ftLastWriteTime.dwHighDateTime=0x1d62488, nFileSizeHigh=0x0, nFileSizeLow=0xb168)) returned 1 [0078.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\thAb375jxBKIPbYUDM.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\thab375jxbkipbyudm.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.649] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0078.649] GetFileType (hFile=0x19c) returned 0x1 [0078.649] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0078.649] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fcc0 | out: pbBuffer=0x10c6fcc0) returned 1 [0078.649] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fcd0 | out: pbBuffer=0x10c6fcd0) returned 1 [0078.649] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed3a01 | out: pbBuffer=0x10ed3a01) returned 1 [0078.650] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed3c01 | out: pbBuffer=0x10ed3c01) returned 1 [0078.650] ReadFile (in: hFile=0x19c, lpBuffer=0x10d46000, nNumberOfBytesToRead=0xb168, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10d46000*, lpNumberOfBytesRead=0x10c89b8c*=0xb168, lpOverlapped=0x0) returned 1 [0078.651] SetEvent (hEvent=0x158) returned 1 [0078.651] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0078.685] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0078.685] SetEvent (hEvent=0x158) returned 1 [0078.685] SetEvent (hEvent=0x138) returned 1 [0078.686] SetEvent (hEvent=0x170) returned 1 [0078.686] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0078.700] SetEvent (hEvent=0x168) returned 1 [0078.700] SetEvent (hEvent=0x170) returned 1 [0078.700] GetFileType (hFile=0x19c) returned 0x1 [0078.700] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.700] WriteFile (in: hFile=0x19c, lpBuffer=0x10d52000*, nNumberOfBytesToWrite=0xb168, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10d52000*, lpNumberOfBytesWritten=0x10c89b8c*=0xb168, lpOverlapped=0x10c89b90) returned 1 [0078.701] GetFileType (hFile=0x19c) returned 0x1 [0078.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb168, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.701] GetFileType (hFile=0x19c) returned 0x1 [0078.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.701] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed3b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ed3b00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.701] GetFileType (hFile=0x19c) returned 0x1 [0078.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb168, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.701] GetFileType (hFile=0x19c) returned 0x1 [0078.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.701] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed3d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ed3d00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.701] GetFileType (hFile=0x19c) returned 0x1 [0078.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb168, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.701] GetFileType (hFile=0x19c) returned 0x1 [0078.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.701] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0078.701] GetFileType (hFile=0x19c) returned 0x1 [0078.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb168, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.701] CloseHandle (hObject=0x19c) returned 1 [0078.702] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\thAb375jxBKIPbYUDM.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\thab375jxbkipbyudm.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\-vR8oRC26r7T1z\\thAb375jxBKIPbYUDM.gif.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\-vr8orc26r7t1z\\thab375jxbkipbyudm.gif.trapget"), dwFlags=0x1) returned 1 [0078.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e936f60, ftCreationTime.dwHighDateTime=0x1d63129, ftLastAccessTime.dwLowDateTime=0x84972ba0, ftLastAccessTime.dwHighDateTime=0x1d62f7f, ftLastWriteTime.dwLowDateTime=0x84972ba0, ftLastWriteTime.dwHighDateTime=0x1d62f7f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0078.703] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.703] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e936f60, ftCreationTime.dwHighDateTime=0x1d63129, ftLastAccessTime.dwLowDateTime=0x84972ba0, ftLastAccessTime.dwHighDateTime=0x1d62f7f, ftLastWriteTime.dwLowDateTime=0x84972ba0, ftLastWriteTime.dwHighDateTime=0x1d62f7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcb8 [0078.703] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e936f60, ftCreationTime.dwHighDateTime=0x1d63129, ftLastAccessTime.dwLowDateTime=0x84972ba0, ftLastAccessTime.dwHighDateTime=0x1d62f7f, ftLastWriteTime.dwLowDateTime=0x84972ba0, ftLastWriteTime.dwHighDateTime=0x1d62f7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.703] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e85840, ftCreationTime.dwHighDateTime=0x1d631c9, ftLastAccessTime.dwLowDateTime=0x45202990, ftLastAccessTime.dwHighDateTime=0x1d62a34, ftLastWriteTime.dwLowDateTime=0x45202990, ftLastWriteTime.dwHighDateTime=0x1d62a34, nFileSizeHigh=0x0, nFileSizeLow=0x139e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="2VjOG5.bmp", cAlternateFileName="")) returned 1 [0078.703] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ab4c2c0, ftCreationTime.dwHighDateTime=0x1d6285c, ftLastAccessTime.dwLowDateTime=0xc74809f0, ftLastAccessTime.dwHighDateTime=0x1d62f4e, ftLastWriteTime.dwLowDateTime=0xc74809f0, ftLastWriteTime.dwHighDateTime=0x1d62f4e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="a1sHh", cAlternateFileName="")) returned 1 [0078.703] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x613e40, ftCreationTime.dwHighDateTime=0x1d625f0, ftLastAccessTime.dwLowDateTime=0xa2034c00, ftLastAccessTime.dwHighDateTime=0x1d62917, ftLastWriteTime.dwLowDateTime=0xa2034c00, ftLastWriteTime.dwHighDateTime=0x1d62917, nFileSizeHigh=0x0, nFileSizeLow=0x13b2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="hjBimdtLHoobn_.bmp", cAlternateFileName="HJBIMD~1.BMP")) returned 1 [0078.703] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9b92770, ftCreationTime.dwHighDateTime=0x1d6230d, ftLastAccessTime.dwLowDateTime=0x5a0bf790, ftLastAccessTime.dwHighDateTime=0x1d6277c, ftLastWriteTime.dwLowDateTime=0x5a0bf790, ftLastWriteTime.dwHighDateTime=0x1d6277c, nFileSizeHigh=0x0, nFileSizeLow=0xa050, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKZuoOHZZsnWkxZR.bmp", cAlternateFileName="UKZUOO~1.BMP")) returned 1 [0078.703] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9cd840, ftCreationTime.dwHighDateTime=0x1d6250e, ftLastAccessTime.dwLowDateTime=0xe1deb910, ftLastAccessTime.dwHighDateTime=0x1d62d4d, ftLastWriteTime.dwLowDateTime=0xe1deb910, ftLastWriteTime.dwHighDateTime=0x1d62d4d, nFileSizeHigh=0x0, nFileSizeLow=0xe116, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vq849U.png", cAlternateFileName="")) returned 1 [0078.703] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.703] FindClose (in: hFindFile=0x7efcb8 | out: hFindFile=0x7efcb8) returned 1 [0078.703] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.713] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0078.713] GetFileType (hFile=0x19c) returned 0x1 [0078.713] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0078.714] WriteFile (in: hFile=0x19c, lpBuffer=0x10cc2480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10cc2480*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0078.714] GetFileType (hFile=0x19c) returned 0x1 [0078.714] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0078.714] CloseHandle (hObject=0x19c) returned 1 [0078.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\2VjOG5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\2vjog5.bmp"), fInfoLevelId=0x0, lpFileInformation=0x10cd2238 | out: lpFileInformation=0x10cd2238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e85840, ftCreationTime.dwHighDateTime=0x1d631c9, ftLastAccessTime.dwLowDateTime=0x45202990, ftLastAccessTime.dwHighDateTime=0x1d62a34, ftLastWriteTime.dwLowDateTime=0x45202990, ftLastWriteTime.dwHighDateTime=0x1d62a34, nFileSizeHigh=0x0, nFileSizeLow=0x139e6)) returned 1 [0078.715] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\2VjOG5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\2vjog5.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.715] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0078.715] GetFileType (hFile=0x19c) returned 0x1 [0078.715] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0078.715] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e0b0 | out: pbBuffer=0x10c6e0b0) returned 1 [0078.715] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e0c0 | out: pbBuffer=0x10c6e0c0) returned 1 [0078.715] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2201 | out: pbBuffer=0x10ed2201) returned 1 [0078.715] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2401 | out: pbBuffer=0x10ed2401) returned 1 [0078.716] ReadFile (in: hFile=0x19c, lpBuffer=0x11092000, nNumberOfBytesToRead=0x139e6, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x11092000*, lpNumberOfBytesRead=0x10c89b8c*=0x139e6, lpOverlapped=0x0) returned 1 [0078.717] GetFileType (hFile=0x19c) returned 0x1 [0078.717] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.717] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x139e6, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89b8c*=0x139e6, lpOverlapped=0x10c89b90) returned 1 [0078.717] GetFileType (hFile=0x19c) returned 0x1 [0078.718] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x139e6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.718] GetFileType (hFile=0x19c) returned 0x1 [0078.718] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.718] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed2300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ed2300*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.718] GetFileType (hFile=0x19c) returned 0x1 [0078.718] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x139e6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.718] GetFileType (hFile=0x19c) returned 0x1 [0078.718] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.718] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed2500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ed2500*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.718] GetFileType (hFile=0x19c) returned 0x1 [0078.721] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x139e6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.721] GetFileType (hFile=0x19c) returned 0x1 [0078.721] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.721] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0078.722] GetFileType (hFile=0x19c) returned 0x1 [0078.722] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x139e6, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.722] CloseHandle (hObject=0x19c) returned 1 [0078.722] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\2VjOG5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\2vjog5.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\2VjOG5.bmp.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\2vjog5.bmp.trapget"), dwFlags=0x1) returned 1 [0078.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\UKZuoOHZZsnWkxZR.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\ukzuoohzzsnwkxzr.bmp"), fInfoLevelId=0x0, lpFileInformation=0x10cd2378 | out: lpFileInformation=0x10cd2378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9b92770, ftCreationTime.dwHighDateTime=0x1d6230d, ftLastAccessTime.dwLowDateTime=0x5a0bf790, ftLastAccessTime.dwHighDateTime=0x1d6277c, ftLastWriteTime.dwLowDateTime=0x5a0bf790, ftLastWriteTime.dwHighDateTime=0x1d6277c, nFileSizeHigh=0x0, nFileSizeLow=0xa050)) returned 1 [0078.723] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\UKZuoOHZZsnWkxZR.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\ukzuoohzzsnwkxzr.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.723] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0078.723] GetFileType (hFile=0x19c) returned 0x1 [0078.723] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0078.723] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e190 | out: pbBuffer=0x10c6e190) returned 1 [0078.723] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e1a0 | out: pbBuffer=0x10c6e1a0) returned 1 [0078.723] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2601 | out: pbBuffer=0x10ed2601) returned 1 [0078.723] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2801 | out: pbBuffer=0x10ed2801) returned 1 [0078.724] ReadFile (in: hFile=0x19c, lpBuffer=0x10e04000, nNumberOfBytesToRead=0xa050, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10e04000*, lpNumberOfBytesRead=0x10c89b8c*=0xa050, lpOverlapped=0x0) returned 1 [0078.725] GetFileType (hFile=0x19c) returned 0x1 [0078.725] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.725] WriteFile (in: hFile=0x19c, lpBuffer=0x1100a000*, nNumberOfBytesToWrite=0xa050, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x1100a000*, lpNumberOfBytesWritten=0x10c89b8c*=0xa050, lpOverlapped=0x10c89b90) returned 1 [0078.725] GetFileType (hFile=0x19c) returned 0x1 [0078.725] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa050, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.725] GetFileType (hFile=0x19c) returned 0x1 [0078.725] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.725] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed2700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ed2700*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.725] GetFileType (hFile=0x19c) returned 0x1 [0078.725] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa050, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.725] GetFileType (hFile=0x19c) returned 0x1 [0078.725] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.725] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed2900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ed2900*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.725] GetFileType (hFile=0x19c) returned 0x1 [0078.725] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa050, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.726] GetFileType (hFile=0x19c) returned 0x1 [0078.726] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.726] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0078.726] GetFileType (hFile=0x19c) returned 0x1 [0078.726] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa050, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.726] CloseHandle (hObject=0x19c) returned 1 [0078.726] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\UKZuoOHZZsnWkxZR.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\ukzuoohzzsnwkxzr.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\UKZuoOHZZsnWkxZR.bmp.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\ukzuoohzzsnwkxzr.bmp.trapget"), dwFlags=0x1) returned 1 [0078.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\Vq849U.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\vq849u.png"), fInfoLevelId=0x0, lpFileInformation=0x10cd24b8 | out: lpFileInformation=0x10cd24b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9cd840, ftCreationTime.dwHighDateTime=0x1d6250e, ftLastAccessTime.dwLowDateTime=0xe1deb910, ftLastAccessTime.dwHighDateTime=0x1d62d4d, ftLastWriteTime.dwLowDateTime=0xe1deb910, ftLastWriteTime.dwHighDateTime=0x1d62d4d, nFileSizeHigh=0x0, nFileSizeLow=0xe116)) returned 1 [0078.726] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\Vq849U.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\vq849u.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.726] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0078.727] GetFileType (hFile=0x19c) returned 0x1 [0078.727] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0078.727] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e3f0 | out: pbBuffer=0x10c6e3f0) returned 1 [0078.727] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e400 | out: pbBuffer=0x10c6e400) returned 1 [0078.727] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2a01 | out: pbBuffer=0x10ed2a01) returned 1 [0078.732] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2c01 | out: pbBuffer=0x10ed2c01) returned 1 [0078.733] ReadFile (in: hFile=0x19c, lpBuffer=0x11016000, nNumberOfBytesToRead=0xe116, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x11016000*, lpNumberOfBytesRead=0x10c89b8c*=0xe116, lpOverlapped=0x0) returned 1 [0078.734] GetFileType (hFile=0x19c) returned 0x1 [0078.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.734] WriteFile (in: hFile=0x19c, lpBuffer=0x11026000*, nNumberOfBytesToWrite=0xe116, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x11026000*, lpNumberOfBytesWritten=0x10c89b8c*=0xe116, lpOverlapped=0x10c89b90) returned 1 [0078.738] GetFileType (hFile=0x19c) returned 0x1 [0078.738] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe116, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.738] GetFileType (hFile=0x19c) returned 0x1 [0078.738] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.738] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed2b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ed2b00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.738] GetFileType (hFile=0x19c) returned 0x1 [0078.738] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe116, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.738] GetFileType (hFile=0x19c) returned 0x1 [0078.738] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.738] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed2d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ed2d00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.738] GetFileType (hFile=0x19c) returned 0x1 [0078.738] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe116, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.738] GetFileType (hFile=0x19c) returned 0x1 [0078.738] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.738] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0078.739] GetFileType (hFile=0x19c) returned 0x1 [0078.739] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe116, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.739] CloseHandle (hObject=0x19c) returned 1 [0078.739] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\Vq849U.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\vq849u.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\Vq849U.png.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\vq849u.png.trapget"), dwFlags=0x1) returned 1 [0078.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh"), fInfoLevelId=0x0, lpFileInformation=0x10cd25f8 | out: lpFileInformation=0x10cd25f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ab4c2c0, ftCreationTime.dwHighDateTime=0x1d6285c, ftLastAccessTime.dwLowDateTime=0xc74809f0, ftLastAccessTime.dwHighDateTime=0x1d62f4e, ftLastWriteTime.dwLowDateTime=0xc74809f0, ftLastWriteTime.dwHighDateTime=0x1d62f4e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0078.740] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.740] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\*", lpFindFileData=0x10c899a0 | out: lpFindFileData=0x10c899a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ab4c2c0, ftCreationTime.dwHighDateTime=0x1d6285c, ftLastAccessTime.dwLowDateTime=0xc74809f0, ftLastAccessTime.dwHighDateTime=0x1d62f4e, ftLastWriteTime.dwLowDateTime=0xc74809f0, ftLastWriteTime.dwHighDateTime=0x1d62f4e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0178 [0078.740] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ab4c2c0, ftCreationTime.dwHighDateTime=0x1d6285c, ftLastAccessTime.dwLowDateTime=0xc74809f0, ftLastAccessTime.dwHighDateTime=0x1d62f4e, ftLastWriteTime.dwLowDateTime=0xc74809f0, ftLastWriteTime.dwHighDateTime=0x1d62f4e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.740] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa58e1be0, ftCreationTime.dwHighDateTime=0x1d623f2, ftLastAccessTime.dwLowDateTime=0x81d0abc0, ftLastAccessTime.dwHighDateTime=0x1d624c2, ftLastWriteTime.dwLowDateTime=0x81d0abc0, ftLastWriteTime.dwHighDateTime=0x1d624c2, nFileSizeHigh=0x0, nFileSizeLow=0xd6d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="6sE7MKeN28.png", cAlternateFileName="6SE7MK~1.PNG")) returned 1 [0078.740] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60896540, ftCreationTime.dwHighDateTime=0x1d62983, ftLastAccessTime.dwLowDateTime=0xdaa3f930, ftLastAccessTime.dwHighDateTime=0x1d628b1, ftLastWriteTime.dwLowDateTime=0xdaa3f930, ftLastWriteTime.dwHighDateTime=0x1d628b1, nFileSizeHigh=0x0, nFileSizeLow=0x4064, dwReserved0=0x0, dwReserved1=0x0, cFileName="aTSVOWFd.png", cAlternateFileName="")) returned 1 [0078.740] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1b0250, ftCreationTime.dwHighDateTime=0x1d62838, ftLastAccessTime.dwLowDateTime=0x252fce30, ftLastAccessTime.dwHighDateTime=0x1d6322f, ftLastWriteTime.dwLowDateTime=0x252fce30, ftLastWriteTime.dwHighDateTime=0x1d6322f, nFileSizeHigh=0x0, nFileSizeLow=0x6d97, dwReserved0=0x0, dwReserved1=0x0, cFileName="cYt0wIm_Tv.png", cAlternateFileName="CYT0WI~1.PNG")) returned 1 [0078.740] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd3b960, ftCreationTime.dwHighDateTime=0x1d63246, ftLastAccessTime.dwLowDateTime=0x56a6d7d0, ftLastAccessTime.dwHighDateTime=0x1d62e04, ftLastWriteTime.dwLowDateTime=0x56a6d7d0, ftLastWriteTime.dwHighDateTime=0x1d62e04, nFileSizeHigh=0x0, nFileSizeLow=0x75a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNcE4b8sjFrKDk06ftuI.png", cAlternateFileName="JNCE4B~1.PNG")) returned 1 [0078.740] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd72aab10, ftCreationTime.dwHighDateTime=0x1d6312f, ftLastAccessTime.dwLowDateTime=0xb5b302e0, ftLastAccessTime.dwHighDateTime=0x1d63218, ftLastWriteTime.dwLowDateTime=0xb5b302e0, ftLastWriteTime.dwHighDateTime=0x1d63218, nFileSizeHigh=0x0, nFileSizeLow=0xde04, dwReserved0=0x0, dwReserved1=0x0, cFileName="lB5aqcOAkY.jpg", cAlternateFileName="LB5AQC~1.JPG")) returned 1 [0078.740] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a50190, ftCreationTime.dwHighDateTime=0x1d627b1, ftLastAccessTime.dwLowDateTime=0x8e9ab9d0, ftLastAccessTime.dwHighDateTime=0x1d62775, ftLastWriteTime.dwLowDateTime=0x8e9ab9d0, ftLastWriteTime.dwHighDateTime=0x1d62775, nFileSizeHigh=0x0, nFileSizeLow=0x16f87, dwReserved0=0x0, dwReserved1=0x0, cFileName="yORE_ur.gif", cAlternateFileName="")) returned 1 [0078.740] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.740] FindClose (in: hFindFile=0x7f0178 | out: hFindFile=0x7f0178) returned 1 [0078.740] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.741] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c04 | out: lpMode=0x10c89c04) returned 0 [0078.741] GetFileType (hFile=0x19c) returned 0x1 [0078.741] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0078.741] WriteFile (in: hFile=0x19c, lpBuffer=0x10cc2d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89bf4, lpOverlapped=0x10c89bf8 | out: lpBuffer=0x10cc2d80*, lpNumberOfBytesWritten=0x10c89bf4*=0x464, lpOverlapped=0x10c89bf8) returned 1 [0078.741] GetFileType (hFile=0x19c) returned 0x1 [0078.741] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0078.742] CloseHandle (hObject=0x19c) returned 1 [0078.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\6sE7MKeN28.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\6se7mken28.png"), fInfoLevelId=0x0, lpFileInformation=0x10cd2828 | out: lpFileInformation=0x10cd2828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa58e1be0, ftCreationTime.dwHighDateTime=0x1d623f2, ftLastAccessTime.dwLowDateTime=0x81d0abc0, ftLastAccessTime.dwHighDateTime=0x1d624c2, ftLastWriteTime.dwLowDateTime=0x81d0abc0, ftLastWriteTime.dwHighDateTime=0x1d624c2, nFileSizeHigh=0x0, nFileSizeLow=0xd6d9)) returned 1 [0078.742] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\6sE7MKeN28.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\6se7mken28.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.742] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.742] GetFileType (hFile=0x19c) returned 0x1 [0078.742] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.742] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e540 | out: pbBuffer=0x10c6e540) returned 1 [0078.742] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e550 | out: pbBuffer=0x10c6e550) returned 1 [0078.742] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed2e01 | out: pbBuffer=0x10ed2e01) returned 1 [0078.743] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed3001 | out: pbBuffer=0x10ed3001) returned 1 [0078.743] ReadFile (in: hFile=0x19c, lpBuffer=0x10e96000, nNumberOfBytesToRead=0xd6d9, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10e96000*, lpNumberOfBytesRead=0x10c89b28*=0xd6d9, lpOverlapped=0x0) returned 1 [0078.744] GetFileType (hFile=0x19c) returned 0x1 [0078.744] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.744] WriteFile (in: hFile=0x19c, lpBuffer=0x10ea4000*, nNumberOfBytesToWrite=0xd6d9, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ea4000*, lpNumberOfBytesWritten=0x10c89b28*=0xd6d9, lpOverlapped=0x10c89b2c) returned 1 [0078.745] GetFileType (hFile=0x19c) returned 0x1 [0078.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd6d9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.745] GetFileType (hFile=0x19c) returned 0x1 [0078.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.745] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed2f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed2f00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.745] GetFileType (hFile=0x19c) returned 0x1 [0078.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd6d9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.745] GetFileType (hFile=0x19c) returned 0x1 [0078.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.745] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed3100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed3100*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.745] GetFileType (hFile=0x19c) returned 0x1 [0078.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd6d9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.745] GetFileType (hFile=0x19c) returned 0x1 [0078.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.745] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.745] GetFileType (hFile=0x19c) returned 0x1 [0078.745] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd6d9, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.745] CloseHandle (hObject=0x19c) returned 1 [0078.746] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\6sE7MKeN28.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\6se7mken28.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\6sE7MKeN28.png.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\6se7mken28.png.trapget"), dwFlags=0x1) returned 1 [0078.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\JNcE4b8sjFrKDk06ftuI.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\jnce4b8sjfrkdk06ftui.png"), fInfoLevelId=0x0, lpFileInformation=0x10cd2968 | out: lpFileInformation=0x10cd2968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd3b960, ftCreationTime.dwHighDateTime=0x1d63246, ftLastAccessTime.dwLowDateTime=0x56a6d7d0, ftLastAccessTime.dwHighDateTime=0x1d62e04, ftLastWriteTime.dwLowDateTime=0x56a6d7d0, ftLastWriteTime.dwHighDateTime=0x1d62e04, nFileSizeHigh=0x0, nFileSizeLow=0x75a2)) returned 1 [0078.746] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\JNcE4b8sjFrKDk06ftuI.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\jnce4b8sjfrkdk06ftui.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.746] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.746] GetFileType (hFile=0x19c) returned 0x1 [0078.746] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.746] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e6a0 | out: pbBuffer=0x10c6e6a0) returned 1 [0078.746] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e6b0 | out: pbBuffer=0x10c6e6b0) returned 1 [0078.746] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed3201 | out: pbBuffer=0x10ed3201) returned 1 [0078.747] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed3401 | out: pbBuffer=0x10ed3401) returned 1 [0078.747] ReadFile (in: hFile=0x19c, lpBuffer=0x10eb2000, nNumberOfBytesToRead=0x75a2, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10eb2000*, lpNumberOfBytesRead=0x10c89b28*=0x75a2, lpOverlapped=0x0) returned 1 [0078.748] GetFileType (hFile=0x19c) returned 0x1 [0078.748] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.748] WriteFile (in: hFile=0x19c, lpBuffer=0x10eba000*, nNumberOfBytesToWrite=0x75a2, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10eba000*, lpNumberOfBytesWritten=0x10c89b28*=0x75a2, lpOverlapped=0x10c89b2c) returned 1 [0078.748] GetFileType (hFile=0x19c) returned 0x1 [0078.748] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x75a2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.748] GetFileType (hFile=0x19c) returned 0x1 [0078.748] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.748] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed3300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed3300*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.749] GetFileType (hFile=0x19c) returned 0x1 [0078.749] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x75a2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.749] GetFileType (hFile=0x19c) returned 0x1 [0078.749] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.749] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed3500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed3500*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.749] GetFileType (hFile=0x19c) returned 0x1 [0078.749] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x75a2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.749] GetFileType (hFile=0x19c) returned 0x1 [0078.749] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.749] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.749] GetFileType (hFile=0x19c) returned 0x1 [0078.749] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x75a2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.749] CloseHandle (hObject=0x19c) returned 1 [0078.749] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\JNcE4b8sjFrKDk06ftuI.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\jnce4b8sjfrkdk06ftui.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\JNcE4b8sjFrKDk06ftuI.png.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\jnce4b8sjfrkdk06ftui.png.trapget"), dwFlags=0x1) returned 1 [0078.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\aTSVOWFd.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\atsvowfd.png"), fInfoLevelId=0x0, lpFileInformation=0x10cd2aa8 | out: lpFileInformation=0x10cd2aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60896540, ftCreationTime.dwHighDateTime=0x1d62983, ftLastAccessTime.dwLowDateTime=0xdaa3f930, ftLastAccessTime.dwHighDateTime=0x1d628b1, ftLastWriteTime.dwLowDateTime=0xdaa3f930, ftLastWriteTime.dwHighDateTime=0x1d628b1, nFileSizeHigh=0x0, nFileSizeLow=0x4064)) returned 1 [0078.750] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\aTSVOWFd.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\atsvowfd.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.750] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.750] GetFileType (hFile=0x19c) returned 0x1 [0078.750] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.750] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e790 | out: pbBuffer=0x10c6e790) returned 1 [0078.750] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e7a0 | out: pbBuffer=0x10c6e7a0) returned 1 [0078.750] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed3601 | out: pbBuffer=0x10ed3601) returned 1 [0078.751] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed3801 | out: pbBuffer=0x10ed3801) returned 1 [0078.751] ReadFile (in: hFile=0x19c, lpBuffer=0x1103c000, nNumberOfBytesToRead=0x4064, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x1103c000*, lpNumberOfBytesRead=0x10c89b28*=0x4064, lpOverlapped=0x0) returned 1 [0078.752] GetFileType (hFile=0x19c) returned 0x1 [0078.752] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.752] WriteFile (in: hFile=0x19c, lpBuffer=0x11040800*, nNumberOfBytesToWrite=0x4064, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x11040800*, lpNumberOfBytesWritten=0x10c89b28*=0x4064, lpOverlapped=0x10c89b2c) returned 1 [0078.752] GetFileType (hFile=0x19c) returned 0x1 [0078.752] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4064, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.752] GetFileType (hFile=0x19c) returned 0x1 [0078.752] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.752] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed3700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed3700*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.752] GetFileType (hFile=0x19c) returned 0x1 [0078.752] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4064, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.752] GetFileType (hFile=0x19c) returned 0x1 [0078.752] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.752] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed3900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed3900*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.752] GetFileType (hFile=0x19c) returned 0x1 [0078.752] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4064, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.752] GetFileType (hFile=0x19c) returned 0x1 [0078.752] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.752] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.753] GetFileType (hFile=0x19c) returned 0x1 [0078.753] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4064, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.753] CloseHandle (hObject=0x19c) returned 1 [0078.753] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\aTSVOWFd.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\atsvowfd.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\aTSVOWFd.png.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\atsvowfd.png.trapget"), dwFlags=0x1) returned 1 [0078.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\cYt0wIm_Tv.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\cyt0wim_tv.png"), fInfoLevelId=0x0, lpFileInformation=0x10cd2be8 | out: lpFileInformation=0x10cd2be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1b0250, ftCreationTime.dwHighDateTime=0x1d62838, ftLastAccessTime.dwLowDateTime=0x252fce30, ftLastAccessTime.dwHighDateTime=0x1d6322f, ftLastWriteTime.dwLowDateTime=0x252fce30, ftLastWriteTime.dwHighDateTime=0x1d6322f, nFileSizeHigh=0x0, nFileSizeLow=0x6d97)) returned 1 [0078.753] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\cYt0wIm_Tv.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\cyt0wim_tv.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.753] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.753] GetFileType (hFile=0x19c) returned 0x1 [0078.753] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.753] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e870 | out: pbBuffer=0x10c6e870) returned 1 [0078.754] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e880 | out: pbBuffer=0x10c6e880) returned 1 [0078.754] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed3c01 | out: pbBuffer=0x10ed3c01) returned 1 [0078.754] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ed3f01 | out: pbBuffer=0x10ed3f01) returned 1 [0078.754] ReadFile (in: hFile=0x19c, lpBuffer=0x1104e000, nNumberOfBytesToRead=0x6d97, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x1104e000*, lpNumberOfBytesRead=0x10c89b28*=0x6d97, lpOverlapped=0x0) returned 1 [0078.755] GetFileType (hFile=0x19c) returned 0x1 [0078.755] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.755] WriteFile (in: hFile=0x19c, lpBuffer=0x11055000*, nNumberOfBytesToWrite=0x6d97, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x11055000*, lpNumberOfBytesWritten=0x10c89b28*=0x6d97, lpOverlapped=0x10c89b2c) returned 1 [0078.755] GetFileType (hFile=0x19c) returned 0x1 [0078.755] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6d97, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.755] GetFileType (hFile=0x19c) returned 0x1 [0078.755] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.756] WriteFile (in: hFile=0x19c, lpBuffer=0x10ed3e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ed3e00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.756] GetFileType (hFile=0x19c) returned 0x1 [0078.756] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6d97, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.756] GetFileType (hFile=0x19c) returned 0x1 [0078.756] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.756] WriteFile (in: hFile=0x19c, lpBuffer=0x10ece000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ece000*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.756] GetFileType (hFile=0x19c) returned 0x1 [0078.756] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6d97, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.756] GetFileType (hFile=0x19c) returned 0x1 [0078.756] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.756] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.756] GetFileType (hFile=0x19c) returned 0x1 [0078.756] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x6d97, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.756] CloseHandle (hObject=0x19c) returned 1 [0078.756] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\cYt0wIm_Tv.png" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\cyt0wim_tv.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\cYt0wIm_Tv.png.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\cyt0wim_tv.png.trapget"), dwFlags=0x1) returned 1 [0078.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\lB5aqcOAkY.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\lb5aqcoaky.jpg"), fInfoLevelId=0x0, lpFileInformation=0x10cd2d78 | out: lpFileInformation=0x10cd2d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd72aab10, ftCreationTime.dwHighDateTime=0x1d6312f, ftLastAccessTime.dwLowDateTime=0xb5b302e0, ftLastAccessTime.dwHighDateTime=0x1d63218, ftLastWriteTime.dwLowDateTime=0xb5b302e0, ftLastWriteTime.dwHighDateTime=0x1d63218, nFileSizeHigh=0x0, nFileSizeLow=0xde04)) returned 1 [0078.757] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\lB5aqcOAkY.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\lb5aqcoaky.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.757] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.757] GetFileType (hFile=0x19c) returned 0x1 [0078.757] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.757] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e960 | out: pbBuffer=0x10c6e960) returned 1 [0078.757] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6e970 | out: pbBuffer=0x10c6e970) returned 1 [0078.757] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ece101 | out: pbBuffer=0x10ece101) returned 1 [0078.757] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ece301 | out: pbBuffer=0x10ece301) returned 1 [0078.758] ReadFile (in: hFile=0x19c, lpBuffer=0x11062000, nNumberOfBytesToRead=0xde04, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x11062000*, lpNumberOfBytesRead=0x10c89b28*=0xde04, lpOverlapped=0x0) returned 1 [0078.759] GetFileType (hFile=0x19c) returned 0x1 [0078.759] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.759] WriteFile (in: hFile=0x19c, lpBuffer=0x11070000*, nNumberOfBytesToWrite=0xde04, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x11070000*, lpNumberOfBytesWritten=0x10c89b28*=0xde04, lpOverlapped=0x10c89b2c) returned 1 [0078.759] GetFileType (hFile=0x19c) returned 0x1 [0078.759] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xde04, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.759] GetFileType (hFile=0x19c) returned 0x1 [0078.759] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.759] WriteFile (in: hFile=0x19c, lpBuffer=0x10ece200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ece200*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.760] GetFileType (hFile=0x19c) returned 0x1 [0078.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xde04, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.760] GetFileType (hFile=0x19c) returned 0x1 [0078.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.760] WriteFile (in: hFile=0x19c, lpBuffer=0x10ece400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ece400*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.760] GetFileType (hFile=0x19c) returned 0x1 [0078.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xde04, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.760] GetFileType (hFile=0x19c) returned 0x1 [0078.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.760] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.760] GetFileType (hFile=0x19c) returned 0x1 [0078.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xde04, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.760] CloseHandle (hObject=0x19c) returned 1 [0078.760] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\lB5aqcOAkY.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\lb5aqcoaky.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\lB5aqcOAkY.jpg.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\lb5aqcoaky.jpg.trapget"), dwFlags=0x1) returned 1 [0078.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\yORE_ur.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\yore_ur.gif"), fInfoLevelId=0x0, lpFileInformation=0x10cd2eb8 | out: lpFileInformation=0x10cd2eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a50190, ftCreationTime.dwHighDateTime=0x1d627b1, ftLastAccessTime.dwLowDateTime=0x8e9ab9d0, ftLastAccessTime.dwHighDateTime=0x1d62775, ftLastWriteTime.dwLowDateTime=0x8e9ab9d0, ftLastWriteTime.dwHighDateTime=0x1d62775, nFileSizeHigh=0x0, nFileSizeLow=0x16f87)) returned 1 [0078.761] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\yORE_ur.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\yore_ur.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.761] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.792] GetFileType (hFile=0x19c) returned 0x1 [0078.792] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.792] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea50 | out: pbBuffer=0x10c6ea50) returned 1 [0078.792] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ea60 | out: pbBuffer=0x10c6ea60) returned 1 [0078.793] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ece501 | out: pbBuffer=0x10ece501) returned 1 [0078.793] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ece701 | out: pbBuffer=0x10ece701) returned 1 [0078.804] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x16f87, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89b28*=0x16f87, lpOverlapped=0x0) returned 1 [0078.806] GetFileType (hFile=0x19c) returned 0x1 [0078.806] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.806] WriteFile (in: hFile=0x19c, lpBuffer=0x10d14000*, nNumberOfBytesToWrite=0x16f87, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10d14000*, lpNumberOfBytesWritten=0x10c89b28*=0x16f87, lpOverlapped=0x10c89b2c) returned 1 [0078.806] GetFileType (hFile=0x19c) returned 0x1 [0078.806] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16f87, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.806] GetFileType (hFile=0x19c) returned 0x1 [0078.806] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.807] WriteFile (in: hFile=0x19c, lpBuffer=0x10ece600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ece600*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.807] GetFileType (hFile=0x19c) returned 0x1 [0078.807] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16f87, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.807] GetFileType (hFile=0x19c) returned 0x1 [0078.807] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.807] WriteFile (in: hFile=0x19c, lpBuffer=0x10ece800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ece800*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0078.807] GetFileType (hFile=0x19c) returned 0x1 [0078.807] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16f87, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.807] GetFileType (hFile=0x19c) returned 0x1 [0078.807] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.807] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0078.807] GetFileType (hFile=0x19c) returned 0x1 [0078.807] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16f87, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0078.807] CloseHandle (hObject=0x19c) returned 1 [0078.807] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\yORE_ur.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\yore_ur.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\a1sHh\\yORE_ur.gif.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\a1shh\\yore_ur.gif.trapget"), dwFlags=0x1) returned 1 [0078.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\hjBimdtLHoobn_.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\hjbimdtlhoobn_.bmp"), fInfoLevelId=0x0, lpFileInformation=0x10cd2ff8 | out: lpFileInformation=0x10cd2ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x613e40, ftCreationTime.dwHighDateTime=0x1d625f0, ftLastAccessTime.dwLowDateTime=0xa2034c00, ftLastAccessTime.dwHighDateTime=0x1d62917, ftLastWriteTime.dwLowDateTime=0xa2034c00, ftLastWriteTime.dwHighDateTime=0x1d62917, nFileSizeHigh=0x0, nFileSizeLow=0x13b2d)) returned 1 [0078.808] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\hjBimdtLHoobn_.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\hjbimdtlhoobn_.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.808] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0078.808] GetFileType (hFile=0x19c) returned 0x1 [0078.808] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0078.808] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eb40 | out: pbBuffer=0x10c6eb40) returned 1 [0078.808] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eb50 | out: pbBuffer=0x10c6eb50) returned 1 [0078.809] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ecea01 | out: pbBuffer=0x10ecea01) returned 1 [0078.809] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ecec01 | out: pbBuffer=0x10ecec01) returned 1 [0078.817] ReadFile (in: hFile=0x19c, lpBuffer=0x10f8e000, nNumberOfBytesToRead=0x13b2d, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10f8e000*, lpNumberOfBytesRead=0x10c89b8c*=0x13b2d, lpOverlapped=0x0) returned 1 [0078.819] GetFileType (hFile=0x19c) returned 0x1 [0078.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.819] WriteFile (in: hFile=0x19c, lpBuffer=0x10fa2000*, nNumberOfBytesToWrite=0x13b2d, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10fa2000*, lpNumberOfBytesWritten=0x10c89b8c*=0x13b2d, lpOverlapped=0x10c89b90) returned 1 [0078.819] GetFileType (hFile=0x19c) returned 0x1 [0078.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13b2d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.819] GetFileType (hFile=0x19c) returned 0x1 [0078.819] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.819] WriteFile (in: hFile=0x19c, lpBuffer=0x10eceb00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10eceb00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.820] GetFileType (hFile=0x19c) returned 0x1 [0078.820] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13b2d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.820] GetFileType (hFile=0x19c) returned 0x1 [0078.820] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.820] WriteFile (in: hFile=0x19c, lpBuffer=0x10eced00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10eced00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.820] GetFileType (hFile=0x19c) returned 0x1 [0078.820] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13b2d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.820] GetFileType (hFile=0x19c) returned 0x1 [0078.820] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.820] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0078.820] GetFileType (hFile=0x19c) returned 0x1 [0078.820] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13b2d, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.820] CloseHandle (hObject=0x19c) returned 1 [0078.821] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\hjBimdtLHoobn_.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\hjbimdtlhoobn_.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\79fS2LqKdTo\\hjBimdtLHoobn_.bmp.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\79fs2lqkdto\\hjbimdtlhoobn_.bmp.trapget"), dwFlags=0x1) returned 1 [0078.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll" (normalized: "c:\\users\\fd1hvy\\pictures\\camera roll"), fInfoLevelId=0x0, lpFileInformation=0x10cd3138 | out: lpFileInformation=0x10cd3138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.826] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll" (normalized: "c:\\users\\fd1hvy\\pictures\\camera roll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.826] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0238 [0078.827] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.827] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0078.827] FindNextFileW (in: hFindFile=0x7f0238, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.827] FindClose (in: hFindFile=0x7f0238 | out: hFindFile=0x7f0238) returned 1 [0078.827] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\camera roll\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.827] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0078.827] GetFileType (hFile=0x19c) returned 0x1 [0078.827] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0078.827] WriteFile (in: hFile=0x19c, lpBuffer=0x10cc3680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10cc3680*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0078.828] GetFileType (hFile=0x19c) returned 0x1 [0078.828] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0078.828] CloseHandle (hObject=0x19c) returned 1 [0078.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\pictures\\camera roll\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd31d8 | out: lpFileInformation=0x10cd31d8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0078.830] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\pictures\\camera roll\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.831] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0078.831] GetFileType (hFile=0x19c) returned 0x1 [0078.831] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0078.831] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ec80 | out: pbBuffer=0x10c6ec80) returned 1 [0078.831] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ec90 | out: pbBuffer=0x10c6ec90) returned 1 [0078.831] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ecf001 | out: pbBuffer=0x10ecf001) returned 1 [0078.831] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ecf201 | out: pbBuffer=0x10ecf201) returned 1 [0078.832] ReadFile (in: hFile=0x19c, lpBuffer=0x10ca8540, nNumberOfBytesToRead=0xbe, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10ca8540*, lpNumberOfBytesRead=0x10c89b8c*=0xbe, lpOverlapped=0x0) returned 1 [0078.832] GetFileType (hFile=0x19c) returned 0x1 [0078.832] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.832] WriteFile (in: hFile=0x19c, lpBuffer=0x10ca8600*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ca8600*, lpNumberOfBytesWritten=0x10c89b8c*=0xbe, lpOverlapped=0x10c89b90) returned 1 [0078.833] GetFileType (hFile=0x19c) returned 0x1 [0078.833] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.833] GetFileType (hFile=0x19c) returned 0x1 [0078.833] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.833] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecf100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ecf100*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.833] GetFileType (hFile=0x19c) returned 0x1 [0078.833] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.833] GetFileType (hFile=0x19c) returned 0x1 [0078.833] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.833] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecf300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ecf300*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.833] GetFileType (hFile=0x19c) returned 0x1 [0078.833] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.833] GetFileType (hFile=0x19c) returned 0x1 [0078.833] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.833] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0078.833] GetFileType (hFile=0x19c) returned 0x1 [0078.833] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.833] CloseHandle (hObject=0x19c) returned 1 [0078.834] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\pictures\\camera roll\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\camera roll\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0078.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\EwscMVRyCxlb.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ewscmvrycxlb.bmp"), fInfoLevelId=0x0, lpFileInformation=0x10cd3318 | out: lpFileInformation=0x10cd3318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d2e40, ftCreationTime.dwHighDateTime=0x1d62e0a, ftLastAccessTime.dwLowDateTime=0xc4454af0, ftLastAccessTime.dwHighDateTime=0x1d62e82, ftLastWriteTime.dwLowDateTime=0xc4454af0, ftLastWriteTime.dwHighDateTime=0x1d62e82, nFileSizeHigh=0x0, nFileSizeLow=0x114a0)) returned 1 [0078.894] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\EwscMVRyCxlb.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ewscmvrycxlb.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.894] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0078.895] GetFileType (hFile=0x19c) returned 0x1 [0078.895] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0078.895] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed60 | out: pbBuffer=0x10c6ed60) returned 1 [0078.895] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ed70 | out: pbBuffer=0x10c6ed70) returned 1 [0078.895] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ecf401 | out: pbBuffer=0x10ecf401) returned 1 [0078.895] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ecf601 | out: pbBuffer=0x10ecf601) returned 1 [0078.895] ReadFile (in: hFile=0x19c, lpBuffer=0x10fba000, nNumberOfBytesToRead=0x114a0, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fba000*, lpNumberOfBytesRead=0x10c89bf0*=0x114a0, lpOverlapped=0x0) returned 1 [0078.897] GetFileType (hFile=0x19c) returned 0x1 [0078.897] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.897] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcc000*, nNumberOfBytesToWrite=0x114a0, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fcc000*, lpNumberOfBytesWritten=0x10c89bf0*=0x114a0, lpOverlapped=0x10c89bf4) returned 1 [0078.897] GetFileType (hFile=0x19c) returned 0x1 [0078.897] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x114a0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.897] GetFileType (hFile=0x19c) returned 0x1 [0078.897] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.897] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecf500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ecf500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0078.897] GetFileType (hFile=0x19c) returned 0x1 [0078.897] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x114a0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.898] GetFileType (hFile=0x19c) returned 0x1 [0078.898] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.898] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecf700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ecf700*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0078.898] GetFileType (hFile=0x19c) returned 0x1 [0078.898] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x114a0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.898] GetFileType (hFile=0x19c) returned 0x1 [0078.898] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.898] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0078.898] GetFileType (hFile=0x19c) returned 0x1 [0078.898] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x114a0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.898] CloseHandle (hObject=0x19c) returned 1 [0078.898] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\EwscMVRyCxlb.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ewscmvrycxlb.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\EwscMVRyCxlb.bmp.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\ewscmvrycxlb.bmp.trapget"), dwFlags=0x1) returned 1 [0078.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Nh-2wAT U.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\nh-2wat u.gif"), fInfoLevelId=0x0, lpFileInformation=0x10cd3458 | out: lpFileInformation=0x10cd3458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x860e6210, ftCreationTime.dwHighDateTime=0x1d62dad, ftLastAccessTime.dwLowDateTime=0x179bcf80, ftLastAccessTime.dwHighDateTime=0x1d62a91, ftLastWriteTime.dwLowDateTime=0x179bcf80, ftLastWriteTime.dwHighDateTime=0x1d62a91, nFileSizeHigh=0x0, nFileSizeLow=0x2ca4)) returned 1 [0078.899] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Nh-2wAT U.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\nh-2wat u.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.899] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0078.899] GetFileType (hFile=0x19c) returned 0x1 [0078.899] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0078.899] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee50 | out: pbBuffer=0x10c6ee50) returned 1 [0078.899] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ee60 | out: pbBuffer=0x10c6ee60) returned 1 [0078.899] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ecf801 | out: pbBuffer=0x10ecf801) returned 1 [0078.899] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ecfa01 | out: pbBuffer=0x10ecfa01) returned 1 [0078.900] ReadFile (in: hFile=0x19c, lpBuffer=0x10fea000, nNumberOfBytesToRead=0x2ca4, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fea000*, lpNumberOfBytesRead=0x10c89bf0*=0x2ca4, lpOverlapped=0x0) returned 1 [0078.900] GetFileType (hFile=0x19c) returned 0x1 [0078.901] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.901] WriteFile (in: hFile=0x19c, lpBuffer=0x10fed000*, nNumberOfBytesToWrite=0x2ca4, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fed000*, lpNumberOfBytesWritten=0x10c89bf0*=0x2ca4, lpOverlapped=0x10c89bf4) returned 1 [0078.901] GetFileType (hFile=0x19c) returned 0x1 [0078.901] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2ca4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.901] GetFileType (hFile=0x19c) returned 0x1 [0078.901] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.901] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecf900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ecf900*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0078.901] GetFileType (hFile=0x19c) returned 0x1 [0078.901] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2ca4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.901] GetFileType (hFile=0x19c) returned 0x1 [0078.901] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.901] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecfb00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ecfb00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0078.901] GetFileType (hFile=0x19c) returned 0x1 [0078.901] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2ca4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.901] GetFileType (hFile=0x19c) returned 0x1 [0078.901] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.901] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0078.901] GetFileType (hFile=0x19c) returned 0x1 [0078.901] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2ca4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.902] CloseHandle (hObject=0x19c) returned 1 [0078.902] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\Nh-2wAT U.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\nh-2wat u.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\Nh-2wAT U.gif.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\nh-2wat u.gif.trapget"), dwFlags=0x1) returned 1 [0078.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures" (normalized: "c:\\users\\fd1hvy\\pictures\\saved pictures"), fInfoLevelId=0x0, lpFileInformation=0x10cd3598 | out: lpFileInformation=0x10cd3598*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.902] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures" (normalized: "c:\\users\\fd1hvy\\pictures\\saved pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.902] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f00b8 [0078.902] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.902] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0078.902] FindNextFileW (in: hFindFile=0x7f00b8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.902] FindClose (in: hFindFile=0x7f00b8 | out: hFindFile=0x7f00b8) returned 1 [0078.903] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\saved pictures\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.920] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0078.920] GetFileType (hFile=0x19c) returned 0x1 [0078.920] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0078.921] WriteFile (in: hFile=0x19c, lpBuffer=0x10ff4000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10ff4000*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0078.921] GetFileType (hFile=0x19c) returned 0x1 [0078.921] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0078.921] CloseHandle (hObject=0x19c) returned 1 [0078.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\pictures\\saved pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd3638 | out: lpFileInformation=0x10cd3638*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0078.922] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\pictures\\saved pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.922] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0078.922] GetFileType (hFile=0x19c) returned 0x1 [0078.922] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0078.922] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6efe0 | out: pbBuffer=0x10c6efe0) returned 1 [0078.922] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6eff0 | out: pbBuffer=0x10c6eff0) returned 1 [0078.922] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ecfd01 | out: pbBuffer=0x10ecfd01) returned 1 [0078.922] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ecff01 | out: pbBuffer=0x10ecff01) returned 1 [0078.923] ReadFile (in: hFile=0x19c, lpBuffer=0x10ca8780, nNumberOfBytesToRead=0xbe, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10ca8780*, lpNumberOfBytesRead=0x10c89b8c*=0xbe, lpOverlapped=0x0) returned 1 [0078.923] GetFileType (hFile=0x19c) returned 0x1 [0078.923] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.923] WriteFile (in: hFile=0x19c, lpBuffer=0x10ca8840*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ca8840*, lpNumberOfBytesWritten=0x10c89b8c*=0xbe, lpOverlapped=0x10c89b90) returned 1 [0078.924] GetFileType (hFile=0x19c) returned 0x1 [0078.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.924] GetFileType (hFile=0x19c) returned 0x1 [0078.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.924] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecfe00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ecfe00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.924] GetFileType (hFile=0x19c) returned 0x1 [0078.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.924] GetFileType (hFile=0x19c) returned 0x1 [0078.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.924] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1c000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e1c000*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.924] GetFileType (hFile=0x19c) returned 0x1 [0078.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.924] GetFileType (hFile=0x19c) returned 0x1 [0078.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.924] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0078.924] GetFileType (hFile=0x19c) returned 0x1 [0078.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xbe, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.924] CloseHandle (hObject=0x19c) returned 1 [0078.924] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\pictures\\saved pictures\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\saved pictures\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0078.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\WfLuB.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\wflub.gif"), fInfoLevelId=0x0, lpFileInformation=0x10cd3778 | out: lpFileInformation=0x10cd3778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d940de0, ftCreationTime.dwHighDateTime=0x1d62723, ftLastAccessTime.dwLowDateTime=0x4e02e250, ftLastAccessTime.dwHighDateTime=0x1d62386, ftLastWriteTime.dwLowDateTime=0x4e02e250, ftLastWriteTime.dwHighDateTime=0x1d62386, nFileSizeHigh=0x0, nFileSizeLow=0x826a)) returned 1 [0078.936] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\WfLuB.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\wflub.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.936] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0078.936] GetFileType (hFile=0x19c) returned 0x1 [0078.936] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0078.936] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f0d0 | out: pbBuffer=0x10c6f0d0) returned 1 [0078.936] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f0e0 | out: pbBuffer=0x10c6f0e0) returned 1 [0078.936] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1c101 | out: pbBuffer=0x10e1c101) returned 1 [0078.937] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1c301 | out: pbBuffer=0x10e1c301) returned 1 [0078.937] ReadFile (in: hFile=0x19c, lpBuffer=0x10e24000, nNumberOfBytesToRead=0x826a, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10e24000*, lpNumberOfBytesRead=0x10c89bf0*=0x826a, lpOverlapped=0x0) returned 1 [0078.938] GetFileType (hFile=0x19c) returned 0x1 [0078.938] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.938] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2e000*, nNumberOfBytesToWrite=0x826a, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e2e000*, lpNumberOfBytesWritten=0x10c89bf0*=0x826a, lpOverlapped=0x10c89bf4) returned 1 [0078.938] GetFileType (hFile=0x19c) returned 0x1 [0078.938] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x826a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.938] GetFileType (hFile=0x19c) returned 0x1 [0078.938] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.938] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1c200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1c200*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0078.938] GetFileType (hFile=0x19c) returned 0x1 [0078.938] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x826a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.939] GetFileType (hFile=0x19c) returned 0x1 [0078.939] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.939] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1c400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1c400*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0078.939] GetFileType (hFile=0x19c) returned 0x1 [0078.939] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x826a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.939] GetFileType (hFile=0x19c) returned 0x1 [0078.939] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.939] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0078.939] GetFileType (hFile=0x19c) returned 0x1 [0078.939] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x826a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.939] CloseHandle (hObject=0x19c) returned 1 [0078.939] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\WfLuB.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\wflub.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\WfLuB.gif.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\wflub.gif.trapget"), dwFlags=0x1) returned 1 [0078.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd38b8 | out: lpFileInformation=0x10cd38b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0078.940] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.940] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0078.940] GetFileType (hFile=0x19c) returned 0x1 [0078.940] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0078.940] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f200 | out: pbBuffer=0x10c6f200) returned 1 [0078.940] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f210 | out: pbBuffer=0x10c6f210) returned 1 [0078.940] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1c501 | out: pbBuffer=0x10e1c501) returned 1 [0078.940] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1c701 | out: pbBuffer=0x10e1c701) returned 1 [0078.941] ReadFile (in: hFile=0x19c, lpBuffer=0x10e40800, nNumberOfBytesToRead=0x1f8, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10e40800*, lpNumberOfBytesRead=0x10c89bf0*=0x1f8, lpOverlapped=0x0) returned 1 [0078.941] GetFileType (hFile=0x19c) returned 0x1 [0078.941] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.941] WriteFile (in: hFile=0x19c, lpBuffer=0x10e40a00*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e40a00*, lpNumberOfBytesWritten=0x10c89bf0*=0x1f8, lpOverlapped=0x10c89bf4) returned 1 [0078.941] GetFileType (hFile=0x19c) returned 0x1 [0078.941] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.941] GetFileType (hFile=0x19c) returned 0x1 [0078.941] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.942] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1c600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1c600*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0078.967] GetFileType (hFile=0x19c) returned 0x1 [0078.967] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.968] GetFileType (hFile=0x19c) returned 0x1 [0078.968] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.968] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1c800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1c800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0078.968] GetFileType (hFile=0x19c) returned 0x1 [0078.968] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.968] GetFileType (hFile=0x19c) returned 0x1 [0078.968] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.968] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0078.968] GetFileType (hFile=0x19c) returned 0x1 [0078.968] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.968] CloseHandle (hObject=0x19c) returned 1 [0078.968] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0078.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\eUZvnV8pxop_afrjmM.png" (normalized: "c:\\users\\fd1hvy\\pictures\\euzvnv8pxop_afrjmm.png"), fInfoLevelId=0x0, lpFileInformation=0x10cd39f8 | out: lpFileInformation=0x10cd39f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56aff9a0, ftCreationTime.dwHighDateTime=0x1d62b11, ftLastAccessTime.dwLowDateTime=0xfb64f670, ftLastAccessTime.dwHighDateTime=0x1d62716, ftLastWriteTime.dwLowDateTime=0xfb64f670, ftLastWriteTime.dwHighDateTime=0x1d62716, nFileSizeHigh=0x0, nFileSizeLow=0x9499)) returned 1 [0078.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\eUZvnV8pxop_afrjmM.png" (normalized: "c:\\users\\fd1hvy\\pictures\\euzvnv8pxop_afrjmm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.973] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0078.973] GetFileType (hFile=0x19c) returned 0x1 [0078.973] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0078.973] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f2e0 | out: pbBuffer=0x10c6f2e0) returned 1 [0078.973] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f2f0 | out: pbBuffer=0x10c6f2f0) returned 1 [0078.973] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1c901 | out: pbBuffer=0x10e1c901) returned 1 [0078.974] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1cb01 | out: pbBuffer=0x10e1cb01) returned 1 [0078.974] ReadFile (in: hFile=0x19c, lpBuffer=0x10e4c000, nNumberOfBytesToRead=0x9499, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10e4c000*, lpNumberOfBytesRead=0x10c89bf0*=0x9499, lpOverlapped=0x0) returned 1 [0078.975] GetFileType (hFile=0x19c) returned 0x1 [0078.975] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.975] WriteFile (in: hFile=0x19c, lpBuffer=0x10e56000*, nNumberOfBytesToWrite=0x9499, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e56000*, lpNumberOfBytesWritten=0x10c89bf0*=0x9499, lpOverlapped=0x10c89bf4) returned 1 [0078.975] GetFileType (hFile=0x19c) returned 0x1 [0078.975] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9499, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.975] GetFileType (hFile=0x19c) returned 0x1 [0078.975] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.975] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1ca00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1ca00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0078.976] GetFileType (hFile=0x19c) returned 0x1 [0078.976] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9499, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.976] GetFileType (hFile=0x19c) returned 0x1 [0078.976] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.976] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1cc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e1cc00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0078.976] GetFileType (hFile=0x19c) returned 0x1 [0078.976] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9499, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.976] GetFileType (hFile=0x19c) returned 0x1 [0078.976] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.976] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0078.976] GetFileType (hFile=0x19c) returned 0x1 [0078.976] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x9499, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0078.976] CloseHandle (hObject=0x19c) returned 1 [0078.976] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\eUZvnV8pxop_afrjmM.png" (normalized: "c:\\users\\fd1hvy\\pictures\\euzvnv8pxop_afrjmm.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\eUZvnV8pxop_afrjmM.png.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\euzvnv8pxop_afrjmm.png.trapget"), dwFlags=0x1) returned 1 [0078.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5"), fInfoLevelId=0x0, lpFileInformation=0x10cd3b38 | out: lpFileInformation=0x10cd3b38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3b599c50, ftCreationTime.dwHighDateTime=0x1d62e78, ftLastAccessTime.dwLowDateTime=0x2a9ac5a0, ftLastAccessTime.dwHighDateTime=0x1d62f00, ftLastWriteTime.dwLowDateTime=0x2a9ac5a0, ftLastWriteTime.dwHighDateTime=0x1d62f00, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0078.977] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.977] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3b599c50, ftCreationTime.dwHighDateTime=0x1d62e78, ftLastAccessTime.dwLowDateTime=0x2a9ac5a0, ftLastAccessTime.dwHighDateTime=0x1d62f00, ftLastWriteTime.dwLowDateTime=0x2a9ac5a0, ftLastWriteTime.dwHighDateTime=0x1d62f00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0178 [0078.977] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3b599c50, ftCreationTime.dwHighDateTime=0x1d62e78, ftLastAccessTime.dwLowDateTime=0x2a9ac5a0, ftLastAccessTime.dwHighDateTime=0x1d62f00, ftLastWriteTime.dwLowDateTime=0x2a9ac5a0, ftLastWriteTime.dwHighDateTime=0x1d62f00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.977] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79992860, ftCreationTime.dwHighDateTime=0x1d62d37, ftLastAccessTime.dwLowDateTime=0x1753f190, ftLastAccessTime.dwHighDateTime=0x1d630a6, ftLastWriteTime.dwLowDateTime=0x1753f190, ftLastWriteTime.dwHighDateTime=0x1d630a6, nFileSizeHigh=0x0, nFileSizeLow=0x124bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0bpKl1f.png", cAlternateFileName="")) returned 1 [0078.977] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0116f80, ftCreationTime.dwHighDateTime=0x1d625fb, ftLastAccessTime.dwLowDateTime=0x9e660ef0, ftLastAccessTime.dwHighDateTime=0x1d63305, ftLastWriteTime.dwLowDateTime=0x9e660ef0, ftLastWriteTime.dwHighDateTime=0x1d63305, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRvXjMNzYuh6Bmrn", cAlternateFileName="FRVXJM~1")) returned 1 [0078.977] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe733d940, ftCreationTime.dwHighDateTime=0x1d6309a, ftLastAccessTime.dwLowDateTime=0xbdcaf870, ftLastAccessTime.dwHighDateTime=0x1d62f16, ftLastWriteTime.dwLowDateTime=0xbdcaf870, ftLastWriteTime.dwHighDateTime=0x1d62f16, nFileSizeHigh=0x0, nFileSizeLow=0x3b21, dwReserved0=0x0, dwReserved1=0x0, cFileName="mtz4W8C.jpg", cAlternateFileName="")) returned 1 [0078.977] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9f58770, ftCreationTime.dwHighDateTime=0x1d62d0f, ftLastAccessTime.dwLowDateTime=0xef3fe970, ftLastAccessTime.dwHighDateTime=0x1d6276d, ftLastWriteTime.dwLowDateTime=0xef3fe970, ftLastWriteTime.dwHighDateTime=0x1d6276d, nFileSizeHigh=0x0, nFileSizeLow=0xeba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pizC6jgvRtSezP_nqs.bmp", cAlternateFileName="PIZC6J~1.BMP")) returned 1 [0078.977] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49baff10, ftCreationTime.dwHighDateTime=0x1d6281e, ftLastAccessTime.dwLowDateTime=0xce2149e0, ftLastAccessTime.dwHighDateTime=0x1d6316e, ftLastWriteTime.dwLowDateTime=0xce2149e0, ftLastWriteTime.dwHighDateTime=0x1d6316e, nFileSizeHigh=0x0, nFileSizeLow=0x19c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="s5IoxOYxtEuV3.png", cAlternateFileName="S5IOXO~1.PNG")) returned 1 [0078.977] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.977] FindClose (in: hFindFile=0x7f0178 | out: hFindFile=0x7f0178) returned 1 [0078.977] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.978] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0078.978] GetFileType (hFile=0x19c) returned 0x1 [0078.978] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0078.978] WriteFile (in: hFile=0x19c, lpBuffer=0x10ff4900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10ff4900*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0078.978] GetFileType (hFile=0x19c) returned 0x1 [0078.978] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0078.978] CloseHandle (hObject=0x19c) returned 1 [0078.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\0bpKl1f.png" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\0bpkl1f.png"), fInfoLevelId=0x0, lpFileInformation=0x10cd3d18 | out: lpFileInformation=0x10cd3d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79992860, ftCreationTime.dwHighDateTime=0x1d62d37, ftLastAccessTime.dwLowDateTime=0x1753f190, ftLastAccessTime.dwHighDateTime=0x1d630a6, ftLastWriteTime.dwLowDateTime=0x1753f190, ftLastWriteTime.dwHighDateTime=0x1d630a6, nFileSizeHigh=0x0, nFileSizeLow=0x124bd)) returned 1 [0078.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\0bpKl1f.png" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\0bpkl1f.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.979] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0078.979] GetFileType (hFile=0x19c) returned 0x1 [0078.979] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0078.979] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f440 | out: pbBuffer=0x10c6f440) returned 1 [0078.979] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f450 | out: pbBuffer=0x10c6f450) returned 1 [0078.980] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1cd01 | out: pbBuffer=0x10e1cd01) returned 1 [0078.984] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1cf01 | out: pbBuffer=0x10e1cf01) returned 1 [0078.984] ReadFile (in: hFile=0x19c, lpBuffer=0x10e6a000, nNumberOfBytesToRead=0x124bd, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10e6a000*, lpNumberOfBytesRead=0x10c89b8c*=0x124bd, lpOverlapped=0x0) returned 1 [0078.986] GetFileType (hFile=0x19c) returned 0x1 [0078.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.986] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7e000*, nNumberOfBytesToWrite=0x124bd, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e7e000*, lpNumberOfBytesWritten=0x10c89b8c*=0x124bd, lpOverlapped=0x10c89b90) returned 1 [0078.986] GetFileType (hFile=0x19c) returned 0x1 [0078.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x124bd, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.986] GetFileType (hFile=0x19c) returned 0x1 [0078.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.986] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1ce00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e1ce00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.986] GetFileType (hFile=0x19c) returned 0x1 [0078.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x124bd, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.986] GetFileType (hFile=0x19c) returned 0x1 [0078.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.986] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1d000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e1d000*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0078.986] GetFileType (hFile=0x19c) returned 0x1 [0078.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x124bd, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.986] GetFileType (hFile=0x19c) returned 0x1 [0078.986] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.987] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0078.987] GetFileType (hFile=0x19c) returned 0x1 [0078.987] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x124bd, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0078.987] CloseHandle (hObject=0x19c) returned 1 [0078.987] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\0bpKl1f.png" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\0bpkl1f.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\0bpKl1f.png.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\0bpkl1f.png.trapget"), dwFlags=0x1) returned 1 [0078.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\FRvXjMNzYuh6Bmrn" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\frvxjmnzyuh6bmrn"), fInfoLevelId=0x0, lpFileInformation=0x10cd3e58 | out: lpFileInformation=0x10cd3e58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0116f80, ftCreationTime.dwHighDateTime=0x1d625fb, ftLastAccessTime.dwLowDateTime=0x9e660ef0, ftLastAccessTime.dwHighDateTime=0x1d63305, ftLastWriteTime.dwLowDateTime=0x9e660ef0, ftLastWriteTime.dwHighDateTime=0x1d63305, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\FRvXjMNzYuh6Bmrn" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\frvxjmnzyuh6bmrn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0078.988] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\FRvXjMNzYuh6Bmrn\\*", lpFindFileData=0x10c899a0 | out: lpFindFileData=0x10c899a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0116f80, ftCreationTime.dwHighDateTime=0x1d625fb, ftLastAccessTime.dwLowDateTime=0x9e660ef0, ftLastAccessTime.dwHighDateTime=0x1d63305, ftLastWriteTime.dwLowDateTime=0x9e660ef0, ftLastWriteTime.dwHighDateTime=0x1d63305, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0378 [0078.988] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0116f80, ftCreationTime.dwHighDateTime=0x1d625fb, ftLastAccessTime.dwLowDateTime=0x9e660ef0, ftLastAccessTime.dwHighDateTime=0x1d63305, ftLastWriteTime.dwLowDateTime=0x9e660ef0, ftLastWriteTime.dwHighDateTime=0x1d63305, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.988] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e6abd40, ftCreationTime.dwHighDateTime=0x1d62538, ftLastAccessTime.dwLowDateTime=0x445b8dc0, ftLastAccessTime.dwHighDateTime=0x1d6314a, ftLastWriteTime.dwLowDateTime=0x445b8dc0, ftLastWriteTime.dwHighDateTime=0x1d6314a, nFileSizeHigh=0x0, nFileSizeLow=0x5a31, dwReserved0=0x0, dwReserved1=0x0, cFileName="eycO5IHCIrVIw92.bmp", cAlternateFileName="EYCO5I~1.BMP")) returned 1 [0078.988] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c17ea30, ftCreationTime.dwHighDateTime=0x1d62886, ftLastAccessTime.dwLowDateTime=0x80fb9350, ftLastAccessTime.dwHighDateTime=0x1d62313, ftLastWriteTime.dwLowDateTime=0x80fb9350, ftLastWriteTime.dwHighDateTime=0x1d62313, nFileSizeHigh=0x0, nFileSizeLow=0x160f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ixsRRTpsq.jpg", cAlternateFileName="IXSRRT~1.JPG")) returned 1 [0078.988] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.988] FindClose (in: hFindFile=0x7f0378 | out: hFindFile=0x7f0378) returned 1 [0078.988] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\FRvXjMNzYuh6Bmrn\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\frvxjmnzyuh6bmrn\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.994] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c04 | out: lpMode=0x10c89c04) returned 0 [0078.994] GetFileType (hFile=0x19c) returned 0x1 [0078.994] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0078.994] WriteFile (in: hFile=0x19c, lpBuffer=0x10ff5200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89bf4, lpOverlapped=0x10c89bf8 | out: lpBuffer=0x10ff5200*, lpNumberOfBytesWritten=0x10c89bf4*=0x464, lpOverlapped=0x10c89bf8) returned 1 [0078.994] GetFileType (hFile=0x19c) returned 0x1 [0078.995] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0078.995] CloseHandle (hObject=0x19c) returned 1 [0078.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\FRvXjMNzYuh6Bmrn\\eycO5IHCIrVIw92.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\frvxjmnzyuh6bmrn\\eyco5ihcirviw92.bmp"), fInfoLevelId=0x0, lpFileInformation=0x10cd3f48 | out: lpFileInformation=0x10cd3f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e6abd40, ftCreationTime.dwHighDateTime=0x1d62538, ftLastAccessTime.dwLowDateTime=0x445b8dc0, ftLastAccessTime.dwHighDateTime=0x1d6314a, ftLastWriteTime.dwLowDateTime=0x445b8dc0, ftLastWriteTime.dwHighDateTime=0x1d6314a, nFileSizeHigh=0x0, nFileSizeLow=0x5a31)) returned 1 [0078.995] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\FRvXjMNzYuh6Bmrn\\eycO5IHCIrVIw92.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\frvxjmnzyuh6bmrn\\eyco5ihcirviw92.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0078.995] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0078.995] GetFileType (hFile=0x19c) returned 0x1 [0078.995] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0078.995] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f580 | out: pbBuffer=0x10c6f580) returned 1 [0078.995] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f590 | out: pbBuffer=0x10c6f590) returned 1 [0078.995] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1d201 | out: pbBuffer=0x10e1d201) returned 1 [0078.995] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1d401 | out: pbBuffer=0x10e1d401) returned 1 [0078.996] ReadFile (in: hFile=0x19c, lpBuffer=0x10d6a000, nNumberOfBytesToRead=0x5a31, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10d6a000*, lpNumberOfBytesRead=0x10c89b28*=0x5a31, lpOverlapped=0x0) returned 1 [0079.001] GetFileType (hFile=0x19c) returned 0x1 [0079.001] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.001] WriteFile (in: hFile=0x19c, lpBuffer=0x10d70000*, nNumberOfBytesToWrite=0x5a31, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10d70000*, lpNumberOfBytesWritten=0x10c89b28*=0x5a31, lpOverlapped=0x10c89b2c) returned 1 [0079.001] GetFileType (hFile=0x19c) returned 0x1 [0079.001] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5a31, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.001] GetFileType (hFile=0x19c) returned 0x1 [0079.001] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.001] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1d300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10e1d300*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.001] GetFileType (hFile=0x19c) returned 0x1 [0079.001] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5a31, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.001] GetFileType (hFile=0x19c) returned 0x1 [0079.001] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.002] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1d500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10e1d500*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.002] GetFileType (hFile=0x19c) returned 0x1 [0079.002] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5a31, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.002] GetFileType (hFile=0x19c) returned 0x1 [0079.002] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.002] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.002] GetFileType (hFile=0x19c) returned 0x1 [0079.002] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5a31, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.002] CloseHandle (hObject=0x19c) returned 1 [0079.002] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\FRvXjMNzYuh6Bmrn\\eycO5IHCIrVIw92.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\frvxjmnzyuh6bmrn\\eyco5ihcirviw92.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\FRvXjMNzYuh6Bmrn\\eycO5IHCIrVIw92.bmp.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\frvxjmnzyuh6bmrn\\eyco5ihcirviw92.bmp.trapget"), dwFlags=0x1) returned 1 [0079.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\FRvXjMNzYuh6Bmrn\\ixsRRTpsq.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\frvxjmnzyuh6bmrn\\ixsrrtpsq.jpg"), fInfoLevelId=0x0, lpFileInformation=0x110c60a8 | out: lpFileInformation=0x110c60a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c17ea30, ftCreationTime.dwHighDateTime=0x1d62886, ftLastAccessTime.dwLowDateTime=0x80fb9350, ftLastAccessTime.dwHighDateTime=0x1d62313, ftLastWriteTime.dwLowDateTime=0x80fb9350, ftLastWriteTime.dwHighDateTime=0x1d62313, nFileSizeHigh=0x0, nFileSizeLow=0x160f)) returned 1 [0079.003] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\FRvXjMNzYuh6Bmrn\\ixsRRTpsq.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\frvxjmnzyuh6bmrn\\ixsrrtpsq.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.003] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.003] GetFileType (hFile=0x19c) returned 0x1 [0079.003] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.003] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f660 | out: pbBuffer=0x10c6f660) returned 1 [0079.003] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f670 | out: pbBuffer=0x10c6f670) returned 1 [0079.003] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1d601 | out: pbBuffer=0x10e1d601) returned 1 [0079.004] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1d801 | out: pbBuffer=0x10e1d801) returned 1 [0079.004] ReadFile (in: hFile=0x19c, lpBuffer=0x10d7e000, nNumberOfBytesToRead=0x160f, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10d7e000*, lpNumberOfBytesRead=0x10c89b28*=0x160f, lpOverlapped=0x0) returned 1 [0079.004] GetFileType (hFile=0x19c) returned 0x1 [0079.005] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.005] WriteFile (in: hFile=0x19c, lpBuffer=0x10d7f800*, nNumberOfBytesToWrite=0x160f, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10d7f800*, lpNumberOfBytesWritten=0x10c89b28*=0x160f, lpOverlapped=0x10c89b2c) returned 1 [0079.005] GetFileType (hFile=0x19c) returned 0x1 [0079.005] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x160f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.005] GetFileType (hFile=0x19c) returned 0x1 [0079.005] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.005] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1d700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10e1d700*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.005] GetFileType (hFile=0x19c) returned 0x1 [0079.005] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x160f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.005] GetFileType (hFile=0x19c) returned 0x1 [0079.005] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.005] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1d900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10e1d900*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.005] GetFileType (hFile=0x19c) returned 0x1 [0079.005] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x160f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.005] GetFileType (hFile=0x19c) returned 0x1 [0079.005] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.005] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.005] GetFileType (hFile=0x19c) returned 0x1 [0079.005] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x160f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.005] CloseHandle (hObject=0x19c) returned 1 [0079.006] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\FRvXjMNzYuh6Bmrn\\ixsRRTpsq.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\frvxjmnzyuh6bmrn\\ixsrrtpsq.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\FRvXjMNzYuh6Bmrn\\ixsRRTpsq.jpg.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\frvxjmnzyuh6bmrn\\ixsrrtpsq.jpg.trapget"), dwFlags=0x1) returned 1 [0079.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\mtz4W8C.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\mtz4w8c.jpg"), fInfoLevelId=0x0, lpFileInformation=0x110c61e8 | out: lpFileInformation=0x110c61e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe733d940, ftCreationTime.dwHighDateTime=0x1d6309a, ftLastAccessTime.dwLowDateTime=0xbdcaf870, ftLastAccessTime.dwHighDateTime=0x1d62f16, ftLastWriteTime.dwLowDateTime=0xbdcaf870, ftLastWriteTime.dwHighDateTime=0x1d62f16, nFileSizeHigh=0x0, nFileSizeLow=0x3b21)) returned 1 [0079.006] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\mtz4W8C.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\mtz4w8c.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.006] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0079.006] GetFileType (hFile=0x19c) returned 0x1 [0079.006] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0079.006] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f750 | out: pbBuffer=0x10c6f750) returned 1 [0079.007] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f760 | out: pbBuffer=0x10c6f760) returned 1 [0079.007] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1da01 | out: pbBuffer=0x10e1da01) returned 1 [0079.007] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e1dc01 | out: pbBuffer=0x10e1dc01) returned 1 [0079.007] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x3b21, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89b8c*=0x3b21, lpOverlapped=0x0) returned 1 [0079.008] GetFileType (hFile=0x19c) returned 0x1 [0079.008] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.008] WriteFile (in: hFile=0x19c, lpBuffer=0x10d90000*, nNumberOfBytesToWrite=0x3b21, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10d90000*, lpNumberOfBytesWritten=0x10c89b8c*=0x3b21, lpOverlapped=0x10c89b90) returned 1 [0079.008] GetFileType (hFile=0x19c) returned 0x1 [0079.008] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3b21, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.008] GetFileType (hFile=0x19c) returned 0x1 [0079.008] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.008] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1db00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e1db00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.009] GetFileType (hFile=0x19c) returned 0x1 [0079.009] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3b21, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.009] GetFileType (hFile=0x19c) returned 0x1 [0079.009] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.009] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1dd00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e1dd00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.009] GetFileType (hFile=0x19c) returned 0x1 [0079.009] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3b21, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.009] GetFileType (hFile=0x19c) returned 0x1 [0079.009] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.009] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0079.009] GetFileType (hFile=0x19c) returned 0x1 [0079.009] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3b21, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.009] CloseHandle (hObject=0x19c) returned 1 [0079.009] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\mtz4W8C.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\mtz4w8c.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\mtz4W8C.jpg.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\mtz4w8c.jpg.trapget"), dwFlags=0x1) returned 1 [0079.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\pizC6jgvRtSezP_nqs.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\pizc6jgvrtsezp_nqs.bmp"), fInfoLevelId=0x0, lpFileInformation=0x110c6328 | out: lpFileInformation=0x110c6328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9f58770, ftCreationTime.dwHighDateTime=0x1d62d0f, ftLastAccessTime.dwLowDateTime=0xef3fe970, ftLastAccessTime.dwHighDateTime=0x1d6276d, ftLastWriteTime.dwLowDateTime=0xef3fe970, ftLastWriteTime.dwHighDateTime=0x1d6276d, nFileSizeHigh=0x0, nFileSizeLow=0xeba8)) returned 1 [0079.010] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\pizC6jgvRtSezP_nqs.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\pizc6jgvrtsezp_nqs.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.010] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0079.010] GetFileType (hFile=0x19c) returned 0x1 [0079.010] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0079.010] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f840 | out: pbBuffer=0x10c6f840) returned 1 [0079.010] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f850 | out: pbBuffer=0x10c6f850) returned 1 [0079.010] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d94101 | out: pbBuffer=0x10d94101) returned 1 [0079.010] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d94301 | out: pbBuffer=0x10d94301) returned 1 [0079.011] ReadFile (in: hFile=0x19c, lpBuffer=0x10d9e000, nNumberOfBytesToRead=0xeba8, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10d9e000*, lpNumberOfBytesRead=0x10c89b8c*=0xeba8, lpOverlapped=0x0) returned 1 [0079.013] GetFileType (hFile=0x19c) returned 0x1 [0079.013] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.013] WriteFile (in: hFile=0x19c, lpBuffer=0x10dae000*, nNumberOfBytesToWrite=0xeba8, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10dae000*, lpNumberOfBytesWritten=0x10c89b8c*=0xeba8, lpOverlapped=0x10c89b90) returned 1 [0079.013] GetFileType (hFile=0x19c) returned 0x1 [0079.013] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeba8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.013] GetFileType (hFile=0x19c) returned 0x1 [0079.014] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.014] WriteFile (in: hFile=0x19c, lpBuffer=0x10d94200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10d94200*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.014] GetFileType (hFile=0x19c) returned 0x1 [0079.014] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeba8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.014] GetFileType (hFile=0x19c) returned 0x1 [0079.014] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.014] WriteFile (in: hFile=0x19c, lpBuffer=0x10d94400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10d94400*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.014] GetFileType (hFile=0x19c) returned 0x1 [0079.014] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeba8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.014] GetFileType (hFile=0x19c) returned 0x1 [0079.014] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.014] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0079.014] GetFileType (hFile=0x19c) returned 0x1 [0079.014] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xeba8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.014] CloseHandle (hObject=0x19c) returned 1 [0079.014] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\pizC6jgvRtSezP_nqs.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\pizc6jgvrtsezp_nqs.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\pizC6jgvRtSezP_nqs.bmp.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\pizc6jgvrtsezp_nqs.bmp.trapget"), dwFlags=0x1) returned 1 [0079.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\s5IoxOYxtEuV3.png" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\s5ioxoyxteuv3.png"), fInfoLevelId=0x0, lpFileInformation=0x110c6468 | out: lpFileInformation=0x110c6468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49baff10, ftCreationTime.dwHighDateTime=0x1d6281e, ftLastAccessTime.dwLowDateTime=0xce2149e0, ftLastAccessTime.dwHighDateTime=0x1d6316e, ftLastWriteTime.dwLowDateTime=0xce2149e0, ftLastWriteTime.dwHighDateTime=0x1d6316e, nFileSizeHigh=0x0, nFileSizeLow=0x19c2)) returned 1 [0079.015] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\s5IoxOYxtEuV3.png" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\s5ioxoyxteuv3.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.015] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0079.015] GetFileType (hFile=0x19c) returned 0x1 [0079.015] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0079.015] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f930 | out: pbBuffer=0x10c6f930) returned 1 [0079.015] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6f940 | out: pbBuffer=0x10c6f940) returned 1 [0079.016] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d94601 | out: pbBuffer=0x10d94601) returned 1 [0079.016] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d94801 | out: pbBuffer=0x10d94801) returned 1 [0079.016] ReadFile (in: hFile=0x19c, lpBuffer=0x10dd0000, nNumberOfBytesToRead=0x19c2, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10dd0000*, lpNumberOfBytesRead=0x10c89b8c*=0x19c2, lpOverlapped=0x0) returned 1 [0079.017] GetFileType (hFile=0x19c) returned 0x1 [0079.017] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.017] WriteFile (in: hFile=0x19c, lpBuffer=0x10dd1a80*, nNumberOfBytesToWrite=0x19c2, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10dd1a80*, lpNumberOfBytesWritten=0x10c89b8c*=0x19c2, lpOverlapped=0x10c89b90) returned 1 [0079.017] GetFileType (hFile=0x19c) returned 0x1 [0079.017] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x19c2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.017] GetFileType (hFile=0x19c) returned 0x1 [0079.017] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.017] WriteFile (in: hFile=0x19c, lpBuffer=0x10d94700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10d94700*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.017] GetFileType (hFile=0x19c) returned 0x1 [0079.017] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x19c2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.017] GetFileType (hFile=0x19c) returned 0x1 [0079.017] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.017] WriteFile (in: hFile=0x19c, lpBuffer=0x10d94900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10d94900*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.018] GetFileType (hFile=0x19c) returned 0x1 [0079.018] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x19c2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.018] GetFileType (hFile=0x19c) returned 0x1 [0079.018] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.018] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0079.018] GetFileType (hFile=0x19c) returned 0x1 [0079.018] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x19c2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.018] CloseHandle (hObject=0x19c) returned 1 [0079.018] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\s5IoxOYxtEuV3.png" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\s5ioxoyxteuv3.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\tQasCYSa_MpUoy5\\s5IoxOYxtEuV3.png.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\tqascysa_mpuoy5\\s5ioxoyxteuv3.png.trapget"), dwFlags=0x1) returned 1 [0079.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\uN2IjxKDsl34uKOyg.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\un2ijxkdsl34ukoyg.gif"), fInfoLevelId=0x0, lpFileInformation=0x110c65a8 | out: lpFileInformation=0x110c65a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f160e40, ftCreationTime.dwHighDateTime=0x1d62b9c, ftLastAccessTime.dwLowDateTime=0x695b14e0, ftLastAccessTime.dwHighDateTime=0x1d62634, ftLastWriteTime.dwLowDateTime=0x695b14e0, ftLastWriteTime.dwHighDateTime=0x1d62634, nFileSizeHigh=0x0, nFileSizeLow=0x5390)) returned 1 [0079.027] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\uN2IjxKDsl34uKOyg.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\un2ijxkdsl34ukoyg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.027] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.028] GetFileType (hFile=0x19c) returned 0x1 [0079.028] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.028] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fa10 | out: pbBuffer=0x10c6fa10) returned 1 [0079.028] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fa20 | out: pbBuffer=0x10c6fa20) returned 1 [0079.028] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d94a01 | out: pbBuffer=0x10d94a01) returned 1 [0079.028] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d94c01 | out: pbBuffer=0x10d94c01) returned 1 [0079.029] ReadFile (in: hFile=0x19c, lpBuffer=0x10dde000, nNumberOfBytesToRead=0x5390, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10dde000*, lpNumberOfBytesRead=0x10c89bf0*=0x5390, lpOverlapped=0x0) returned 1 [0079.029] GetFileType (hFile=0x19c) returned 0x1 [0079.029] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.029] WriteFile (in: hFile=0x19c, lpBuffer=0x10de3500*, nNumberOfBytesToWrite=0x5390, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10de3500*, lpNumberOfBytesWritten=0x10c89bf0*=0x5390, lpOverlapped=0x10c89bf4) returned 1 [0079.030] GetFileType (hFile=0x19c) returned 0x1 [0079.030] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5390, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.030] GetFileType (hFile=0x19c) returned 0x1 [0079.030] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.030] WriteFile (in: hFile=0x19c, lpBuffer=0x10d94b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d94b00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.030] GetFileType (hFile=0x19c) returned 0x1 [0079.030] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5390, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.030] GetFileType (hFile=0x19c) returned 0x1 [0079.030] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.030] WriteFile (in: hFile=0x19c, lpBuffer=0x10d94d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d94d00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.030] GetFileType (hFile=0x19c) returned 0x1 [0079.030] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5390, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.030] GetFileType (hFile=0x19c) returned 0x1 [0079.030] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.030] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0079.030] GetFileType (hFile=0x19c) returned 0x1 [0079.030] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5390, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.030] CloseHandle (hObject=0x19c) returned 1 [0079.031] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\uN2IjxKDsl34uKOyg.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\un2ijxkdsl34ukoyg.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\uN2IjxKDsl34uKOyg.gif.TRAPGET" (normalized: "c:\\users\\fd1hvy\\pictures\\un2ijxkdsl34ukoyg.gif.trapget"), dwFlags=0x1) returned 1 [0079.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\PrintHood" (normalized: "c:\\users\\fd1hvy\\printhood"), fInfoLevelId=0x0, lpFileInformation=0x110c66e8 | out: lpFileInformation=0x110c66e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.031] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\PrintHood" (normalized: "c:\\users\\fd1hvy\\printhood"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.031] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\PrintHood\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0079.032] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92c60*, nNumberOfCharsToWrite=0x29, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92c60*, lpNumberOfCharsWritten=0x10c897b8*=0x29) returned 1 [0079.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Recent" (normalized: "c:\\users\\fd1hvy\\recent"), fInfoLevelId=0x0, lpFileInformation=0x110c6788 | out: lpFileInformation=0x110c6788*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.049] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Recent" (normalized: "c:\\users\\fd1hvy\\recent"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.049] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Recent\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0079.050] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c73180*, nNumberOfCharsToWrite=0x26, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c73180*, lpNumberOfCharsWritten=0x10c897b8*=0x26) returned 1 [0079.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games" (normalized: "c:\\users\\fd1hvy\\saved games"), fInfoLevelId=0x0, lpFileInformation=0x110c67d8 | out: lpFileInformation=0x110c67d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.065] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Saved Games" (normalized: "c:\\users\\fd1hvy\\saved games"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.065] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efc38 [0079.065] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.065] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0079.065] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.065] FindClose (in: hFindFile=0x7efc38 | out: hFindFile=0x7efc38) returned 1 [0079.066] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Saved Games\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\saved games\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.072] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0079.072] GetFileType (hFile=0x19c) returned 0x1 [0079.072] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0079.072] WriteFile (in: hFile=0x19c, lpBuffer=0x10ff5b00*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10ff5b00*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0079.073] GetFileType (hFile=0x19c) returned 0x1 [0079.073] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0079.073] CloseHandle (hObject=0x19c) returned 1 [0079.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\saved games\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x110c6878 | out: lpFileInformation=0x110c6878*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0079.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Saved Games\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\saved games\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.073] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.073] GetFileType (hFile=0x19c) returned 0x1 [0079.073] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.073] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fb70 | out: pbBuffer=0x10c6fb70) returned 1 [0079.073] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fb80 | out: pbBuffer=0x10c6fb80) returned 1 [0079.074] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d94e01 | out: pbBuffer=0x10d94e01) returned 1 [0079.074] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d95001 | out: pbBuffer=0x10d95001) returned 1 [0079.081] ReadFile (in: hFile=0x19c, lpBuffer=0x10d97d40, nNumberOfBytesToRead=0x11a, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d97d40*, lpNumberOfBytesRead=0x10c89bf0*=0x11a, lpOverlapped=0x0) returned 1 [0079.081] GetFileType (hFile=0x19c) returned 0x1 [0079.081] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.081] WriteFile (in: hFile=0x19c, lpBuffer=0x10d97e60*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d97e60*, lpNumberOfBytesWritten=0x10c89bf0*=0x11a, lpOverlapped=0x10c89bf4) returned 1 [0079.082] GetFileType (hFile=0x19c) returned 0x1 [0079.082] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.082] GetFileType (hFile=0x19c) returned 0x1 [0079.082] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.082] WriteFile (in: hFile=0x19c, lpBuffer=0x10d94f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d94f00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.082] GetFileType (hFile=0x19c) returned 0x1 [0079.082] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.082] GetFileType (hFile=0x19c) returned 0x1 [0079.082] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.082] WriteFile (in: hFile=0x19c, lpBuffer=0x10d95100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d95100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.104] GetFileType (hFile=0x19c) returned 0x1 [0079.104] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.104] GetFileType (hFile=0x19c) returned 0x1 [0079.104] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.104] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0079.104] GetFileType (hFile=0x19c) returned 0x1 [0079.104] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.105] CloseHandle (hObject=0x19c) returned 1 [0079.105] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Saved Games\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\saved games\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Saved Games\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\saved games\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0079.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Searches" (normalized: "c:\\users\\fd1hvy\\searches"), fInfoLevelId=0x0, lpFileInformation=0x110c69b8 | out: lpFileInformation=0x110c69b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0079.105] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches" (normalized: "c:\\users\\fd1hvy\\searches"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.106] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcf8 [0079.106] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.106] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0079.106] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0079.106] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44242e24, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44242e24, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44242e24, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0079.106] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 1 [0079.106] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.106] FindClose (in: hFindFile=0x7efcf8 | out: hFindFile=0x7efcf8) returned 1 [0079.106] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\searches\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.106] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0079.106] GetFileType (hFile=0x19c) returned 0x1 [0079.106] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0079.106] WriteFile (in: hFile=0x19c, lpBuffer=0x10dfe480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10dfe480*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0079.107] GetFileType (hFile=0x19c) returned 0x1 [0079.107] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0079.107] CloseHandle (hObject=0x19c) returned 1 [0079.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\everywhere.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x110c6b48 | out: lpFileInformation=0x110c6b48*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1 [0079.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.108] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0079.108] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10dbf000*, nNumberOfCharsToWrite=0x3d, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10dbf000*, lpNumberOfCharsWritten=0x10c89754*=0x3d) returned 1 [0079.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\indexed locations.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x110c6b98 | out: lpFileInformation=0x110c6b98*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44242e24, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44242e24, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44242e24, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1 [0079.117] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.117] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0079.117] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10e02a20*, nNumberOfCharsToWrite=0x44, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10e02a20*, lpNumberOfCharsWritten=0x10c89754*=0x44) returned 1 [0079.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\searches\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x110c6be8 | out: lpFileInformation=0x110c6be8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x20c)) returned 1 [0079.133] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\searches\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.133] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.133] GetFileType (hFile=0x19c) returned 0x1 [0079.133] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.133] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fcc0 | out: pbBuffer=0x10c6fcc0) returned 1 [0079.133] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fce0 | out: pbBuffer=0x10c6fce0) returned 1 [0079.133] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d95201 | out: pbBuffer=0x10d95201) returned 1 [0079.134] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d95401 | out: pbBuffer=0x10d95401) returned 1 [0079.134] ReadFile (in: hFile=0x19c, lpBuffer=0x10df5b00, nNumberOfBytesToRead=0x20c, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10df5b00*, lpNumberOfBytesRead=0x10c89bf0*=0x20c, lpOverlapped=0x0) returned 1 [0079.135] GetFileType (hFile=0x19c) returned 0x1 [0079.135] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.135] WriteFile (in: hFile=0x19c, lpBuffer=0x10df5d40*, nNumberOfBytesToWrite=0x20c, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10df5d40*, lpNumberOfBytesWritten=0x10c89bf0*=0x20c, lpOverlapped=0x10c89bf4) returned 1 [0079.135] GetFileType (hFile=0x19c) returned 0x1 [0079.135] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x20c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.135] GetFileType (hFile=0x19c) returned 0x1 [0079.135] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.135] WriteFile (in: hFile=0x19c, lpBuffer=0x10d95300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d95300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.153] GetFileType (hFile=0x19c) returned 0x1 [0079.153] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x20c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.154] GetFileType (hFile=0x19c) returned 0x1 [0079.154] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.154] WriteFile (in: hFile=0x19c, lpBuffer=0x10d95500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d95500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.154] GetFileType (hFile=0x19c) returned 0x1 [0079.154] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x20c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.154] GetFileType (hFile=0x19c) returned 0x1 [0079.154] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.154] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0079.154] GetFileType (hFile=0x19c) returned 0x1 [0079.154] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x20c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.154] CloseHandle (hObject=0x19c) returned 1 [0079.155] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Searches\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\searches\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Searches\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\searches\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0079.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms" (normalized: "c:\\users\\fd1hvy\\searches\\winrt--{s-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms"), fInfoLevelId=0x0, lpFileInformation=0x110c6d28 | out: lpFileInformation=0x110c6d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357)) returned 1 [0079.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms" (normalized: "c:\\users\\fd1hvy\\searches\\winrt--{s-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.177] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.178] GetFileType (hFile=0x19c) returned 0x1 [0079.178] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.178] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fdc0 | out: pbBuffer=0x10c6fdc0) returned 1 [0079.178] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6fdd0 | out: pbBuffer=0x10c6fdd0) returned 1 [0079.178] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d95601 | out: pbBuffer=0x10d95601) returned 1 [0079.178] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d95801 | out: pbBuffer=0x10d95801) returned 1 [0079.178] ReadFile (in: hFile=0x19c, lpBuffer=0x10ee4000, nNumberOfBytesToRead=0x357, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10ee4000*, lpNumberOfBytesRead=0x10c89bf0*=0x357, lpOverlapped=0x0) returned 1 [0079.243] GetFileType (hFile=0x19c) returned 0x1 [0079.243] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.243] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee4380*, nNumberOfBytesToWrite=0x357, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee4380*, lpNumberOfBytesWritten=0x10c89bf0*=0x357, lpOverlapped=0x10c89bf4) returned 1 [0079.243] GetFileType (hFile=0x19c) returned 0x1 [0079.243] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x357, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.243] GetFileType (hFile=0x19c) returned 0x1 [0079.243] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.243] WriteFile (in: hFile=0x19c, lpBuffer=0x10d95700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d95700*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.243] GetFileType (hFile=0x19c) returned 0x1 [0079.243] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x357, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.244] GetFileType (hFile=0x19c) returned 0x1 [0079.244] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.244] WriteFile (in: hFile=0x19c, lpBuffer=0x10d95900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d95900*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.244] GetFileType (hFile=0x19c) returned 0x1 [0079.244] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x357, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.244] GetFileType (hFile=0x19c) returned 0x1 [0079.244] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.244] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0079.244] GetFileType (hFile=0x19c) returned 0x1 [0079.244] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x357, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.244] CloseHandle (hObject=0x19c) returned 1 [0079.244] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Searches\\winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms" (normalized: "c:\\users\\fd1hvy\\searches\\winrt--{s-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms"), lpNewFileName="C:\\Users\\FD1HVy\\Searches\\winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms.TRAPGET" (normalized: "c:\\users\\fd1hvy\\searches\\winrt--{s-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms.trapget"), dwFlags=0x1) returned 1 [0079.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\SendTo" (normalized: "c:\\users\\fd1hvy\\sendto"), fInfoLevelId=0x0, lpFileInformation=0x110c6e68 | out: lpFileInformation=0x110c6e68*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.245] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\SendTo" (normalized: "c:\\users\\fd1hvy\\sendto"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.245] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\SendTo\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0079.246] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c734a0*, nNumberOfCharsToWrite=0x26, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c734a0*, lpNumberOfCharsWritten=0x10c897b8*=0x26) returned 1 [0079.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Start Menu" (normalized: "c:\\users\\fd1hvy\\start menu"), fInfoLevelId=0x0, lpFileInformation=0x110c6eb8 | out: lpFileInformation=0x110c6eb8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.288] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Start Menu" (normalized: "c:\\users\\fd1hvy\\start menu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.288] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Start Menu\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0079.289] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92f00*, nNumberOfCharsToWrite=0x2a, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92f00*, lpNumberOfCharsWritten=0x10c897b8*=0x2a) returned 1 [0079.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Templates" (normalized: "c:\\users\\fd1hvy\\templates"), fInfoLevelId=0x0, lpFileInformation=0x110c6f08 | out: lpFileInformation=0x110c6f08*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.302] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Templates" (normalized: "c:\\users\\fd1hvy\\templates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.302] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Templates\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0079.302] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92f60*, nNumberOfCharsToWrite=0x29, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92f60*, lpNumberOfCharsWritten=0x10c897b8*=0x29) returned 1 [0079.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos" (normalized: "c:\\users\\fd1hvy\\videos"), fInfoLevelId=0x0, lpFileInformation=0x110c6f58 | out: lpFileInformation=0x110c6f58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf851ec3, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf851ec3, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0079.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos" (normalized: "c:\\users\\fd1hvy\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.324] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf851ec3, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf851ec3, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efdf8 [0079.324] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf851ec3, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf851ec3, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.324] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21a518e0, ftCreationTime.dwHighDateTime=0x1d631c3, ftLastAccessTime.dwLowDateTime=0x4f89ea10, ftLastAccessTime.dwHighDateTime=0x1d62700, ftLastWriteTime.dwLowDateTime=0x4f89ea10, ftLastWriteTime.dwHighDateTime=0x1d62700, nFileSizeHigh=0x0, nFileSizeLow=0x10d62, dwReserved0=0x0, dwReserved1=0x0, cFileName="AklxjRp685gjgjSfSo.avi", cAlternateFileName="AKLXJR~1.AVI")) returned 1 [0079.324] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0079.324] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ccba0, ftCreationTime.dwHighDateTime=0x1d62e88, ftLastAccessTime.dwLowDateTime=0x53e66860, ftLastAccessTime.dwHighDateTime=0x1d6295b, ftLastWriteTime.dwLowDateTime=0x53e66860, ftLastWriteTime.dwHighDateTime=0x1d6295b, nFileSizeHigh=0x0, nFileSizeLow=0xafae, dwReserved0=0x0, dwReserved1=0x0, cFileName="fgGpq3nFQQ61tb9bi.mkv", cAlternateFileName="FGGPQ3~1.MKV")) returned 1 [0079.324] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9a2720, ftCreationTime.dwHighDateTime=0x1d63036, ftLastAccessTime.dwLowDateTime=0xba615310, ftLastAccessTime.dwHighDateTime=0x1d62f83, ftLastWriteTime.dwLowDateTime=0xba615310, ftLastWriteTime.dwHighDateTime=0x1d62f83, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fW-jib3R5mGVH", cAlternateFileName="FW-JIB~1")) returned 1 [0079.324] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb293470, ftCreationTime.dwHighDateTime=0x1d622cd, ftLastAccessTime.dwLowDateTime=0x7743adc0, ftLastAccessTime.dwHighDateTime=0x1d62633, ftLastWriteTime.dwLowDateTime=0x7743adc0, ftLastWriteTime.dwHighDateTime=0x1d62633, nFileSizeHigh=0x0, nFileSizeLow=0x170a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="lofKOE1B.flv", cAlternateFileName="")) returned 1 [0079.324] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaea49e50, ftCreationTime.dwHighDateTime=0x1d622b4, ftLastAccessTime.dwLowDateTime=0x784cf800, ftLastAccessTime.dwHighDateTime=0x1d63116, ftLastWriteTime.dwLowDateTime=0x784cf800, ftLastWriteTime.dwHighDateTime=0x1d63116, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="p2LArVfRG", cAlternateFileName="P2LARV~1")) returned 1 [0079.324] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b43ff50, ftCreationTime.dwHighDateTime=0x1d63029, ftLastAccessTime.dwLowDateTime=0xf247eb80, ftLastAccessTime.dwHighDateTime=0x1d6282c, ftLastWriteTime.dwLowDateTime=0xf247eb80, ftLastWriteTime.dwHighDateTime=0x1d6282c, nFileSizeHigh=0x0, nFileSizeLow=0x15e21, dwReserved0=0x0, dwReserved1=0x0, cFileName="TSMX8AarB2.mkv", cAlternateFileName="TSMX8A~1.MKV")) returned 1 [0079.324] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdceb0e90, ftCreationTime.dwHighDateTime=0x1d62ffa, ftLastAccessTime.dwLowDateTime=0x60d6d8e0, ftLastAccessTime.dwHighDateTime=0x1d6330e, ftLastWriteTime.dwLowDateTime=0x60d6d8e0, ftLastWriteTime.dwHighDateTime=0x1d6330e, nFileSizeHigh=0x0, nFileSizeLow=0x1805f, dwReserved0=0x0, dwReserved1=0x0, cFileName="V84KWrPGi5tEVA.avi", cAlternateFileName="V84KWR~1.AVI")) returned 1 [0079.324] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aa9ec40, ftCreationTime.dwHighDateTime=0x1d62bea, ftLastAccessTime.dwLowDateTime=0x4e9b20b0, ftLastAccessTime.dwHighDateTime=0x1d628d6, ftLastWriteTime.dwLowDateTime=0x4e9b20b0, ftLastWriteTime.dwHighDateTime=0x1d628d6, nFileSizeHigh=0x0, nFileSizeLow=0xd6fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbVQqRul.avi", cAlternateFileName="")) returned 1 [0079.324] FindNextFileW (in: hFindFile=0x7efdf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.324] FindClose (in: hFindFile=0x7efdf8 | out: hFindFile=0x7efdf8) returned 1 [0079.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\videos\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.339] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0079.339] GetFileType (hFile=0x19c) returned 0x1 [0079.339] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0079.339] WriteFile (in: hFile=0x19c, lpBuffer=0x10dfed80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10dfed80*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0079.345] GetFileType (hFile=0x19c) returned 0x1 [0079.345] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0079.345] CloseHandle (hObject=0x19c) returned 1 [0079.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\AklxjRp685gjgjSfSo.avi" (normalized: "c:\\users\\fd1hvy\\videos\\aklxjrp685gjgjsfso.avi"), fInfoLevelId=0x0, lpFileInformation=0x110c72c8 | out: lpFileInformation=0x110c72c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21a518e0, ftCreationTime.dwHighDateTime=0x1d631c3, ftLastAccessTime.dwLowDateTime=0x4f89ea10, ftLastAccessTime.dwHighDateTime=0x1d62700, ftLastWriteTime.dwLowDateTime=0x4f89ea10, ftLastWriteTime.dwHighDateTime=0x1d62700, nFileSizeHigh=0x0, nFileSizeLow=0x10d62)) returned 1 [0079.345] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\AklxjRp685gjgjSfSo.avi" (normalized: "c:\\users\\fd1hvy\\videos\\aklxjrp685gjgjsfso.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.345] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.345] GetFileType (hFile=0x19c) returned 0x1 [0079.345] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.345] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ff60 | out: pbBuffer=0x10c6ff60) returned 1 [0079.345] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x10c6ff70 | out: pbBuffer=0x10c6ff70) returned 1 [0079.346] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d95a01 | out: pbBuffer=0x10d95a01) returned 1 [0079.346] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d95c01 | out: pbBuffer=0x10d95c01) returned 1 [0079.346] ReadFile (in: hFile=0x19c, lpBuffer=0x10ef6000, nNumberOfBytesToRead=0x10d62, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10ef6000*, lpNumberOfBytesRead=0x10c89bf0*=0x10d62, lpOverlapped=0x0) returned 1 [0079.348] GetFileType (hFile=0x19c) returned 0x1 [0079.348] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.348] WriteFile (in: hFile=0x19c, lpBuffer=0x10f08000*, nNumberOfBytesToWrite=0x10d62, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f08000*, lpNumberOfBytesWritten=0x10c89bf0*=0x10d62, lpOverlapped=0x10c89bf4) returned 1 [0079.352] GetFileType (hFile=0x19c) returned 0x1 [0079.352] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10d62, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.352] GetFileType (hFile=0x19c) returned 0x1 [0079.352] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.352] WriteFile (in: hFile=0x19c, lpBuffer=0x10d95b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d95b00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.352] GetFileType (hFile=0x19c) returned 0x1 [0079.352] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10d62, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.352] GetFileType (hFile=0x19c) returned 0x1 [0079.352] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.352] WriteFile (in: hFile=0x19c, lpBuffer=0x10d95d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d95d00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.352] GetFileType (hFile=0x19c) returned 0x1 [0079.353] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10d62, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.353] GetFileType (hFile=0x19c) returned 0x1 [0079.353] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.353] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0079.353] GetFileType (hFile=0x19c) returned 0x1 [0079.353] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x10d62, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.353] CloseHandle (hObject=0x19c) returned 1 [0079.353] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\AklxjRp685gjgjSfSo.avi" (normalized: "c:\\users\\fd1hvy\\videos\\aklxjrp685gjgjsfso.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\AklxjRp685gjgjSfSo.avi.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\aklxjrp685gjgjsfso.avi.trapget"), dwFlags=0x1) returned 1 [0079.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\TSMX8AarB2.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\tsmx8aarb2.mkv"), fInfoLevelId=0x0, lpFileInformation=0x110c7458 | out: lpFileInformation=0x110c7458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b43ff50, ftCreationTime.dwHighDateTime=0x1d63029, ftLastAccessTime.dwLowDateTime=0xf247eb80, ftLastAccessTime.dwHighDateTime=0x1d6282c, ftLastWriteTime.dwLowDateTime=0xf247eb80, ftLastWriteTime.dwHighDateTime=0x1d6282c, nFileSizeHigh=0x0, nFileSizeLow=0x15e21)) returned 1 [0079.354] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\TSMX8AarB2.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\tsmx8aarb2.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.354] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.354] GetFileType (hFile=0x19c) returned 0x1 [0079.354] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.354] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e060 | out: pbBuffer=0x1108e060) returned 1 [0079.354] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e070 | out: pbBuffer=0x1108e070) returned 1 [0079.354] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10d95e01 | out: pbBuffer=0x10d95e01) returned 1 [0079.354] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f20001 | out: pbBuffer=0x10f20001) returned 1 [0079.355] ReadFile (in: hFile=0x19c, lpBuffer=0x10f24000, nNumberOfBytesToRead=0x15e21, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f24000*, lpNumberOfBytesRead=0x10c89bf0*=0x15e21, lpOverlapped=0x0) returned 1 [0079.356] GetFileType (hFile=0x19c) returned 0x1 [0079.356] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.356] WriteFile (in: hFile=0x19c, lpBuffer=0x10f3a000*, nNumberOfBytesToWrite=0x15e21, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f3a000*, lpNumberOfBytesWritten=0x10c89bf0*=0x15e21, lpOverlapped=0x10c89bf4) returned 1 [0079.357] GetFileType (hFile=0x19c) returned 0x1 [0079.357] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15e21, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.357] GetFileType (hFile=0x19c) returned 0x1 [0079.357] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.357] WriteFile (in: hFile=0x19c, lpBuffer=0x10d95f00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d95f00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.357] GetFileType (hFile=0x19c) returned 0x1 [0079.357] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15e21, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.357] GetFileType (hFile=0x19c) returned 0x1 [0079.357] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.357] WriteFile (in: hFile=0x19c, lpBuffer=0x10f20100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f20100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.357] GetFileType (hFile=0x19c) returned 0x1 [0079.357] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15e21, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.357] GetFileType (hFile=0x19c) returned 0x1 [0079.357] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.357] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0079.358] GetFileType (hFile=0x19c) returned 0x1 [0079.358] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15e21, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.358] CloseHandle (hObject=0x19c) returned 1 [0079.358] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\TSMX8AarB2.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\tsmx8aarb2.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\TSMX8AarB2.mkv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\tsmx8aarb2.mkv.trapget"), dwFlags=0x1) returned 1 [0079.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\V84KWrPGi5tEVA.avi" (normalized: "c:\\users\\fd1hvy\\videos\\v84kwrpgi5teva.avi"), fInfoLevelId=0x0, lpFileInformation=0x110c7598 | out: lpFileInformation=0x110c7598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdceb0e90, ftCreationTime.dwHighDateTime=0x1d62ffa, ftLastAccessTime.dwLowDateTime=0x60d6d8e0, ftLastAccessTime.dwHighDateTime=0x1d6330e, ftLastWriteTime.dwLowDateTime=0x60d6d8e0, ftLastWriteTime.dwHighDateTime=0x1d6330e, nFileSizeHigh=0x0, nFileSizeLow=0x1805f)) returned 1 [0079.358] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\V84KWrPGi5tEVA.avi" (normalized: "c:\\users\\fd1hvy\\videos\\v84kwrpgi5teva.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.358] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.358] GetFileType (hFile=0x19c) returned 0x1 [0079.358] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.358] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e140 | out: pbBuffer=0x1108e140) returned 1 [0079.358] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e150 | out: pbBuffer=0x1108e150) returned 1 [0079.359] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f20201 | out: pbBuffer=0x10f20201) returned 1 [0079.359] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f20401 | out: pbBuffer=0x10f20401) returned 1 [0079.359] SetEvent (hEvent=0x138) returned 1 [0079.359] ReadFile (in: hFile=0x19c, lpBuffer=0x10f5c000, nNumberOfBytesToRead=0x1805f, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f5c000*, lpNumberOfBytesRead=0x10c89bf0*=0x1805f, lpOverlapped=0x0) returned 1 [0079.360] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0079.374] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0079.374] SetEvent (hEvent=0x138) returned 1 [0079.374] SetEvent (hEvent=0x170) returned 1 [0079.374] SetEvent (hEvent=0x158) returned 1 [0079.374] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0079.381] SetEvent (hEvent=0x168) returned 1 [0079.381] SetEvent (hEvent=0x158) returned 1 [0079.382] GetFileType (hFile=0x19c) returned 0x1 [0079.382] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.382] WriteFile (in: hFile=0x19c, lpBuffer=0x110cc000*, nNumberOfBytesToWrite=0x1805f, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110cc000*, lpNumberOfBytesWritten=0x10c89bf0*=0x1805f, lpOverlapped=0x10c89bf4) returned 1 [0079.382] GetFileType (hFile=0x19c) returned 0x1 [0079.382] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1805f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.382] GetFileType (hFile=0x19c) returned 0x1 [0079.382] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.382] WriteFile (in: hFile=0x19c, lpBuffer=0x10f20300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f20300*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.383] GetFileType (hFile=0x19c) returned 0x1 [0079.383] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1805f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.383] GetFileType (hFile=0x19c) returned 0x1 [0079.383] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.383] WriteFile (in: hFile=0x19c, lpBuffer=0x10f20500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f20500*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.383] GetFileType (hFile=0x19c) returned 0x1 [0079.383] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1805f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.383] GetFileType (hFile=0x19c) returned 0x1 [0079.383] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.383] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0079.383] GetFileType (hFile=0x19c) returned 0x1 [0079.383] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1805f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.383] CloseHandle (hObject=0x19c) returned 1 [0079.383] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\V84KWrPGi5tEVA.avi" (normalized: "c:\\users\\fd1hvy\\videos\\v84kwrpgi5teva.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\V84KWrPGi5tEVA.avi.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\v84kwrpgi5teva.avi.trapget"), dwFlags=0x1) returned 1 [0079.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YbVQqRul.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ybvqqrul.avi"), fInfoLevelId=0x0, lpFileInformation=0x110c6008 | out: lpFileInformation=0x110c6008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aa9ec40, ftCreationTime.dwHighDateTime=0x1d62bea, ftLastAccessTime.dwLowDateTime=0x4e9b20b0, ftLastAccessTime.dwHighDateTime=0x1d628d6, ftLastWriteTime.dwLowDateTime=0x4e9b20b0, ftLastWriteTime.dwHighDateTime=0x1d628d6, nFileSizeHigh=0x0, nFileSizeLow=0xd6fa)) returned 1 [0079.384] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YbVQqRul.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ybvqqrul.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.384] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.384] GetFileType (hFile=0x19c) returned 0x1 [0079.384] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.384] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e030 | out: pbBuffer=0x1108e030) returned 1 [0079.384] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e040 | out: pbBuffer=0x1108e040) returned 1 [0079.384] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f20001 | out: pbBuffer=0x10f20001) returned 1 [0079.385] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f20201 | out: pbBuffer=0x10f20201) returned 1 [0079.385] ReadFile (in: hFile=0x19c, lpBuffer=0x10e96000, nNumberOfBytesToRead=0xd6fa, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10e96000*, lpNumberOfBytesRead=0x10c89bf0*=0xd6fa, lpOverlapped=0x0) returned 1 [0079.386] GetFileType (hFile=0x19c) returned 0x1 [0079.386] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.386] WriteFile (in: hFile=0x19c, lpBuffer=0x10ea4000*, nNumberOfBytesToWrite=0xd6fa, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ea4000*, lpNumberOfBytesWritten=0x10c89bf0*=0xd6fa, lpOverlapped=0x10c89bf4) returned 1 [0079.386] GetFileType (hFile=0x19c) returned 0x1 [0079.386] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd6fa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.387] GetFileType (hFile=0x19c) returned 0x1 [0079.387] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.387] WriteFile (in: hFile=0x19c, lpBuffer=0x10f20100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f20100*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.387] GetFileType (hFile=0x19c) returned 0x1 [0079.387] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd6fa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.387] GetFileType (hFile=0x19c) returned 0x1 [0079.387] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.387] WriteFile (in: hFile=0x19c, lpBuffer=0x10f20400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f20400*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.387] GetFileType (hFile=0x19c) returned 0x1 [0079.387] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd6fa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.387] GetFileType (hFile=0x19c) returned 0x1 [0079.387] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.387] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0079.387] GetFileType (hFile=0x19c) returned 0x1 [0079.387] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xd6fa, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.387] CloseHandle (hObject=0x19c) returned 1 [0079.387] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YbVQqRul.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ybvqqrul.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YbVQqRul.avi.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\ybvqqrul.avi.trapget"), dwFlags=0x1) returned 1 [0079.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x110c6148 | out: lpFileInformation=0x110c6148*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0079.388] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\videos\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.388] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.388] GetFileType (hFile=0x19c) returned 0x1 [0079.388] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.388] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e110 | out: pbBuffer=0x1108e110) returned 1 [0079.388] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e120 | out: pbBuffer=0x1108e120) returned 1 [0079.388] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f20601 | out: pbBuffer=0x10f20601) returned 1 [0079.388] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f20801 | out: pbBuffer=0x10f20801) returned 1 [0079.389] ReadFile (in: hFile=0x19c, lpBuffer=0x110c2400, nNumberOfBytesToRead=0x1f8, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x110c2400*, lpNumberOfBytesRead=0x10c89bf0*=0x1f8, lpOverlapped=0x0) returned 1 [0079.389] GetFileType (hFile=0x19c) returned 0x1 [0079.389] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.389] WriteFile (in: hFile=0x19c, lpBuffer=0x110c2600*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x110c2600*, lpNumberOfBytesWritten=0x10c89bf0*=0x1f8, lpOverlapped=0x10c89bf4) returned 1 [0079.389] GetFileType (hFile=0x19c) returned 0x1 [0079.389] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.390] GetFileType (hFile=0x19c) returned 0x1 [0079.390] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.390] WriteFile (in: hFile=0x19c, lpBuffer=0x10f20700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f20700*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.397] GetFileType (hFile=0x19c) returned 0x1 [0079.397] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.397] GetFileType (hFile=0x19c) returned 0x1 [0079.397] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.397] WriteFile (in: hFile=0x19c, lpBuffer=0x10f20900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f20900*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.397] GetFileType (hFile=0x19c) returned 0x1 [0079.397] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.397] GetFileType (hFile=0x19c) returned 0x1 [0079.397] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.397] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0079.397] GetFileType (hFile=0x19c) returned 0x1 [0079.397] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.397] CloseHandle (hObject=0x19c) returned 1 [0079.397] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\desktop.ini" (normalized: "c:\\users\\fd1hvy\\videos\\desktop.ini"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\desktop.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0079.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh"), fInfoLevelId=0x0, lpFileInformation=0x110c6288 | out: lpFileInformation=0x110c6288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9a2720, ftCreationTime.dwHighDateTime=0x1d63036, ftLastAccessTime.dwLowDateTime=0xba615310, ftLastAccessTime.dwHighDateTime=0x1d62f83, ftLastWriteTime.dwLowDateTime=0xba615310, ftLastWriteTime.dwHighDateTime=0x1d62f83, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0079.398] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.398] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9a2720, ftCreationTime.dwHighDateTime=0x1d63036, ftLastAccessTime.dwLowDateTime=0xba615310, ftLastAccessTime.dwHighDateTime=0x1d62f83, ftLastWriteTime.dwLowDateTime=0xba615310, ftLastWriteTime.dwHighDateTime=0x1d62f83, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eff38 [0079.398] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9a2720, ftCreationTime.dwHighDateTime=0x1d63036, ftLastAccessTime.dwLowDateTime=0xba615310, ftLastAccessTime.dwHighDateTime=0x1d62f83, ftLastWriteTime.dwLowDateTime=0xba615310, ftLastWriteTime.dwHighDateTime=0x1d62f83, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.398] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c86eb0, ftCreationTime.dwHighDateTime=0x1d63030, ftLastAccessTime.dwLowDateTime=0xdd999590, ftLastAccessTime.dwHighDateTime=0x1d63190, ftLastWriteTime.dwLowDateTime=0xdd999590, ftLastWriteTime.dwHighDateTime=0x1d63190, nFileSizeHigh=0x0, nFileSizeLow=0x15f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="8o2V68WBvnR.flv", cAlternateFileName="8O2V68~1.FLV")) returned 1 [0079.398] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe078650, ftCreationTime.dwHighDateTime=0x1d62594, ftLastAccessTime.dwLowDateTime=0xe458b600, ftLastAccessTime.dwHighDateTime=0x1d62cda, ftLastWriteTime.dwLowDateTime=0xe458b600, ftLastWriteTime.dwHighDateTime=0x1d62cda, nFileSizeHigh=0x0, nFileSizeLow=0x16bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="aBv2mbUGe9D.mp4", cAlternateFileName="ABV2MB~1.MP4")) returned 1 [0079.398] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868f9c0, ftCreationTime.dwHighDateTime=0x1d62668, ftLastAccessTime.dwLowDateTime=0x59665010, ftLastAccessTime.dwHighDateTime=0x1d62e7f, ftLastWriteTime.dwLowDateTime=0x59665010, ftLastWriteTime.dwHighDateTime=0x1d62e7f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDYy3chxew 6M1acz.flv", cAlternateFileName="IDYY3C~1.FLV")) returned 1 [0079.398] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a8e0ab0, ftCreationTime.dwHighDateTime=0x1d62ef5, ftLastAccessTime.dwLowDateTime=0xe329bb90, ftLastAccessTime.dwHighDateTime=0x1d62d8d, ftLastWriteTime.dwLowDateTime=0xe329bb90, ftLastWriteTime.dwHighDateTime=0x1d62d8d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MnOU", cAlternateFileName="")) returned 1 [0079.398] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bef9d80, ftCreationTime.dwHighDateTime=0x1d62cfa, ftLastAccessTime.dwLowDateTime=0x899b3cd0, ftLastAccessTime.dwHighDateTime=0x1d6271f, ftLastWriteTime.dwLowDateTime=0x899b3cd0, ftLastWriteTime.dwHighDateTime=0x1d6271f, nFileSizeHigh=0x0, nFileSizeLow=0x7743, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUaD8ClaqLlEO55.swf", cAlternateFileName="MUAD8C~1.SWF")) returned 1 [0079.398] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde0b6760, ftCreationTime.dwHighDateTime=0x1d62cf4, ftLastAccessTime.dwLowDateTime=0x6e1fb860, ftLastAccessTime.dwHighDateTime=0x1d62f75, ftLastWriteTime.dwLowDateTime=0x6e1fb860, ftLastWriteTime.dwHighDateTime=0x1d62f75, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="V4k6QyGlWz97VNPnF8", cAlternateFileName="V4K6QY~1")) returned 1 [0079.399] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.399] FindClose (in: hFindFile=0x7eff38 | out: hFindFile=0x7eff38) returned 1 [0079.399] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.401] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0079.401] GetFileType (hFile=0x19c) returned 0x1 [0079.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0079.402] WriteFile (in: hFile=0x19c, lpBuffer=0x10ca8480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10ca8480*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0079.402] GetFileType (hFile=0x19c) returned 0x1 [0079.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0079.403] CloseHandle (hObject=0x19c) returned 1 [0079.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\8o2V68WBvnR.flv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\8o2v68wbvnr.flv"), fInfoLevelId=0x0, lpFileInformation=0x110c64b8 | out: lpFileInformation=0x110c64b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c86eb0, ftCreationTime.dwHighDateTime=0x1d63030, ftLastAccessTime.dwLowDateTime=0xdd999590, ftLastAccessTime.dwHighDateTime=0x1d63190, ftLastWriteTime.dwLowDateTime=0xdd999590, ftLastWriteTime.dwHighDateTime=0x1d63190, nFileSizeHigh=0x0, nFileSizeLow=0x15f78)) returned 1 [0079.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\8o2V68WBvnR.flv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\8o2v68wbvnr.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.403] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0079.403] GetFileType (hFile=0x19c) returned 0x1 [0079.403] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0079.403] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e290 | out: pbBuffer=0x1108e290) returned 1 [0079.403] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e2a0 | out: pbBuffer=0x1108e2a0) returned 1 [0079.403] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f20b01 | out: pbBuffer=0x10f20b01) returned 1 [0079.403] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f20d01 | out: pbBuffer=0x10f20d01) returned 1 [0079.404] ReadFile (in: hFile=0x19c, lpBuffer=0x11092000, nNumberOfBytesToRead=0x15f78, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x11092000*, lpNumberOfBytesRead=0x10c89b8c*=0x15f78, lpOverlapped=0x0) returned 1 [0079.405] GetFileType (hFile=0x19c) returned 0x1 [0079.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.405] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x15f78, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89b8c*=0x15f78, lpOverlapped=0x10c89b90) returned 1 [0079.406] GetFileType (hFile=0x19c) returned 0x1 [0079.406] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15f78, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.406] GetFileType (hFile=0x19c) returned 0x1 [0079.406] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.406] WriteFile (in: hFile=0x19c, lpBuffer=0x10f20c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f20c00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.406] GetFileType (hFile=0x19c) returned 0x1 [0079.406] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15f78, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.406] GetFileType (hFile=0x19c) returned 0x1 [0079.406] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.406] WriteFile (in: hFile=0x19c, lpBuffer=0x10f20e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f20e00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.406] GetFileType (hFile=0x19c) returned 0x1 [0079.406] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15f78, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.406] GetFileType (hFile=0x19c) returned 0x1 [0079.406] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.406] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0079.407] GetFileType (hFile=0x19c) returned 0x1 [0079.407] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x15f78, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.407] CloseHandle (hObject=0x19c) returned 1 [0079.407] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\8o2V68WBvnR.flv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\8o2v68wbvnr.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\8o2V68WBvnR.flv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\8o2v68wbvnr.flv.trapget"), dwFlags=0x1) returned 1 [0079.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\IDYy3chxew 6M1acz.flv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\idyy3chxew 6m1acz.flv"), fInfoLevelId=0x0, lpFileInformation=0x110c65f8 | out: lpFileInformation=0x110c65f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868f9c0, ftCreationTime.dwHighDateTime=0x1d62668, ftLastAccessTime.dwLowDateTime=0x59665010, ftLastAccessTime.dwHighDateTime=0x1d62e7f, ftLastWriteTime.dwLowDateTime=0x59665010, ftLastWriteTime.dwHighDateTime=0x1d62e7f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0a)) returned 1 [0079.416] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\IDYy3chxew 6M1acz.flv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\idyy3chxew 6m1acz.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.416] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0079.416] GetFileType (hFile=0x19c) returned 0x1 [0079.416] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0079.416] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e380 | out: pbBuffer=0x1108e380) returned 1 [0079.416] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e390 | out: pbBuffer=0x1108e390) returned 1 [0079.416] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f21001 | out: pbBuffer=0x10f21001) returned 1 [0079.417] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f21201 | out: pbBuffer=0x10f21201) returned 1 [0079.417] ReadFile (in: hFile=0x19c, lpBuffer=0x10eb2000, nNumberOfBytesToRead=0x13e0a, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10eb2000*, lpNumberOfBytesRead=0x10c89b8c*=0x13e0a, lpOverlapped=0x0) returned 1 [0079.418] GetFileType (hFile=0x19c) returned 0x1 [0079.418] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.418] WriteFile (in: hFile=0x19c, lpBuffer=0x10eec000*, nNumberOfBytesToWrite=0x13e0a, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10eec000*, lpNumberOfBytesWritten=0x10c89b8c*=0x13e0a, lpOverlapped=0x10c89b90) returned 1 [0079.418] GetFileType (hFile=0x19c) returned 0x1 [0079.418] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13e0a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.418] GetFileType (hFile=0x19c) returned 0x1 [0079.418] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.419] WriteFile (in: hFile=0x19c, lpBuffer=0x10f21100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f21100*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.419] GetFileType (hFile=0x19c) returned 0x1 [0079.419] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13e0a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.419] GetFileType (hFile=0x19c) returned 0x1 [0079.419] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.419] WriteFile (in: hFile=0x19c, lpBuffer=0x10f21300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f21300*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.419] GetFileType (hFile=0x19c) returned 0x1 [0079.419] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13e0a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.419] GetFileType (hFile=0x19c) returned 0x1 [0079.419] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.419] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0079.419] GetFileType (hFile=0x19c) returned 0x1 [0079.419] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x13e0a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.419] CloseHandle (hObject=0x19c) returned 1 [0079.419] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\IDYy3chxew 6M1acz.flv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\idyy3chxew 6m1acz.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\IDYy3chxew 6M1acz.flv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\idyy3chxew 6m1acz.flv.trapget"), dwFlags=0x1) returned 1 [0079.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MUaD8ClaqLlEO55.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\muad8claqlleo55.swf"), fInfoLevelId=0x0, lpFileInformation=0x110c6788 | out: lpFileInformation=0x110c6788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bef9d80, ftCreationTime.dwHighDateTime=0x1d62cfa, ftLastAccessTime.dwLowDateTime=0x899b3cd0, ftLastAccessTime.dwHighDateTime=0x1d6271f, ftLastWriteTime.dwLowDateTime=0x899b3cd0, ftLastWriteTime.dwHighDateTime=0x1d6271f, nFileSizeHigh=0x0, nFileSizeLow=0x7743)) returned 1 [0079.420] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MUaD8ClaqLlEO55.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\muad8claqlleo55.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.420] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0079.420] GetFileType (hFile=0x19c) returned 0x1 [0079.420] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0079.420] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e460 | out: pbBuffer=0x1108e460) returned 1 [0079.420] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e470 | out: pbBuffer=0x1108e470) returned 1 [0079.420] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f21401 | out: pbBuffer=0x10f21401) returned 1 [0079.421] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f21601 | out: pbBuffer=0x10f21601) returned 1 [0079.421] ReadFile (in: hFile=0x19c, lpBuffer=0x10cde000, nNumberOfBytesToRead=0x7743, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10cde000*, lpNumberOfBytesRead=0x10c89b8c*=0x7743, lpOverlapped=0x0) returned 1 [0079.422] GetFileType (hFile=0x19c) returned 0x1 [0079.422] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.422] WriteFile (in: hFile=0x19c, lpBuffer=0x10ec6000*, nNumberOfBytesToWrite=0x7743, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ec6000*, lpNumberOfBytesWritten=0x10c89b8c*=0x7743, lpOverlapped=0x10c89b90) returned 1 [0079.422] GetFileType (hFile=0x19c) returned 0x1 [0079.422] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7743, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.422] GetFileType (hFile=0x19c) returned 0x1 [0079.422] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.422] WriteFile (in: hFile=0x19c, lpBuffer=0x10f21500*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f21500*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.422] GetFileType (hFile=0x19c) returned 0x1 [0079.422] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7743, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.422] GetFileType (hFile=0x19c) returned 0x1 [0079.422] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.422] WriteFile (in: hFile=0x19c, lpBuffer=0x10f21700*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10f21700*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.423] GetFileType (hFile=0x19c) returned 0x1 [0079.423] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7743, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.423] GetFileType (hFile=0x19c) returned 0x1 [0079.423] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.423] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0079.423] GetFileType (hFile=0x19c) returned 0x1 [0079.423] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x7743, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.423] CloseHandle (hObject=0x19c) returned 1 [0079.423] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MUaD8ClaqLlEO55.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\muad8claqlleo55.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MUaD8ClaqLlEO55.swf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\muad8claqlleo55.swf.trapget"), dwFlags=0x1) returned 1 [0079.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou"), fInfoLevelId=0x0, lpFileInformation=0x110c68c8 | out: lpFileInformation=0x110c68c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a8e0ab0, ftCreationTime.dwHighDateTime=0x1d62ef5, ftLastAccessTime.dwLowDateTime=0xe329bb90, ftLastAccessTime.dwHighDateTime=0x1d62d8d, ftLastWriteTime.dwLowDateTime=0xe329bb90, ftLastWriteTime.dwHighDateTime=0x1d62d8d, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0079.423] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.423] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\*", lpFindFileData=0x10c899a0 | out: lpFindFileData=0x10c899a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a8e0ab0, ftCreationTime.dwHighDateTime=0x1d62ef5, ftLastAccessTime.dwLowDateTime=0xe329bb90, ftLastAccessTime.dwHighDateTime=0x1d62d8d, ftLastWriteTime.dwLowDateTime=0xe329bb90, ftLastWriteTime.dwHighDateTime=0x1d62d8d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0178 [0079.424] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a8e0ab0, ftCreationTime.dwHighDateTime=0x1d62ef5, ftLastAccessTime.dwLowDateTime=0xe329bb90, ftLastAccessTime.dwHighDateTime=0x1d62d8d, ftLastWriteTime.dwLowDateTime=0xe329bb90, ftLastWriteTime.dwHighDateTime=0x1d62d8d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.424] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x259dc2b0, ftCreationTime.dwHighDateTime=0x1d623bf, ftLastAccessTime.dwLowDateTime=0xacf665a0, ftLastAccessTime.dwHighDateTime=0x1d630f8, ftLastWriteTime.dwLowDateTime=0xacf665a0, ftLastWriteTime.dwHighDateTime=0x1d630f8, nFileSizeHigh=0x0, nFileSizeLow=0xfd81, dwReserved0=0x0, dwReserved1=0x0, cFileName="3alwax_fGJXLXi6o.mp4", cAlternateFileName="3ALWAX~1.MP4")) returned 1 [0079.424] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28578aa0, ftCreationTime.dwHighDateTime=0x1d624b3, ftLastAccessTime.dwLowDateTime=0xbdc9f050, ftLastAccessTime.dwHighDateTime=0x1d625fd, ftLastWriteTime.dwLowDateTime=0xbdc9f050, ftLastWriteTime.dwHighDateTime=0x1d625fd, nFileSizeHigh=0x0, nFileSizeLow=0x4aba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cg Qi.swf", cAlternateFileName="CGQI~1.SWF")) returned 1 [0079.424] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7b2620, ftCreationTime.dwHighDateTime=0x1d6302c, ftLastAccessTime.dwLowDateTime=0x510b2bd0, ftLastAccessTime.dwHighDateTime=0x1d62811, ftLastWriteTime.dwLowDateTime=0x510b2bd0, ftLastWriteTime.dwHighDateTime=0x1d62811, nFileSizeHigh=0x0, nFileSizeLow=0x1277e, dwReserved0=0x0, dwReserved1=0x0, cFileName="fTak8prFqgVMTo73JNS.mkv", cAlternateFileName="FTAK8P~1.MKV")) returned 1 [0079.424] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7810db10, ftCreationTime.dwHighDateTime=0x1d62ff2, ftLastAccessTime.dwLowDateTime=0x6b7a930, ftLastAccessTime.dwHighDateTime=0x1d632fe, ftLastWriteTime.dwLowDateTime=0x6b7a930, ftLastWriteTime.dwHighDateTime=0x1d632fe, nFileSizeHigh=0x0, nFileSizeLow=0x14cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="INCAZzXx1Us0H.swf", cAlternateFileName="INCAZZ~1.SWF")) returned 1 [0079.424] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bbdf20, ftCreationTime.dwHighDateTime=0x1d631a1, ftLastAccessTime.dwLowDateTime=0x7ec7d430, ftLastAccessTime.dwHighDateTime=0x1d62715, ftLastWriteTime.dwLowDateTime=0x7ec7d430, ftLastWriteTime.dwHighDateTime=0x1d62715, nFileSizeHigh=0x0, nFileSizeLow=0x5a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="M4bhfd8dfnhOb9B_i2c7.mp4", cAlternateFileName="M4BHFD~1.MP4")) returned 1 [0079.424] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b116d0, ftCreationTime.dwHighDateTime=0x1d62c89, ftLastAccessTime.dwLowDateTime=0x4d994050, ftLastAccessTime.dwHighDateTime=0x1d62ab3, ftLastWriteTime.dwLowDateTime=0x4d994050, ftLastWriteTime.dwHighDateTime=0x1d62ab3, nFileSizeHigh=0x0, nFileSizeLow=0x4d41, dwReserved0=0x0, dwReserved1=0x0, cFileName="n16b.mp4", cAlternateFileName="")) returned 1 [0079.424] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24f06bf0, ftCreationTime.dwHighDateTime=0x1d631c6, ftLastAccessTime.dwLowDateTime=0x32b21bc0, ftLastAccessTime.dwHighDateTime=0x1d62718, ftLastWriteTime.dwLowDateTime=0x32b21bc0, ftLastWriteTime.dwHighDateTime=0x1d62718, nFileSizeHigh=0x0, nFileSizeLow=0xc1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="XpRU-Q2 gbncO7J3By.avi", cAlternateFileName="XPRU-Q~1.AVI")) returned 1 [0079.424] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x452ba940, ftCreationTime.dwHighDateTime=0x1d62c0b, ftLastAccessTime.dwLowDateTime=0xbeae5f40, ftLastAccessTime.dwHighDateTime=0x1d63266, ftLastWriteTime.dwLowDateTime=0xbeae5f40, ftLastWriteTime.dwHighDateTime=0x1d63266, nFileSizeHigh=0x0, nFileSizeLow=0x1643, dwReserved0=0x0, dwReserved1=0x0, cFileName="YIlg.flv", cAlternateFileName="")) returned 1 [0079.424] FindNextFileW (in: hFindFile=0x7f0178, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.424] FindClose (in: hFindFile=0x7f0178 | out: hFindFile=0x7f0178) returned 1 [0079.424] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.424] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c04 | out: lpMode=0x10c89c04) returned 0 [0079.424] GetFileType (hFile=0x19c) returned 0x1 [0079.424] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0079.424] WriteFile (in: hFile=0x19c, lpBuffer=0x10ca8d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89bf4, lpOverlapped=0x10c89bf8 | out: lpBuffer=0x10ca8d80*, lpNumberOfBytesWritten=0x10c89bf4*=0x464, lpOverlapped=0x10c89bf8) returned 1 [0079.425] GetFileType (hFile=0x19c) returned 0x1 [0079.425] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0079.425] CloseHandle (hObject=0x19c) returned 1 [0079.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\3alwax_fGJXLXi6o.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\3alwax_fgjxlxi6o.mp4"), fInfoLevelId=0x0, lpFileInformation=0x110c6b98 | out: lpFileInformation=0x110c6b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x259dc2b0, ftCreationTime.dwHighDateTime=0x1d623bf, ftLastAccessTime.dwLowDateTime=0xacf665a0, ftLastAccessTime.dwHighDateTime=0x1d630f8, ftLastWriteTime.dwLowDateTime=0xacf665a0, ftLastWriteTime.dwHighDateTime=0x1d630f8, nFileSizeHigh=0x0, nFileSizeLow=0xfd81)) returned 1 [0079.426] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\3alwax_fGJXLXi6o.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\3alwax_fgjxlxi6o.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.426] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.426] GetFileType (hFile=0x19c) returned 0x1 [0079.426] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.426] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e5c0 | out: pbBuffer=0x1108e5c0) returned 1 [0079.426] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e5d0 | out: pbBuffer=0x1108e5d0) returned 1 [0079.426] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f21a01 | out: pbBuffer=0x10f21a01) returned 1 [0079.428] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f21c01 | out: pbBuffer=0x10f21c01) returned 1 [0079.428] ReadFile (in: hFile=0x19c, lpBuffer=0x10f00000, nNumberOfBytesToRead=0xfd81, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10f00000*, lpNumberOfBytesRead=0x10c89b28*=0xfd81, lpOverlapped=0x0) returned 1 [0079.430] GetFileType (hFile=0x19c) returned 0x1 [0079.430] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.430] WriteFile (in: hFile=0x19c, lpBuffer=0x10f22000*, nNumberOfBytesToWrite=0xfd81, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f22000*, lpNumberOfBytesWritten=0x10c89b28*=0xfd81, lpOverlapped=0x10c89b2c) returned 1 [0079.430] GetFileType (hFile=0x19c) returned 0x1 [0079.430] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfd81, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.430] GetFileType (hFile=0x19c) returned 0x1 [0079.430] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.430] WriteFile (in: hFile=0x19c, lpBuffer=0x10f21b00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f21b00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.430] GetFileType (hFile=0x19c) returned 0x1 [0079.430] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfd81, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.430] GetFileType (hFile=0x19c) returned 0x1 [0079.430] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.431] WriteFile (in: hFile=0x19c, lpBuffer=0x10f21d00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f21d00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.431] GetFileType (hFile=0x19c) returned 0x1 [0079.431] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfd81, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.431] GetFileType (hFile=0x19c) returned 0x1 [0079.431] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.431] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.431] GetFileType (hFile=0x19c) returned 0x1 [0079.431] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfd81, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.431] CloseHandle (hObject=0x19c) returned 1 [0079.431] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\3alwax_fGJXLXi6o.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\3alwax_fgjxlxi6o.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\3alwax_fGJXLXi6o.mp4.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\3alwax_fgjxlxi6o.mp4.trapget"), dwFlags=0x1) returned 1 [0079.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\Cg Qi.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\cg qi.swf"), fInfoLevelId=0x0, lpFileInformation=0x110c6cd8 | out: lpFileInformation=0x110c6cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28578aa0, ftCreationTime.dwHighDateTime=0x1d624b3, ftLastAccessTime.dwLowDateTime=0xbdc9f050, ftLastAccessTime.dwHighDateTime=0x1d625fd, ftLastWriteTime.dwLowDateTime=0xbdc9f050, ftLastWriteTime.dwHighDateTime=0x1d625fd, nFileSizeHigh=0x0, nFileSizeLow=0x4aba)) returned 1 [0079.432] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\Cg Qi.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\cg qi.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.432] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.432] GetFileType (hFile=0x19c) returned 0x1 [0079.432] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.432] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e6b0 | out: pbBuffer=0x1108e6b0) returned 1 [0079.432] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e6c0 | out: pbBuffer=0x1108e6c0) returned 1 [0079.432] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f21f01 | out: pbBuffer=0x10f21f01) returned 1 [0079.432] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f10101 | out: pbBuffer=0x10f10101) returned 1 [0079.433] ReadFile (in: hFile=0x19c, lpBuffer=0x10f32000, nNumberOfBytesToRead=0x4aba, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10f32000*, lpNumberOfBytesRead=0x10c89b28*=0x4aba, lpOverlapped=0x0) returned 1 [0079.434] GetFileType (hFile=0x19c) returned 0x1 [0079.434] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.434] WriteFile (in: hFile=0x19c, lpBuffer=0x10f37000*, nNumberOfBytesToWrite=0x4aba, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f37000*, lpNumberOfBytesWritten=0x10c89b28*=0x4aba, lpOverlapped=0x10c89b2c) returned 1 [0079.434] GetFileType (hFile=0x19c) returned 0x1 [0079.434] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4aba, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.434] GetFileType (hFile=0x19c) returned 0x1 [0079.434] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.434] WriteFile (in: hFile=0x19c, lpBuffer=0x10f10000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f10000*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.434] GetFileType (hFile=0x19c) returned 0x1 [0079.434] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4aba, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.434] GetFileType (hFile=0x19c) returned 0x1 [0079.434] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.434] WriteFile (in: hFile=0x19c, lpBuffer=0x10f10200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f10200*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.434] GetFileType (hFile=0x19c) returned 0x1 [0079.434] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4aba, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.435] GetFileType (hFile=0x19c) returned 0x1 [0079.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.435] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.435] GetFileType (hFile=0x19c) returned 0x1 [0079.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4aba, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.435] CloseHandle (hObject=0x19c) returned 1 [0079.435] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\Cg Qi.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\cg qi.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\Cg Qi.swf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\cg qi.swf.trapget"), dwFlags=0x1) returned 1 [0079.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\INCAZzXx1Us0H.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\incazzxx1us0h.swf"), fInfoLevelId=0x0, lpFileInformation=0x110c6e18 | out: lpFileInformation=0x110c6e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7810db10, ftCreationTime.dwHighDateTime=0x1d62ff2, ftLastAccessTime.dwLowDateTime=0x6b7a930, ftLastAccessTime.dwHighDateTime=0x1d632fe, ftLastWriteTime.dwLowDateTime=0x6b7a930, ftLastWriteTime.dwHighDateTime=0x1d632fe, nFileSizeHigh=0x0, nFileSizeLow=0x14cc1)) returned 1 [0079.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\INCAZzXx1Us0H.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\incazzxx1us0h.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.435] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.435] GetFileType (hFile=0x19c) returned 0x1 [0079.436] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.436] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e790 | out: pbBuffer=0x1108e790) returned 1 [0079.436] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e7a0 | out: pbBuffer=0x1108e7a0) returned 1 [0079.436] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f10301 | out: pbBuffer=0x10f10301) returned 1 [0079.436] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f10501 | out: pbBuffer=0x10f10501) returned 1 [0079.436] ReadFile (in: hFile=0x19c, lpBuffer=0x10f40000, nNumberOfBytesToRead=0x14cc1, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10f40000*, lpNumberOfBytesRead=0x10c89b28*=0x14cc1, lpOverlapped=0x0) returned 1 [0079.438] GetFileType (hFile=0x19c) returned 0x1 [0079.438] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.438] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x14cc1, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89b28*=0x14cc1, lpOverlapped=0x10c89b2c) returned 1 [0079.438] GetFileType (hFile=0x19c) returned 0x1 [0079.438] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14cc1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.438] GetFileType (hFile=0x19c) returned 0x1 [0079.438] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.438] WriteFile (in: hFile=0x19c, lpBuffer=0x10f10400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f10400*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.439] GetFileType (hFile=0x19c) returned 0x1 [0079.439] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14cc1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.439] GetFileType (hFile=0x19c) returned 0x1 [0079.439] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.439] WriteFile (in: hFile=0x19c, lpBuffer=0x10f10600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f10600*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.439] GetFileType (hFile=0x19c) returned 0x1 [0079.439] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14cc1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.439] GetFileType (hFile=0x19c) returned 0x1 [0079.439] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.439] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.439] GetFileType (hFile=0x19c) returned 0x1 [0079.439] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14cc1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.439] CloseHandle (hObject=0x19c) returned 1 [0079.439] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\INCAZzXx1Us0H.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\incazzxx1us0h.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\INCAZzXx1Us0H.swf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\incazzxx1us0h.swf.trapget"), dwFlags=0x1) returned 1 [0079.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\M4bhfd8dfnhOb9B_i2c7.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\m4bhfd8dfnhob9b_i2c7.mp4"), fInfoLevelId=0x0, lpFileInformation=0x110c6fa8 | out: lpFileInformation=0x110c6fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bbdf20, ftCreationTime.dwHighDateTime=0x1d631a1, ftLastAccessTime.dwLowDateTime=0x7ec7d430, ftLastAccessTime.dwHighDateTime=0x1d62715, ftLastWriteTime.dwLowDateTime=0x7ec7d430, ftLastWriteTime.dwHighDateTime=0x1d62715, nFileSizeHigh=0x0, nFileSizeLow=0x5a90)) returned 1 [0079.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\M4bhfd8dfnhOb9B_i2c7.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\m4bhfd8dfnhob9b_i2c7.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.440] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.440] GetFileType (hFile=0x19c) returned 0x1 [0079.440] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.440] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e880 | out: pbBuffer=0x1108e880) returned 1 [0079.440] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e890 | out: pbBuffer=0x1108e890) returned 1 [0079.440] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f10701 | out: pbBuffer=0x10f10701) returned 1 [0079.440] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f10901 | out: pbBuffer=0x10f10901) returned 1 [0079.441] ReadFile (in: hFile=0x19c, lpBuffer=0x1101a000, nNumberOfBytesToRead=0x5a90, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x1101a000*, lpNumberOfBytesRead=0x10c89b28*=0x5a90, lpOverlapped=0x0) returned 1 [0079.442] GetFileType (hFile=0x19c) returned 0x1 [0079.442] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.442] WriteFile (in: hFile=0x19c, lpBuffer=0x11020000*, nNumberOfBytesToWrite=0x5a90, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x11020000*, lpNumberOfBytesWritten=0x10c89b28*=0x5a90, lpOverlapped=0x10c89b2c) returned 1 [0079.442] GetFileType (hFile=0x19c) returned 0x1 [0079.442] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5a90, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.442] GetFileType (hFile=0x19c) returned 0x1 [0079.442] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.442] WriteFile (in: hFile=0x19c, lpBuffer=0x10f10800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f10800*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.442] GetFileType (hFile=0x19c) returned 0x1 [0079.442] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5a90, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.442] GetFileType (hFile=0x19c) returned 0x1 [0079.442] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.442] WriteFile (in: hFile=0x19c, lpBuffer=0x10f10a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f10a00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.442] GetFileType (hFile=0x19c) returned 0x1 [0079.443] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5a90, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.443] GetFileType (hFile=0x19c) returned 0x1 [0079.443] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.443] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.443] GetFileType (hFile=0x19c) returned 0x1 [0079.443] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x5a90, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.443] CloseHandle (hObject=0x19c) returned 1 [0079.443] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\M4bhfd8dfnhOb9B_i2c7.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\m4bhfd8dfnhob9b_i2c7.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\M4bhfd8dfnhOb9B_i2c7.mp4.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\m4bhfd8dfnhob9b_i2c7.mp4.trapget"), dwFlags=0x1) returned 1 [0079.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\XpRU-Q2 gbncO7J3By.avi" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\xpru-q2 gbnco7j3by.avi"), fInfoLevelId=0x0, lpFileInformation=0x110c70e8 | out: lpFileInformation=0x110c70e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24f06bf0, ftCreationTime.dwHighDateTime=0x1d631c6, ftLastAccessTime.dwLowDateTime=0x32b21bc0, ftLastAccessTime.dwHighDateTime=0x1d62718, ftLastWriteTime.dwLowDateTime=0x32b21bc0, ftLastWriteTime.dwHighDateTime=0x1d62718, nFileSizeHigh=0x0, nFileSizeLow=0xc1f)) returned 1 [0079.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\XpRU-Q2 gbncO7J3By.avi" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\xpru-q2 gbnco7j3by.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.443] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.444] GetFileType (hFile=0x19c) returned 0x1 [0079.444] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.444] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e970 | out: pbBuffer=0x1108e970) returned 1 [0079.444] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e980 | out: pbBuffer=0x1108e980) returned 1 [0079.444] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f10b01 | out: pbBuffer=0x10f10b01) returned 1 [0079.444] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f10d01 | out: pbBuffer=0x10f10d01) returned 1 [0079.444] ReadFile (in: hFile=0x19c, lpBuffer=0x11034000, nNumberOfBytesToRead=0xc1f, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x11034000*, lpNumberOfBytesRead=0x10c89b28*=0xc1f, lpOverlapped=0x0) returned 1 [0079.445] GetFileType (hFile=0x19c) returned 0x1 [0079.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.445] WriteFile (in: hFile=0x19c, lpBuffer=0x11034c80*, nNumberOfBytesToWrite=0xc1f, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x11034c80*, lpNumberOfBytesWritten=0x10c89b28*=0xc1f, lpOverlapped=0x10c89b2c) returned 1 [0079.445] GetFileType (hFile=0x19c) returned 0x1 [0079.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc1f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.445] GetFileType (hFile=0x19c) returned 0x1 [0079.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.445] WriteFile (in: hFile=0x19c, lpBuffer=0x10f10c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f10c00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.445] GetFileType (hFile=0x19c) returned 0x1 [0079.445] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc1f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.445] GetFileType (hFile=0x19c) returned 0x1 [0079.446] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.446] WriteFile (in: hFile=0x19c, lpBuffer=0x10f10e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f10e00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.446] GetFileType (hFile=0x19c) returned 0x1 [0079.446] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc1f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.446] GetFileType (hFile=0x19c) returned 0x1 [0079.446] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.446] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.446] GetFileType (hFile=0x19c) returned 0x1 [0079.446] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc1f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.446] CloseHandle (hObject=0x19c) returned 1 [0079.446] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\XpRU-Q2 gbncO7J3By.avi" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\xpru-q2 gbnco7j3by.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\XpRU-Q2 gbncO7J3By.avi.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\xpru-q2 gbnco7j3by.avi.trapget"), dwFlags=0x1) returned 1 [0079.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\YIlg.flv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\yilg.flv"), fInfoLevelId=0x0, lpFileInformation=0x110c7228 | out: lpFileInformation=0x110c7228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x452ba940, ftCreationTime.dwHighDateTime=0x1d62c0b, ftLastAccessTime.dwLowDateTime=0xbeae5f40, ftLastAccessTime.dwHighDateTime=0x1d63266, ftLastWriteTime.dwLowDateTime=0xbeae5f40, ftLastWriteTime.dwHighDateTime=0x1d63266, nFileSizeHigh=0x0, nFileSizeLow=0x1643)) returned 1 [0079.447] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\YIlg.flv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\yilg.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.447] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.447] GetFileType (hFile=0x19c) returned 0x1 [0079.447] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.447] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ea60 | out: pbBuffer=0x1108ea60) returned 1 [0079.447] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ea70 | out: pbBuffer=0x1108ea70) returned 1 [0079.447] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f10f01 | out: pbBuffer=0x10f10f01) returned 1 [0079.447] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f11101 | out: pbBuffer=0x10f11101) returned 1 [0079.447] ReadFile (in: hFile=0x19c, lpBuffer=0x10dca000, nNumberOfBytesToRead=0x1643, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10dca000*, lpNumberOfBytesRead=0x10c89b28*=0x1643, lpOverlapped=0x0) returned 1 [0079.448] GetFileType (hFile=0x19c) returned 0x1 [0079.448] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.448] WriteFile (in: hFile=0x19c, lpBuffer=0x10dcb800*, nNumberOfBytesToWrite=0x1643, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10dcb800*, lpNumberOfBytesWritten=0x10c89b28*=0x1643, lpOverlapped=0x10c89b2c) returned 1 [0079.448] GetFileType (hFile=0x19c) returned 0x1 [0079.448] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1643, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.448] GetFileType (hFile=0x19c) returned 0x1 [0079.448] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.448] WriteFile (in: hFile=0x19c, lpBuffer=0x10f11000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f11000*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.449] GetFileType (hFile=0x19c) returned 0x1 [0079.449] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1643, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.449] GetFileType (hFile=0x19c) returned 0x1 [0079.449] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.449] WriteFile (in: hFile=0x19c, lpBuffer=0x10f11200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f11200*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.449] GetFileType (hFile=0x19c) returned 0x1 [0079.449] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1643, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.449] GetFileType (hFile=0x19c) returned 0x1 [0079.449] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.449] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.449] GetFileType (hFile=0x19c) returned 0x1 [0079.449] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1643, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.449] CloseHandle (hObject=0x19c) returned 1 [0079.449] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\YIlg.flv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\yilg.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\YIlg.flv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\yilg.flv.trapget"), dwFlags=0x1) returned 1 [0079.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\fTak8prFqgVMTo73JNS.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\ftak8prfqgvmto73jns.mkv"), fInfoLevelId=0x0, lpFileInformation=0x110c73b8 | out: lpFileInformation=0x110c73b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7b2620, ftCreationTime.dwHighDateTime=0x1d6302c, ftLastAccessTime.dwLowDateTime=0x510b2bd0, ftLastAccessTime.dwHighDateTime=0x1d62811, ftLastWriteTime.dwLowDateTime=0x510b2bd0, ftLastWriteTime.dwHighDateTime=0x1d62811, nFileSizeHigh=0x0, nFileSizeLow=0x1277e)) returned 1 [0079.450] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\fTak8prFqgVMTo73JNS.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\ftak8prfqgvmto73jns.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.450] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.450] GetFileType (hFile=0x19c) returned 0x1 [0079.450] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.450] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108eb40 | out: pbBuffer=0x1108eb40) returned 1 [0079.450] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108eb50 | out: pbBuffer=0x1108eb50) returned 1 [0079.453] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f11301 | out: pbBuffer=0x10f11301) returned 1 [0079.454] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f11501 | out: pbBuffer=0x10f11501) returned 1 [0079.454] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x1277e, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89b28*=0x1277e, lpOverlapped=0x0) returned 1 [0079.455] GetFileType (hFile=0x19c) returned 0x1 [0079.456] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.456] WriteFile (in: hFile=0x19c, lpBuffer=0x1103c000*, nNumberOfBytesToWrite=0x1277e, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1103c000*, lpNumberOfBytesWritten=0x10c89b28*=0x1277e, lpOverlapped=0x10c89b2c) returned 1 [0079.456] GetFileType (hFile=0x19c) returned 0x1 [0079.456] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1277e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.456] GetFileType (hFile=0x19c) returned 0x1 [0079.456] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.456] WriteFile (in: hFile=0x19c, lpBuffer=0x10f11400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f11400*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.456] GetFileType (hFile=0x19c) returned 0x1 [0079.456] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1277e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.456] GetFileType (hFile=0x19c) returned 0x1 [0079.456] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.456] WriteFile (in: hFile=0x19c, lpBuffer=0x10f11600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f11600*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.457] GetFileType (hFile=0x19c) returned 0x1 [0079.457] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1277e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.457] GetFileType (hFile=0x19c) returned 0x1 [0079.457] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.457] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.457] GetFileType (hFile=0x19c) returned 0x1 [0079.457] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1277e, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.457] CloseHandle (hObject=0x19c) returned 1 [0079.457] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\fTak8prFqgVMTo73JNS.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\ftak8prfqgvmto73jns.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\fTak8prFqgVMTo73JNS.mkv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\ftak8prfqgvmto73jns.mkv.trapget"), dwFlags=0x1) returned 1 [0079.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\n16b.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\n16b.mp4"), fInfoLevelId=0x0, lpFileInformation=0x110c74f8 | out: lpFileInformation=0x110c74f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b116d0, ftCreationTime.dwHighDateTime=0x1d62c89, ftLastAccessTime.dwLowDateTime=0x4d994050, ftLastAccessTime.dwHighDateTime=0x1d62ab3, ftLastWriteTime.dwLowDateTime=0x4d994050, ftLastWriteTime.dwHighDateTime=0x1d62ab3, nFileSizeHigh=0x0, nFileSizeLow=0x4d41)) returned 1 [0079.458] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\n16b.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\n16b.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.458] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.458] GetFileType (hFile=0x19c) returned 0x1 [0079.458] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.458] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ec30 | out: pbBuffer=0x1108ec30) returned 1 [0079.458] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ec40 | out: pbBuffer=0x1108ec40) returned 1 [0079.458] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f11701 | out: pbBuffer=0x10f11701) returned 1 [0079.458] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f11901 | out: pbBuffer=0x10f11901) returned 1 [0079.459] ReadFile (in: hFile=0x19c, lpBuffer=0x11050000, nNumberOfBytesToRead=0x4d41, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x11050000*, lpNumberOfBytesRead=0x10c89b28*=0x4d41, lpOverlapped=0x0) returned 1 [0079.459] GetFileType (hFile=0x19c) returned 0x1 [0079.460] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.460] WriteFile (in: hFile=0x19c, lpBuffer=0x11055000*, nNumberOfBytesToWrite=0x4d41, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x11055000*, lpNumberOfBytesWritten=0x10c89b28*=0x4d41, lpOverlapped=0x10c89b2c) returned 1 [0079.460] GetFileType (hFile=0x19c) returned 0x1 [0079.460] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4d41, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.460] GetFileType (hFile=0x19c) returned 0x1 [0079.460] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.460] WriteFile (in: hFile=0x19c, lpBuffer=0x10f11800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f11800*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.460] GetFileType (hFile=0x19c) returned 0x1 [0079.460] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4d41, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.460] GetFileType (hFile=0x19c) returned 0x1 [0079.460] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.460] WriteFile (in: hFile=0x19c, lpBuffer=0x10f11a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f11a00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.460] GetFileType (hFile=0x19c) returned 0x1 [0079.460] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4d41, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.460] GetFileType (hFile=0x19c) returned 0x1 [0079.460] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.460] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.460] GetFileType (hFile=0x19c) returned 0x1 [0079.460] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4d41, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.461] CloseHandle (hObject=0x19c) returned 1 [0079.461] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\n16b.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\n16b.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\MnOU\\n16b.mp4.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\mnou\\n16b.mp4.trapget"), dwFlags=0x1) returned 1 [0079.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8"), fInfoLevelId=0x0, lpFileInformation=0x110c7688 | out: lpFileInformation=0x110c7688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde0b6760, ftCreationTime.dwHighDateTime=0x1d62cf4, ftLastAccessTime.dwLowDateTime=0x6e1fb860, ftLastAccessTime.dwHighDateTime=0x1d62f75, ftLastWriteTime.dwLowDateTime=0x6e1fb860, ftLastWriteTime.dwHighDateTime=0x1d62f75, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0079.461] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.461] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\*", lpFindFileData=0x10c899a0 | out: lpFindFileData=0x10c899a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde0b6760, ftCreationTime.dwHighDateTime=0x1d62cf4, ftLastAccessTime.dwLowDateTime=0x6e1fb860, ftLastAccessTime.dwHighDateTime=0x1d62f75, ftLastWriteTime.dwLowDateTime=0x6e1fb860, ftLastWriteTime.dwHighDateTime=0x1d62f75, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eff38 [0079.461] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde0b6760, ftCreationTime.dwHighDateTime=0x1d62cf4, ftLastAccessTime.dwLowDateTime=0x6e1fb860, ftLastAccessTime.dwHighDateTime=0x1d62f75, ftLastWriteTime.dwLowDateTime=0x6e1fb860, ftLastWriteTime.dwHighDateTime=0x1d62f75, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.461] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd954520, ftCreationTime.dwHighDateTime=0x1d62bc4, ftLastAccessTime.dwLowDateTime=0x7b8842d0, ftLastAccessTime.dwHighDateTime=0x1d62fd7, ftLastWriteTime.dwLowDateTime=0x7b8842d0, ftLastWriteTime.dwHighDateTime=0x1d62fd7, nFileSizeHigh=0x0, nFileSizeLow=0x57cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="3OLDt6cq.mkv", cAlternateFileName="")) returned 1 [0079.461] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4d47e0, ftCreationTime.dwHighDateTime=0x1d62990, ftLastAccessTime.dwLowDateTime=0xd332a300, ftLastAccessTime.dwHighDateTime=0x1d62a36, ftLastWriteTime.dwLowDateTime=0xd332a300, ftLastWriteTime.dwHighDateTime=0x1d62a36, nFileSizeHigh=0x0, nFileSizeLow=0x11ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="41tRfsgmzmN.swf", cAlternateFileName="41TRFS~1.SWF")) returned 1 [0079.461] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3cf60, ftCreationTime.dwHighDateTime=0x1d62af6, ftLastAccessTime.dwLowDateTime=0x274ca950, ftLastAccessTime.dwHighDateTime=0x1d630f3, ftLastWriteTime.dwLowDateTime=0x274ca950, ftLastWriteTime.dwHighDateTime=0x1d630f3, nFileSizeHigh=0x0, nFileSizeLow=0xa811, dwReserved0=0x0, dwReserved1=0x0, cFileName="AJCpLI.mkv", cAlternateFileName="")) returned 1 [0079.461] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19526130, ftCreationTime.dwHighDateTime=0x1d62493, ftLastAccessTime.dwLowDateTime=0xac2ce2e0, ftLastAccessTime.dwHighDateTime=0x1d62b4c, ftLastWriteTime.dwLowDateTime=0xac2ce2e0, ftLastWriteTime.dwHighDateTime=0x1d62b4c, nFileSizeHigh=0x0, nFileSizeLow=0x1500a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ayln 62imRKAcGDVXxI.swf", cAlternateFileName="AYLN62~1.SWF")) returned 1 [0079.461] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9962bc0, ftCreationTime.dwHighDateTime=0x1d6257b, ftLastAccessTime.dwLowDateTime=0xdfebbc10, ftLastAccessTime.dwHighDateTime=0x1d632c6, ftLastWriteTime.dwLowDateTime=0xdfebbc10, ftLastWriteTime.dwHighDateTime=0x1d632c6, nFileSizeHigh=0x0, nFileSizeLow=0xc525, dwReserved0=0x0, dwReserved1=0x0, cFileName="bohA65zXuU8Jv.swf", cAlternateFileName="BOHA65~1.SWF")) returned 1 [0079.462] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5652eae0, ftCreationTime.dwHighDateTime=0x1d62642, ftLastAccessTime.dwLowDateTime=0x9e860be0, ftLastAccessTime.dwHighDateTime=0x1d62e98, ftLastWriteTime.dwLowDateTime=0x9e860be0, ftLastWriteTime.dwHighDateTime=0x1d62e98, nFileSizeHigh=0x0, nFileSizeLow=0x2b89, dwReserved0=0x0, dwReserved1=0x0, cFileName="HfLAR3QfUl8AwB.flv", cAlternateFileName="HFLAR3~1.FLV")) returned 1 [0079.462] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f44ac00, ftCreationTime.dwHighDateTime=0x1d62545, ftLastAccessTime.dwLowDateTime=0xde724770, ftLastAccessTime.dwHighDateTime=0x1d62fd1, ftLastWriteTime.dwLowDateTime=0xde724770, ftLastWriteTime.dwHighDateTime=0x1d62fd1, nFileSizeHigh=0x0, nFileSizeLow=0xb98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="KRnMMNremuggqOt.mp4", cAlternateFileName="KRNMMN~1.MP4")) returned 1 [0079.462] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14bc9a60, ftCreationTime.dwHighDateTime=0x1d62d70, ftLastAccessTime.dwLowDateTime=0x7eeb4e80, ftLastAccessTime.dwHighDateTime=0x1d62af6, ftLastWriteTime.dwLowDateTime=0x7eeb4e80, ftLastWriteTime.dwHighDateTime=0x1d62af6, nFileSizeHigh=0x0, nFileSizeLow=0x906a, dwReserved0=0x0, dwReserved1=0x0, cFileName="O5PwbBM.swf", cAlternateFileName="")) returned 1 [0079.462] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248c5c70, ftCreationTime.dwHighDateTime=0x1d63025, ftLastAccessTime.dwLowDateTime=0x31078a60, ftLastAccessTime.dwHighDateTime=0x1d6306b, ftLastWriteTime.dwLowDateTime=0x31078a60, ftLastWriteTime.dwHighDateTime=0x1d6306b, nFileSizeHigh=0x0, nFileSizeLow=0x85dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqtqHUCdOZ0y32Kf.mp4", cAlternateFileName="SQTQHU~1.MP4")) returned 1 [0079.462] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f50e10, ftCreationTime.dwHighDateTime=0x1d62739, ftLastAccessTime.dwLowDateTime=0x2db4e800, ftLastAccessTime.dwHighDateTime=0x1d62f2e, ftLastWriteTime.dwLowDateTime=0x2db4e800, ftLastWriteTime.dwHighDateTime=0x1d62f2e, nFileSizeHigh=0x0, nFileSizeLow=0x18f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zqbwyf_RI78EZ.mp4", cAlternateFileName="ZQBWYF~1.MP4")) returned 1 [0079.462] FindNextFileW (in: hFindFile=0x7eff38, lpFindFileData=0x10c899c0 | out: lpFindFileData=0x10c899c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.462] FindClose (in: hFindFile=0x7eff38 | out: hFindFile=0x7eff38) returned 1 [0079.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.477] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c04 | out: lpMode=0x10c89c04) returned 0 [0079.477] GetFileType (hFile=0x19c) returned 0x1 [0079.477] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0079.477] WriteFile (in: hFile=0x19c, lpBuffer=0x10ca9680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89bf4, lpOverlapped=0x10c89bf8 | out: lpBuffer=0x10ca9680*, lpNumberOfBytesWritten=0x10c89bf4*=0x464, lpOverlapped=0x10c89bf8) returned 1 [0079.478] GetFileType (hFile=0x19c) returned 0x1 [0079.478] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bdc | out: lpNewFilePointer=0x0) returned 1 [0079.478] CloseHandle (hObject=0x19c) returned 1 [0079.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\3OLDt6cq.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\3oldt6cq.mkv"), fInfoLevelId=0x0, lpFileInformation=0x110c7a98 | out: lpFileInformation=0x110c7a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd954520, ftCreationTime.dwHighDateTime=0x1d62bc4, ftLastAccessTime.dwLowDateTime=0x7b8842d0, ftLastAccessTime.dwHighDateTime=0x1d62fd7, ftLastWriteTime.dwLowDateTime=0x7b8842d0, ftLastWriteTime.dwHighDateTime=0x1d62fd7, nFileSizeHigh=0x0, nFileSizeLow=0x57cf)) returned 1 [0079.479] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\3OLDt6cq.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\3oldt6cq.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.479] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.479] GetFileType (hFile=0x19c) returned 0x1 [0079.479] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.479] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ed90 | out: pbBuffer=0x1108ed90) returned 1 [0079.479] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108eda0 | out: pbBuffer=0x1108eda0) returned 1 [0079.479] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f11b01 | out: pbBuffer=0x10f11b01) returned 1 [0079.479] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f11d01 | out: pbBuffer=0x10f11d01) returned 1 [0079.480] ReadFile (in: hFile=0x19c, lpBuffer=0x1105c000, nNumberOfBytesToRead=0x57cf, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x1105c000*, lpNumberOfBytesRead=0x10c89b28*=0x57cf, lpOverlapped=0x0) returned 1 [0079.480] GetFileType (hFile=0x19c) returned 0x1 [0079.480] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.481] WriteFile (in: hFile=0x19c, lpBuffer=0x11062000*, nNumberOfBytesToWrite=0x57cf, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x11062000*, lpNumberOfBytesWritten=0x10c89b28*=0x57cf, lpOverlapped=0x10c89b2c) returned 1 [0079.481] GetFileType (hFile=0x19c) returned 0x1 [0079.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x57cf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.481] GetFileType (hFile=0x19c) returned 0x1 [0079.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.481] WriteFile (in: hFile=0x19c, lpBuffer=0x10f11c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f11c00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.481] GetFileType (hFile=0x19c) returned 0x1 [0079.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x57cf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.481] GetFileType (hFile=0x19c) returned 0x1 [0079.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.481] WriteFile (in: hFile=0x19c, lpBuffer=0x10f11e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f11e00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.481] GetFileType (hFile=0x19c) returned 0x1 [0079.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x57cf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.481] GetFileType (hFile=0x19c) returned 0x1 [0079.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.481] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.481] GetFileType (hFile=0x19c) returned 0x1 [0079.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x57cf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.481] CloseHandle (hObject=0x19c) returned 1 [0079.482] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\3OLDt6cq.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\3oldt6cq.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\3OLDt6cq.mkv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\3oldt6cq.mkv.trapget"), dwFlags=0x1) returned 1 [0079.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\41tRfsgmzmN.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\41trfsgmzmn.swf"), fInfoLevelId=0x0, lpFileInformation=0x110c7bd8 | out: lpFileInformation=0x110c7bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4d47e0, ftCreationTime.dwHighDateTime=0x1d62990, ftLastAccessTime.dwLowDateTime=0xd332a300, ftLastAccessTime.dwHighDateTime=0x1d62a36, ftLastWriteTime.dwLowDateTime=0xd332a300, ftLastWriteTime.dwHighDateTime=0x1d62a36, nFileSizeHigh=0x0, nFileSizeLow=0x11ba2)) returned 1 [0079.482] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\41tRfsgmzmN.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\41trfsgmzmn.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.482] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.482] GetFileType (hFile=0x19c) returned 0x1 [0079.482] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.483] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ee80 | out: pbBuffer=0x1108ee80) returned 1 [0079.483] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ee90 | out: pbBuffer=0x1108ee90) returned 1 [0079.483] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10f11f01 | out: pbBuffer=0x10f11f01) returned 1 [0079.483] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106c101 | out: pbBuffer=0x1106c101) returned 1 [0079.483] ReadFile (in: hFile=0x19c, lpBuffer=0x11070000, nNumberOfBytesToRead=0x11ba2, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x11070000*, lpNumberOfBytesRead=0x10c89b28*=0x11ba2, lpOverlapped=0x0) returned 1 [0079.485] GetFileType (hFile=0x19c) returned 0x1 [0079.485] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.485] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfa000*, nNumberOfBytesToWrite=0x11ba2, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10cfa000*, lpNumberOfBytesWritten=0x10c89b28*=0x11ba2, lpOverlapped=0x10c89b2c) returned 1 [0079.485] GetFileType (hFile=0x19c) returned 0x1 [0079.485] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11ba2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.485] GetFileType (hFile=0x19c) returned 0x1 [0079.485] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.485] WriteFile (in: hFile=0x19c, lpBuffer=0x1106c000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106c000*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.485] GetFileType (hFile=0x19c) returned 0x1 [0079.485] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11ba2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.485] GetFileType (hFile=0x19c) returned 0x1 [0079.485] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.485] WriteFile (in: hFile=0x19c, lpBuffer=0x1106c200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106c200*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.486] GetFileType (hFile=0x19c) returned 0x1 [0079.486] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11ba2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.486] GetFileType (hFile=0x19c) returned 0x1 [0079.486] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.486] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.486] GetFileType (hFile=0x19c) returned 0x1 [0079.486] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x11ba2, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.486] CloseHandle (hObject=0x19c) returned 1 [0079.486] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\41tRfsgmzmN.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\41trfsgmzmn.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\41tRfsgmzmN.swf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\41trfsgmzmn.swf.trapget"), dwFlags=0x1) returned 1 [0079.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\AJCpLI.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\ajcpli.mkv"), fInfoLevelId=0x0, lpFileInformation=0x110c7d18 | out: lpFileInformation=0x110c7d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3cf60, ftCreationTime.dwHighDateTime=0x1d62af6, ftLastAccessTime.dwLowDateTime=0x274ca950, ftLastAccessTime.dwHighDateTime=0x1d630f3, ftLastWriteTime.dwLowDateTime=0x274ca950, ftLastWriteTime.dwHighDateTime=0x1d630f3, nFileSizeHigh=0x0, nFileSizeLow=0xa811)) returned 1 [0079.486] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\AJCpLI.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\ajcpli.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.487] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.487] GetFileType (hFile=0x19c) returned 0x1 [0079.487] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.487] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ef70 | out: pbBuffer=0x1108ef70) returned 1 [0079.487] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ef80 | out: pbBuffer=0x1108ef80) returned 1 [0079.487] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106c301 | out: pbBuffer=0x1106c301) returned 1 [0079.487] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106c501 | out: pbBuffer=0x1106c501) returned 1 [0079.488] ReadFile (in: hFile=0x19c, lpBuffer=0x10d18000, nNumberOfBytesToRead=0xa811, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10d18000*, lpNumberOfBytesRead=0x10c89b28*=0xa811, lpOverlapped=0x0) returned 1 [0079.489] GetFileType (hFile=0x19c) returned 0x1 [0079.489] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.489] WriteFile (in: hFile=0x19c, lpBuffer=0x10d24000*, nNumberOfBytesToWrite=0xa811, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10d24000*, lpNumberOfBytesWritten=0x10c89b28*=0xa811, lpOverlapped=0x10c89b2c) returned 1 [0079.489] GetFileType (hFile=0x19c) returned 0x1 [0079.489] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa811, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.489] GetFileType (hFile=0x19c) returned 0x1 [0079.489] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.489] WriteFile (in: hFile=0x19c, lpBuffer=0x1106c400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106c400*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.489] GetFileType (hFile=0x19c) returned 0x1 [0079.489] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa811, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.489] GetFileType (hFile=0x19c) returned 0x1 [0079.489] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.489] WriteFile (in: hFile=0x19c, lpBuffer=0x1106c600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106c600*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.489] GetFileType (hFile=0x19c) returned 0x1 [0079.489] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa811, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.490] GetFileType (hFile=0x19c) returned 0x1 [0079.490] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.490] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.490] GetFileType (hFile=0x19c) returned 0x1 [0079.490] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xa811, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.490] CloseHandle (hObject=0x19c) returned 1 [0079.490] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\AJCpLI.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\ajcpli.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\AJCpLI.mkv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\ajcpli.mkv.trapget"), dwFlags=0x1) returned 1 [0079.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\Ayln 62imRKAcGDVXxI.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\ayln 62imrkacgdvxxi.swf"), fInfoLevelId=0x0, lpFileInformation=0x110c7e58 | out: lpFileInformation=0x110c7e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19526130, ftCreationTime.dwHighDateTime=0x1d62493, ftLastAccessTime.dwLowDateTime=0xac2ce2e0, ftLastAccessTime.dwHighDateTime=0x1d62b4c, ftLastWriteTime.dwLowDateTime=0xac2ce2e0, ftLastWriteTime.dwHighDateTime=0x1d62b4c, nFileSizeHigh=0x0, nFileSizeLow=0x1500a)) returned 1 [0079.491] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\Ayln 62imRKAcGDVXxI.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\ayln 62imrkacgdvxxi.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.491] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.491] GetFileType (hFile=0x19c) returned 0x1 [0079.491] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.491] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f050 | out: pbBuffer=0x1108f050) returned 1 [0079.491] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f060 | out: pbBuffer=0x1108f060) returned 1 [0079.491] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106c701 | out: pbBuffer=0x1106c701) returned 1 [0079.491] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106c901 | out: pbBuffer=0x1106c901) returned 1 [0079.492] ReadFile (in: hFile=0x19c, lpBuffer=0x10d46000, nNumberOfBytesToRead=0x1500a, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10d46000*, lpNumberOfBytesRead=0x10c89b28*=0x1500a, lpOverlapped=0x0) returned 1 [0079.493] GetFileType (hFile=0x19c) returned 0x1 [0079.493] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.493] WriteFile (in: hFile=0x19c, lpBuffer=0x10d5c000*, nNumberOfBytesToWrite=0x1500a, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10d5c000*, lpNumberOfBytesWritten=0x10c89b28*=0x1500a, lpOverlapped=0x10c89b2c) returned 1 [0079.494] GetFileType (hFile=0x19c) returned 0x1 [0079.494] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1500a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.494] GetFileType (hFile=0x19c) returned 0x1 [0079.494] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.494] WriteFile (in: hFile=0x19c, lpBuffer=0x1106c800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106c800*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.494] GetFileType (hFile=0x19c) returned 0x1 [0079.494] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1500a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.494] GetFileType (hFile=0x19c) returned 0x1 [0079.494] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.494] WriteFile (in: hFile=0x19c, lpBuffer=0x1106ca00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106ca00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.494] GetFileType (hFile=0x19c) returned 0x1 [0079.494] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1500a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.494] GetFileType (hFile=0x19c) returned 0x1 [0079.494] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.494] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.494] GetFileType (hFile=0x19c) returned 0x1 [0079.494] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1500a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.494] CloseHandle (hObject=0x19c) returned 1 [0079.495] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\Ayln 62imRKAcGDVXxI.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\ayln 62imrkacgdvxxi.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\Ayln 62imRKAcGDVXxI.swf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\ayln 62imrkacgdvxxi.swf.trapget"), dwFlags=0x1) returned 1 [0079.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\HfLAR3QfUl8AwB.flv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\hflar3qful8awb.flv"), fInfoLevelId=0x0, lpFileInformation=0x110c7f98 | out: lpFileInformation=0x110c7f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5652eae0, ftCreationTime.dwHighDateTime=0x1d62642, ftLastAccessTime.dwLowDateTime=0x9e860be0, ftLastAccessTime.dwHighDateTime=0x1d62e98, ftLastWriteTime.dwLowDateTime=0x9e860be0, ftLastWriteTime.dwHighDateTime=0x1d62e98, nFileSizeHigh=0x0, nFileSizeLow=0x2b89)) returned 1 [0079.495] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\HfLAR3QfUl8AwB.flv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\hflar3qful8awb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.495] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.495] GetFileType (hFile=0x19c) returned 0x1 [0079.495] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.495] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f140 | out: pbBuffer=0x1108f140) returned 1 [0079.495] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f150 | out: pbBuffer=0x1108f150) returned 1 [0079.495] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106cb01 | out: pbBuffer=0x1106cb01) returned 1 [0079.496] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106cd01 | out: pbBuffer=0x1106cd01) returned 1 [0079.496] ReadFile (in: hFile=0x19c, lpBuffer=0x10d72000, nNumberOfBytesToRead=0x2b89, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10d72000*, lpNumberOfBytesRead=0x10c89b28*=0x2b89, lpOverlapped=0x0) returned 1 [0079.497] GetFileType (hFile=0x19c) returned 0x1 [0079.497] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.497] WriteFile (in: hFile=0x19c, lpBuffer=0x10d75000*, nNumberOfBytesToWrite=0x2b89, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10d75000*, lpNumberOfBytesWritten=0x10c89b28*=0x2b89, lpOverlapped=0x10c89b2c) returned 1 [0079.497] GetFileType (hFile=0x19c) returned 0x1 [0079.497] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2b89, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.497] GetFileType (hFile=0x19c) returned 0x1 [0079.497] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.497] WriteFile (in: hFile=0x19c, lpBuffer=0x1106cc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106cc00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.497] GetFileType (hFile=0x19c) returned 0x1 [0079.497] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2b89, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.497] GetFileType (hFile=0x19c) returned 0x1 [0079.497] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.497] WriteFile (in: hFile=0x19c, lpBuffer=0x1106ce00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106ce00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.497] GetFileType (hFile=0x19c) returned 0x1 [0079.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2b89, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.498] GetFileType (hFile=0x19c) returned 0x1 [0079.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.498] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.498] GetFileType (hFile=0x19c) returned 0x1 [0079.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x2b89, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.498] CloseHandle (hObject=0x19c) returned 1 [0079.498] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\HfLAR3QfUl8AwB.flv" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\hflar3qful8awb.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\HfLAR3QfUl8AwB.flv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\hflar3qful8awb.flv.trapget"), dwFlags=0x1) returned 1 [0079.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\KRnMMNremuggqOt.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\krnmmnremuggqot.mp4"), fInfoLevelId=0x0, lpFileInformation=0x10cd2148 | out: lpFileInformation=0x10cd2148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f44ac00, ftCreationTime.dwHighDateTime=0x1d62545, ftLastAccessTime.dwLowDateTime=0xde724770, ftLastAccessTime.dwHighDateTime=0x1d62fd1, ftLastWriteTime.dwLowDateTime=0xde724770, ftLastWriteTime.dwHighDateTime=0x1d62fd1, nFileSizeHigh=0x0, nFileSizeLow=0xb98b)) returned 1 [0079.499] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\KRnMMNremuggqOt.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\krnmmnremuggqot.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.504] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.504] GetFileType (hFile=0x19c) returned 0x1 [0079.504] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.504] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f230 | out: pbBuffer=0x1108f230) returned 1 [0079.504] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f240 | out: pbBuffer=0x1108f240) returned 1 [0079.504] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106cf01 | out: pbBuffer=0x1106cf01) returned 1 [0079.505] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106d101 | out: pbBuffer=0x1106d101) returned 1 [0079.505] ReadFile (in: hFile=0x19c, lpBuffer=0x10d82000, nNumberOfBytesToRead=0xb98b, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10d82000*, lpNumberOfBytesRead=0x10c89b28*=0xb98b, lpOverlapped=0x0) returned 1 [0079.513] GetFileType (hFile=0x19c) returned 0x1 [0079.514] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.514] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8e000*, nNumberOfBytesToWrite=0xb98b, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10d8e000*, lpNumberOfBytesWritten=0x10c89b28*=0xb98b, lpOverlapped=0x10c89b2c) returned 1 [0079.514] GetFileType (hFile=0x19c) returned 0x1 [0079.514] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb98b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.514] GetFileType (hFile=0x19c) returned 0x1 [0079.514] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.514] WriteFile (in: hFile=0x19c, lpBuffer=0x1106d000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106d000*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.514] GetFileType (hFile=0x19c) returned 0x1 [0079.514] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb98b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.514] GetFileType (hFile=0x19c) returned 0x1 [0079.514] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.514] WriteFile (in: hFile=0x19c, lpBuffer=0x1106d200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106d200*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.514] GetFileType (hFile=0x19c) returned 0x1 [0079.514] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb98b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.514] GetFileType (hFile=0x19c) returned 0x1 [0079.515] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.515] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.515] GetFileType (hFile=0x19c) returned 0x1 [0079.515] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xb98b, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.515] CloseHandle (hObject=0x19c) returned 1 [0079.515] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\KRnMMNremuggqOt.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\krnmmnremuggqot.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\KRnMMNremuggqOt.mp4.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\krnmmnremuggqot.mp4.trapget"), dwFlags=0x1) returned 1 [0079.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\O5PwbBM.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\o5pwbbm.swf"), fInfoLevelId=0x0, lpFileInformation=0x10cd2288 | out: lpFileInformation=0x10cd2288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14bc9a60, ftCreationTime.dwHighDateTime=0x1d62d70, ftLastAccessTime.dwLowDateTime=0x7eeb4e80, ftLastAccessTime.dwHighDateTime=0x1d62af6, ftLastWriteTime.dwLowDateTime=0x7eeb4e80, ftLastWriteTime.dwHighDateTime=0x1d62af6, nFileSizeHigh=0x0, nFileSizeLow=0x906a)) returned 1 [0079.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\O5PwbBM.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\o5pwbbm.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.516] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.516] GetFileType (hFile=0x19c) returned 0x1 [0079.516] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.516] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f320 | out: pbBuffer=0x1108f320) returned 1 [0079.516] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f330 | out: pbBuffer=0x1108f330) returned 1 [0079.516] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106d301 | out: pbBuffer=0x1106d301) returned 1 [0079.516] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106d501 | out: pbBuffer=0x1106d501) returned 1 [0079.517] ReadFile (in: hFile=0x19c, lpBuffer=0x10da4000, nNumberOfBytesToRead=0x906a, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10da4000*, lpNumberOfBytesRead=0x10c89b28*=0x906a, lpOverlapped=0x0) returned 1 [0079.518] GetFileType (hFile=0x19c) returned 0x1 [0079.518] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.518] WriteFile (in: hFile=0x19c, lpBuffer=0x10dae000*, nNumberOfBytesToWrite=0x906a, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10dae000*, lpNumberOfBytesWritten=0x10c89b28*=0x906a, lpOverlapped=0x10c89b2c) returned 1 [0079.518] GetFileType (hFile=0x19c) returned 0x1 [0079.518] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x906a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.518] GetFileType (hFile=0x19c) returned 0x1 [0079.518] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.518] WriteFile (in: hFile=0x19c, lpBuffer=0x1106d400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106d400*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.518] GetFileType (hFile=0x19c) returned 0x1 [0079.518] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x906a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.518] GetFileType (hFile=0x19c) returned 0x1 [0079.518] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.518] WriteFile (in: hFile=0x19c, lpBuffer=0x1106d600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106d600*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.518] GetFileType (hFile=0x19c) returned 0x1 [0079.518] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x906a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.519] GetFileType (hFile=0x19c) returned 0x1 [0079.519] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.519] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.519] GetFileType (hFile=0x19c) returned 0x1 [0079.519] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x906a, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.519] CloseHandle (hObject=0x19c) returned 1 [0079.519] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\O5PwbBM.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\o5pwbbm.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\O5PwbBM.swf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\o5pwbbm.swf.trapget"), dwFlags=0x1) returned 1 [0079.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\Zqbwyf_RI78EZ.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\zqbwyf_ri78ez.mp4"), fInfoLevelId=0x0, lpFileInformation=0x10cd23c8 | out: lpFileInformation=0x10cd23c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f50e10, ftCreationTime.dwHighDateTime=0x1d62739, ftLastAccessTime.dwLowDateTime=0x2db4e800, ftLastAccessTime.dwHighDateTime=0x1d62f2e, ftLastWriteTime.dwLowDateTime=0x2db4e800, ftLastWriteTime.dwHighDateTime=0x1d62f2e, nFileSizeHigh=0x0, nFileSizeLow=0x18f38)) returned 1 [0079.519] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\Zqbwyf_RI78EZ.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\zqbwyf_ri78ez.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.520] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.520] GetFileType (hFile=0x19c) returned 0x1 [0079.520] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.520] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f400 | out: pbBuffer=0x1108f400) returned 1 [0079.520] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f410 | out: pbBuffer=0x1108f410) returned 1 [0079.520] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106d701 | out: pbBuffer=0x1106d701) returned 1 [0079.520] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106d901 | out: pbBuffer=0x1106d901) returned 1 [0079.520] ReadFile (in: hFile=0x19c, lpBuffer=0x10f76000, nNumberOfBytesToRead=0x18f38, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10f76000*, lpNumberOfBytesRead=0x10c89b28*=0x18f38, lpOverlapped=0x0) returned 1 [0079.524] GetFileType (hFile=0x19c) returned 0x1 [0079.524] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.525] WriteFile (in: hFile=0x19c, lpBuffer=0x10f90000*, nNumberOfBytesToWrite=0x18f38, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10f90000*, lpNumberOfBytesWritten=0x10c89b28*=0x18f38, lpOverlapped=0x10c89b2c) returned 1 [0079.525] GetFileType (hFile=0x19c) returned 0x1 [0079.525] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x18f38, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.525] GetFileType (hFile=0x19c) returned 0x1 [0079.525] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.525] WriteFile (in: hFile=0x19c, lpBuffer=0x1106d800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106d800*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.526] GetFileType (hFile=0x19c) returned 0x1 [0079.526] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x18f38, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.526] GetFileType (hFile=0x19c) returned 0x1 [0079.526] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.526] WriteFile (in: hFile=0x19c, lpBuffer=0x1106da00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106da00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.526] GetFileType (hFile=0x19c) returned 0x1 [0079.526] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x18f38, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.526] GetFileType (hFile=0x19c) returned 0x1 [0079.526] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.526] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.526] GetFileType (hFile=0x19c) returned 0x1 [0079.526] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x18f38, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.526] CloseHandle (hObject=0x19c) returned 1 [0079.526] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\Zqbwyf_RI78EZ.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\zqbwyf_ri78ez.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\Zqbwyf_RI78EZ.mp4.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\zqbwyf_ri78ez.mp4.trapget"), dwFlags=0x1) returned 1 [0079.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\bohA65zXuU8Jv.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\boha65zxuu8jv.swf"), fInfoLevelId=0x0, lpFileInformation=0x10cd2508 | out: lpFileInformation=0x10cd2508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9962bc0, ftCreationTime.dwHighDateTime=0x1d6257b, ftLastAccessTime.dwLowDateTime=0xdfebbc10, ftLastAccessTime.dwHighDateTime=0x1d632c6, ftLastWriteTime.dwLowDateTime=0xdfebbc10, ftLastWriteTime.dwHighDateTime=0x1d632c6, nFileSizeHigh=0x0, nFileSizeLow=0xc525)) returned 1 [0079.527] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\bohA65zXuU8Jv.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\boha65zxuu8jv.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.527] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.527] GetFileType (hFile=0x19c) returned 0x1 [0079.527] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.527] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f4f0 | out: pbBuffer=0x1108f4f0) returned 1 [0079.527] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f500 | out: pbBuffer=0x1108f500) returned 1 [0079.527] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106db01 | out: pbBuffer=0x1106db01) returned 1 [0079.528] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106dd01 | out: pbBuffer=0x1106dd01) returned 1 [0079.528] ReadFile (in: hFile=0x19c, lpBuffer=0x10fae000, nNumberOfBytesToRead=0xc525, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10fae000*, lpNumberOfBytesRead=0x10c89b28*=0xc525, lpOverlapped=0x0) returned 1 [0079.529] GetFileType (hFile=0x19c) returned 0x1 [0079.529] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.529] WriteFile (in: hFile=0x19c, lpBuffer=0x10fbc000*, nNumberOfBytesToWrite=0xc525, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10fbc000*, lpNumberOfBytesWritten=0x10c89b28*=0xc525, lpOverlapped=0x10c89b2c) returned 1 [0079.530] GetFileType (hFile=0x19c) returned 0x1 [0079.530] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc525, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.530] GetFileType (hFile=0x19c) returned 0x1 [0079.530] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.530] WriteFile (in: hFile=0x19c, lpBuffer=0x1106dc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106dc00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.530] GetFileType (hFile=0x19c) returned 0x1 [0079.530] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc525, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.530] GetFileType (hFile=0x19c) returned 0x1 [0079.530] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.530] WriteFile (in: hFile=0x19c, lpBuffer=0x1106de00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x1106de00*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.530] GetFileType (hFile=0x19c) returned 0x1 [0079.530] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc525, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.530] GetFileType (hFile=0x19c) returned 0x1 [0079.530] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.530] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.530] GetFileType (hFile=0x19c) returned 0x1 [0079.530] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc525, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.530] CloseHandle (hObject=0x19c) returned 1 [0079.531] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\bohA65zXuU8Jv.swf" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\boha65zxuu8jv.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\bohA65zXuU8Jv.swf.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\boha65zxuu8jv.swf.trapget"), dwFlags=0x1) returned 1 [0079.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\sqtqHUCdOZ0y32Kf.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\sqtqhucdoz0y32kf.mp4"), fInfoLevelId=0x0, lpFileInformation=0x10cd2648 | out: lpFileInformation=0x10cd2648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248c5c70, ftCreationTime.dwHighDateTime=0x1d63025, ftLastAccessTime.dwLowDateTime=0x31078a60, ftLastAccessTime.dwHighDateTime=0x1d6306b, ftLastWriteTime.dwLowDateTime=0x31078a60, ftLastWriteTime.dwHighDateTime=0x1d6306b, nFileSizeHigh=0x0, nFileSizeLow=0x85dc)) returned 1 [0079.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\sqtqHUCdOZ0y32Kf.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\sqtqhucdoz0y32kf.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.531] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b38 | out: lpMode=0x10c89b38) returned 0 [0079.531] GetFileType (hFile=0x19c) returned 0x1 [0079.531] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89b68 | out: lpFileInformation=0x10c89b68) returned 1 [0079.531] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f5e0 | out: pbBuffer=0x1108f5e0) returned 1 [0079.531] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f5f0 | out: pbBuffer=0x1108f5f0) returned 1 [0079.531] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x1106df01 | out: pbBuffer=0x1106df01) returned 1 [0079.532] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcc101 | out: pbBuffer=0x10fcc101) returned 1 [0079.532] ReadFile (in: hFile=0x19c, lpBuffer=0x10fd8000, nNumberOfBytesToRead=0x85dc, lpNumberOfBytesRead=0x10c89b28, lpOverlapped=0x0 | out: lpBuffer=0x10fd8000*, lpNumberOfBytesRead=0x10c89b28*=0x85dc, lpOverlapped=0x0) returned 1 [0079.533] GetFileType (hFile=0x19c) returned 0x1 [0079.533] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.533] WriteFile (in: hFile=0x19c, lpBuffer=0x10fe2000*, nNumberOfBytesToWrite=0x85dc, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10fe2000*, lpNumberOfBytesWritten=0x10c89b28*=0x85dc, lpOverlapped=0x10c89b2c) returned 1 [0079.533] GetFileType (hFile=0x19c) returned 0x1 [0079.533] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x85dc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.533] GetFileType (hFile=0x19c) returned 0x1 [0079.533] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.533] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcc000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10fcc000*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.534] GetFileType (hFile=0x19c) returned 0x1 [0079.534] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x85dc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.534] GetFileType (hFile=0x19c) returned 0x1 [0079.534] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.534] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcc200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10fcc200*, lpNumberOfBytesWritten=0x10c89b28*=0x100, lpOverlapped=0x10c89b2c) returned 1 [0079.534] GetFileType (hFile=0x19c) returned 0x1 [0079.534] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x85dc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.534] GetFileType (hFile=0x19c) returned 0x1 [0079.534] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.534] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c2c*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b28, lpOverlapped=0x10c89b2c | out: lpBuffer=0x10c89c2c*, lpNumberOfBytesWritten=0x10c89b28*=0x7, lpOverlapped=0x10c89b2c) returned 1 [0079.534] GetFileType (hFile=0x19c) returned 0x1 [0079.534] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x85dc, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b10 | out: lpNewFilePointer=0x0) returned 1 [0079.534] CloseHandle (hObject=0x19c) returned 1 [0079.534] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\sqtqHUCdOZ0y32Kf.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\sqtqhucdoz0y32kf.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\V4k6QyGlWz97VNPnF8\\sqtqHUCdOZ0y32Kf.mp4.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\v4k6qyglwz97vnpnf8\\sqtqhucdoz0y32kf.mp4.trapget"), dwFlags=0x1) returned 1 [0079.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\aBv2mbUGe9D.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\abv2mbuge9d.mp4"), fInfoLevelId=0x0, lpFileInformation=0x10cd2788 | out: lpFileInformation=0x10cd2788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe078650, ftCreationTime.dwHighDateTime=0x1d62594, ftLastAccessTime.dwLowDateTime=0xe458b600, ftLastAccessTime.dwHighDateTime=0x1d62cda, ftLastWriteTime.dwLowDateTime=0xe458b600, ftLastWriteTime.dwHighDateTime=0x1d62cda, nFileSizeHigh=0x0, nFileSizeLow=0x16bd5)) returned 1 [0079.535] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\aBv2mbUGe9D.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\abv2mbuge9d.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.535] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0079.535] GetFileType (hFile=0x19c) returned 0x1 [0079.535] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0079.535] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f6d0 | out: pbBuffer=0x1108f6d0) returned 1 [0079.535] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f6e0 | out: pbBuffer=0x1108f6e0) returned 1 [0079.535] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcc301 | out: pbBuffer=0x10fcc301) returned 1 [0079.535] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcc501 | out: pbBuffer=0x10fcc501) returned 1 [0079.536] ReadFile (in: hFile=0x19c, lpBuffer=0x10e04000, nNumberOfBytesToRead=0x16bd5, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10e04000*, lpNumberOfBytesRead=0x10c89b8c*=0x16bd5, lpOverlapped=0x0) returned 1 [0079.538] GetFileType (hFile=0x19c) returned 0x1 [0079.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.538] WriteFile (in: hFile=0x19c, lpBuffer=0x10e1c000*, nNumberOfBytesToWrite=0x16bd5, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10e1c000*, lpNumberOfBytesWritten=0x10c89b8c*=0x16bd5, lpOverlapped=0x10c89b90) returned 1 [0079.538] GetFileType (hFile=0x19c) returned 0x1 [0079.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16bd5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.538] GetFileType (hFile=0x19c) returned 0x1 [0079.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.538] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcc400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10fcc400*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.538] GetFileType (hFile=0x19c) returned 0x1 [0079.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16bd5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.538] GetFileType (hFile=0x19c) returned 0x1 [0079.538] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.538] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcc600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10fcc600*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.539] GetFileType (hFile=0x19c) returned 0x1 [0079.539] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16bd5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.539] GetFileType (hFile=0x19c) returned 0x1 [0079.539] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.539] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0079.539] GetFileType (hFile=0x19c) returned 0x1 [0079.539] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16bd5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.539] CloseHandle (hObject=0x19c) returned 1 [0079.539] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\aBv2mbUGe9D.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\abv2mbuge9d.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fW-jib3R5mGVH\\aBv2mbUGe9D.mp4.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fw-jib3r5mgvh\\abv2mbuge9d.mp4.trapget"), dwFlags=0x1) returned 1 [0079.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\fgGpq3nFQQ61tb9bi.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\fggpq3nfqq61tb9bi.mkv"), fInfoLevelId=0x0, lpFileInformation=0x10cd28c8 | out: lpFileInformation=0x10cd28c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ccba0, ftCreationTime.dwHighDateTime=0x1d62e88, ftLastAccessTime.dwLowDateTime=0x53e66860, ftLastAccessTime.dwHighDateTime=0x1d6295b, ftLastWriteTime.dwLowDateTime=0x53e66860, ftLastWriteTime.dwHighDateTime=0x1d6295b, nFileSizeHigh=0x0, nFileSizeLow=0xafae)) returned 1 [0079.539] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\fgGpq3nFQQ61tb9bi.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\fggpq3nfqq61tb9bi.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.540] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.540] GetFileType (hFile=0x19c) returned 0x1 [0079.540] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.540] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f7b0 | out: pbBuffer=0x1108f7b0) returned 1 [0079.540] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f7c0 | out: pbBuffer=0x1108f7c0) returned 1 [0079.540] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcc801 | out: pbBuffer=0x10fcc801) returned 1 [0079.540] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcca01 | out: pbBuffer=0x10fcca01) returned 1 [0079.541] ReadFile (in: hFile=0x19c, lpBuffer=0x10e3a000, nNumberOfBytesToRead=0xafae, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10e3a000*, lpNumberOfBytesRead=0x10c89bf0*=0xafae, lpOverlapped=0x0) returned 1 [0079.542] GetFileType (hFile=0x19c) returned 0x1 [0079.542] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.542] WriteFile (in: hFile=0x19c, lpBuffer=0x10e46000*, nNumberOfBytesToWrite=0xafae, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e46000*, lpNumberOfBytesWritten=0x10c89bf0*=0xafae, lpOverlapped=0x10c89bf4) returned 1 [0079.542] GetFileType (hFile=0x19c) returned 0x1 [0079.542] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xafae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.542] GetFileType (hFile=0x19c) returned 0x1 [0079.542] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.542] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcc900*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fcc900*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.542] GetFileType (hFile=0x19c) returned 0x1 [0079.542] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xafae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.542] GetFileType (hFile=0x19c) returned 0x1 [0079.542] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.542] WriteFile (in: hFile=0x19c, lpBuffer=0x10fccb00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fccb00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.543] GetFileType (hFile=0x19c) returned 0x1 [0079.543] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xafae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.543] GetFileType (hFile=0x19c) returned 0x1 [0079.543] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.543] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0079.543] GetFileType (hFile=0x19c) returned 0x1 [0079.543] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xafae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.543] CloseHandle (hObject=0x19c) returned 1 [0079.543] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\fgGpq3nFQQ61tb9bi.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\fggpq3nfqq61tb9bi.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\fgGpq3nFQQ61tb9bi.mkv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\fggpq3nfqq61tb9bi.mkv.trapget"), dwFlags=0x1) returned 1 [0079.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\lofKOE1B.flv" (normalized: "c:\\users\\fd1hvy\\videos\\lofkoe1b.flv"), fInfoLevelId=0x0, lpFileInformation=0x10cd2a08 | out: lpFileInformation=0x10cd2a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb293470, ftCreationTime.dwHighDateTime=0x1d622cd, ftLastAccessTime.dwLowDateTime=0x7743adc0, ftLastAccessTime.dwHighDateTime=0x1d62633, ftLastWriteTime.dwLowDateTime=0x7743adc0, ftLastWriteTime.dwHighDateTime=0x1d62633, nFileSizeHigh=0x0, nFileSizeLow=0x170a1)) returned 1 [0079.543] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\lofKOE1B.flv" (normalized: "c:\\users\\fd1hvy\\videos\\lofkoe1b.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.544] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.544] GetFileType (hFile=0x19c) returned 0x1 [0079.544] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.544] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f8a0 | out: pbBuffer=0x1108f8a0) returned 1 [0079.544] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f8b0 | out: pbBuffer=0x1108f8b0) returned 1 [0079.544] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fccc01 | out: pbBuffer=0x10fccc01) returned 1 [0079.544] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcce01 | out: pbBuffer=0x10fcce01) returned 1 [0079.544] SetEvent (hEvent=0x170) returned 1 [0079.545] ReadFile (in: hFile=0x19c, lpBuffer=0x10e5a000, nNumberOfBytesToRead=0x170a1, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10e5a000*, lpNumberOfBytesRead=0x10c89bf0*=0x170a1, lpOverlapped=0x0) returned 1 [0079.545] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102 [0079.560] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0079.560] SetEvent (hEvent=0x170) returned 1 [0079.560] SetEvent (hEvent=0x158) returned 1 [0079.560] SetEvent (hEvent=0x138) returned 1 [0079.560] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0 [0079.580] SetEvent (hEvent=0x168) returned 1 [0079.580] SetEvent (hEvent=0x138) returned 1 [0079.581] GetFileType (hFile=0x19c) returned 0x1 [0079.581] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.582] WriteFile (in: hFile=0x19c, lpBuffer=0x10e04000*, nNumberOfBytesToWrite=0x170a1, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10e04000*, lpNumberOfBytesWritten=0x10c89bf0*=0x170a1, lpOverlapped=0x10c89bf4) returned 1 [0079.582] GetFileType (hFile=0x19c) returned 0x1 [0079.582] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x170a1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.582] GetFileType (hFile=0x19c) returned 0x1 [0079.582] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.582] WriteFile (in: hFile=0x19c, lpBuffer=0x10fccd00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fccd00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.582] GetFileType (hFile=0x19c) returned 0x1 [0079.582] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x170a1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.582] GetFileType (hFile=0x19c) returned 0x1 [0079.582] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.582] WriteFile (in: hFile=0x19c, lpBuffer=0x10fccf00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fccf00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.582] GetFileType (hFile=0x19c) returned 0x1 [0079.582] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x170a1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.582] GetFileType (hFile=0x19c) returned 0x1 [0079.582] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.583] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0079.583] GetFileType (hFile=0x19c) returned 0x1 [0079.583] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x170a1, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.583] CloseHandle (hObject=0x19c) returned 1 [0079.583] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\lofKOE1B.flv" (normalized: "c:\\users\\fd1hvy\\videos\\lofkoe1b.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\lofKOE1B.flv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\lofkoe1b.flv.trapget"), dwFlags=0x1) returned 1 [0079.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg"), fInfoLevelId=0x0, lpFileInformation=0x10cd2058 | out: lpFileInformation=0x10cd2058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaea49e50, ftCreationTime.dwHighDateTime=0x1d622b4, ftLastAccessTime.dwLowDateTime=0x784cf800, ftLastAccessTime.dwHighDateTime=0x1d63116, ftLastWriteTime.dwLowDateTime=0x784cf800, ftLastWriteTime.dwHighDateTime=0x1d63116, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0079.583] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.584] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\*", lpFindFileData=0x10c89a04 | out: lpFindFileData=0x10c89a04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaea49e50, ftCreationTime.dwHighDateTime=0x1d622b4, ftLastAccessTime.dwLowDateTime=0x784cf800, ftLastAccessTime.dwHighDateTime=0x1d63116, ftLastWriteTime.dwLowDateTime=0x784cf800, ftLastWriteTime.dwHighDateTime=0x1d63116, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0079.584] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaea49e50, ftCreationTime.dwHighDateTime=0x1d622b4, ftLastAccessTime.dwLowDateTime=0x784cf800, ftLastAccessTime.dwHighDateTime=0x1d63116, ftLastWriteTime.dwLowDateTime=0x784cf800, ftLastWriteTime.dwHighDateTime=0x1d63116, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.584] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfffb1dd0, ftCreationTime.dwHighDateTime=0x1d626bd, ftLastAccessTime.dwLowDateTime=0x33cc3040, ftLastAccessTime.dwHighDateTime=0x1d62605, ftLastWriteTime.dwLowDateTime=0x33cc3040, ftLastWriteTime.dwHighDateTime=0x1d62605, nFileSizeHigh=0x0, nFileSizeLow=0x3178, dwReserved0=0x0, dwReserved1=0x0, cFileName="l7aRrc3_F4hF9.mp4", cAlternateFileName="L7ARRC~1.MP4")) returned 1 [0079.584] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb741500, ftCreationTime.dwHighDateTime=0x1d629b0, ftLastAccessTime.dwLowDateTime=0x4e7f4830, ftLastAccessTime.dwHighDateTime=0x1d63011, ftLastWriteTime.dwLowDateTime=0x4e7f4830, ftLastWriteTime.dwHighDateTime=0x1d63011, nFileSizeHigh=0x0, nFileSizeLow=0x29a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="lXOUx_EHOhiuCO.avi", cAlternateFileName="LXOUX_~1.AVI")) returned 1 [0079.584] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38b98020, ftCreationTime.dwHighDateTime=0x1d6252f, ftLastAccessTime.dwLowDateTime=0x9bd85e30, ftLastAccessTime.dwHighDateTime=0x1d62e2e, ftLastWriteTime.dwLowDateTime=0x9bd85e30, ftLastWriteTime.dwHighDateTime=0x1d62e2e, nFileSizeHigh=0x0, nFileSizeLow=0x1354f, dwReserved0=0x0, dwReserved1=0x0, cFileName="QqXtXPaC-F R8F_Ho.mkv", cAlternateFileName="QQXTXP~1.MKV")) returned 1 [0079.584] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e2a8190, ftCreationTime.dwHighDateTime=0x1d62bdd, ftLastAccessTime.dwLowDateTime=0xfd3e8a30, ftLastAccessTime.dwHighDateTime=0x1d62fa2, ftLastWriteTime.dwLowDateTime=0xfd3e8a30, ftLastWriteTime.dwHighDateTime=0x1d62fa2, nFileSizeHigh=0x0, nFileSizeLow=0x14ce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="X-XxSR7u5eIch.mkv", cAlternateFileName="X-XXSR~1.MKV")) returned 1 [0079.584] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a24 | out: lpFindFileData=0x10c89a24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.584] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0079.584] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.584] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c68 | out: lpMode=0x10c89c68) returned 0 [0079.584] GetFileType (hFile=0x19c) returned 0x1 [0079.584] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0079.584] WriteFile (in: hFile=0x19c, lpBuffer=0x10ca8480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89c58, lpOverlapped=0x10c89c5c | out: lpBuffer=0x10ca8480*, lpNumberOfBytesWritten=0x10c89c58*=0x464, lpOverlapped=0x10c89c5c) returned 1 [0079.585] GetFileType (hFile=0x19c) returned 0x1 [0079.585] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c40 | out: lpNewFilePointer=0x0) returned 1 [0079.585] CloseHandle (hObject=0x19c) returned 1 [0079.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\QqXtXPaC-F R8F_Ho.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\qqxtxpac-f r8f_ho.mkv"), fInfoLevelId=0x0, lpFileInformation=0x10cd21e8 | out: lpFileInformation=0x10cd21e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38b98020, ftCreationTime.dwHighDateTime=0x1d6252f, ftLastAccessTime.dwLowDateTime=0x9bd85e30, ftLastAccessTime.dwHighDateTime=0x1d62e2e, ftLastWriteTime.dwLowDateTime=0x9bd85e30, ftLastWriteTime.dwHighDateTime=0x1d62e2e, nFileSizeHigh=0x0, nFileSizeLow=0x1354f)) returned 1 [0079.586] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\QqXtXPaC-F R8F_Ho.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\qqxtxpac-f r8f_ho.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.586] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0079.586] GetFileType (hFile=0x19c) returned 0x1 [0079.586] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0079.586] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e070 | out: pbBuffer=0x1108e070) returned 1 [0079.586] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e080 | out: pbBuffer=0x1108e080) returned 1 [0079.586] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcc001 | out: pbBuffer=0x10fcc001) returned 1 [0079.586] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcc201 | out: pbBuffer=0x10fcc201) returned 1 [0079.587] ReadFile (in: hFile=0x19c, lpBuffer=0x10eb2000, nNumberOfBytesToRead=0x1354f, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10eb2000*, lpNumberOfBytesRead=0x10c89b8c*=0x1354f, lpOverlapped=0x0) returned 1 [0079.588] GetFileType (hFile=0x19c) returned 0x1 [0079.603] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.603] WriteFile (in: hFile=0x19c, lpBuffer=0x10eec000*, nNumberOfBytesToWrite=0x1354f, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10eec000*, lpNumberOfBytesWritten=0x10c89b8c*=0x1354f, lpOverlapped=0x10c89b90) returned 1 [0079.603] GetFileType (hFile=0x19c) returned 0x1 [0079.603] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1354f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.603] GetFileType (hFile=0x19c) returned 0x1 [0079.603] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.604] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcc100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10fcc100*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.604] GetFileType (hFile=0x19c) returned 0x1 [0079.604] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1354f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.604] GetFileType (hFile=0x19c) returned 0x1 [0079.604] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.604] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcc300*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10fcc300*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.604] GetFileType (hFile=0x19c) returned 0x1 [0079.604] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1354f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.604] GetFileType (hFile=0x19c) returned 0x1 [0079.604] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.604] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0079.604] GetFileType (hFile=0x19c) returned 0x1 [0079.604] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1354f, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.605] CloseHandle (hObject=0x19c) returned 1 [0079.605] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\QqXtXPaC-F R8F_Ho.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\qqxtxpac-f r8f_ho.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\QqXtXPaC-F R8F_Ho.mkv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\qqxtxpac-f r8f_ho.mkv.trapget"), dwFlags=0x1) returned 1 [0079.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\X-XxSR7u5eIch.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\x-xxsr7u5eich.mkv"), fInfoLevelId=0x0, lpFileInformation=0x10cd2328 | out: lpFileInformation=0x10cd2328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e2a8190, ftCreationTime.dwHighDateTime=0x1d62bdd, ftLastAccessTime.dwLowDateTime=0xfd3e8a30, ftLastAccessTime.dwHighDateTime=0x1d62fa2, ftLastWriteTime.dwLowDateTime=0xfd3e8a30, ftLastWriteTime.dwHighDateTime=0x1d62fa2, nFileSizeHigh=0x0, nFileSizeLow=0x14ce4)) returned 1 [0079.606] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\X-XxSR7u5eIch.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\x-xxsr7u5eich.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.606] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0079.606] GetFileType (hFile=0x19c) returned 0x1 [0079.606] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0079.606] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e160 | out: pbBuffer=0x1108e160) returned 1 [0079.606] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e170 | out: pbBuffer=0x1108e170) returned 1 [0079.606] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcc501 | out: pbBuffer=0x10fcc501) returned 1 [0079.606] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcc701 | out: pbBuffer=0x10fcc701) returned 1 [0079.607] ReadFile (in: hFile=0x19c, lpBuffer=0x11092000, nNumberOfBytesToRead=0x14ce4, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x11092000*, lpNumberOfBytesRead=0x10c89b8c*=0x14ce4, lpOverlapped=0x0) returned 1 [0079.608] GetFileType (hFile=0x19c) returned 0x1 [0079.608] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.608] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x14ce4, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89b8c*=0x14ce4, lpOverlapped=0x10c89b90) returned 1 [0079.609] GetFileType (hFile=0x19c) returned 0x1 [0079.609] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14ce4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.609] GetFileType (hFile=0x19c) returned 0x1 [0079.609] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.609] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcc600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10fcc600*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.609] GetFileType (hFile=0x19c) returned 0x1 [0079.609] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14ce4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.609] GetFileType (hFile=0x19c) returned 0x1 [0079.609] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.609] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcc800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10fcc800*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.609] GetFileType (hFile=0x19c) returned 0x1 [0079.609] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14ce4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.609] GetFileType (hFile=0x19c) returned 0x1 [0079.609] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.609] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0079.609] GetFileType (hFile=0x19c) returned 0x1 [0079.609] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14ce4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.609] CloseHandle (hObject=0x19c) returned 1 [0079.609] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\X-XxSR7u5eIch.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\x-xxsr7u5eich.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\X-XxSR7u5eIch.mkv.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\x-xxsr7u5eich.mkv.trapget"), dwFlags=0x1) returned 1 [0079.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\l7aRrc3_F4hF9.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\l7arrc3_f4hf9.mp4"), fInfoLevelId=0x0, lpFileInformation=0x10cd2468 | out: lpFileInformation=0x10cd2468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfffb1dd0, ftCreationTime.dwHighDateTime=0x1d626bd, ftLastAccessTime.dwLowDateTime=0x33cc3040, ftLastAccessTime.dwHighDateTime=0x1d62605, ftLastWriteTime.dwLowDateTime=0x33cc3040, ftLastWriteTime.dwHighDateTime=0x1d62605, nFileSizeHigh=0x0, nFileSizeLow=0x3178)) returned 1 [0079.610] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\l7aRrc3_F4hF9.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\l7arrc3_f4hf9.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.610] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0079.610] GetFileType (hFile=0x19c) returned 0x1 [0079.610] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0079.610] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e250 | out: pbBuffer=0x1108e250) returned 1 [0079.610] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e260 | out: pbBuffer=0x1108e260) returned 1 [0079.610] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcc901 | out: pbBuffer=0x10fcc901) returned 1 [0079.611] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fccb01 | out: pbBuffer=0x10fccb01) returned 1 [0079.611] ReadFile (in: hFile=0x19c, lpBuffer=0x10ce8000, nNumberOfBytesToRead=0x3178, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10ce8000*, lpNumberOfBytesRead=0x10c89b8c*=0x3178, lpOverlapped=0x0) returned 1 [0079.612] GetFileType (hFile=0x19c) returned 0x1 [0079.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.612] WriteFile (in: hFile=0x19c, lpBuffer=0x10ceb500*, nNumberOfBytesToWrite=0x3178, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10ceb500*, lpNumberOfBytesWritten=0x10c89b8c*=0x3178, lpOverlapped=0x10c89b90) returned 1 [0079.612] GetFileType (hFile=0x19c) returned 0x1 [0079.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3178, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.612] GetFileType (hFile=0x19c) returned 0x1 [0079.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.612] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcca00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10fcca00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.612] GetFileType (hFile=0x19c) returned 0x1 [0079.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3178, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.612] GetFileType (hFile=0x19c) returned 0x1 [0079.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.612] WriteFile (in: hFile=0x19c, lpBuffer=0x10fccc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10fccc00*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.612] GetFileType (hFile=0x19c) returned 0x1 [0079.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3178, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.612] GetFileType (hFile=0x19c) returned 0x1 [0079.612] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.612] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0079.613] GetFileType (hFile=0x19c) returned 0x1 [0079.613] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3178, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.613] CloseHandle (hObject=0x19c) returned 1 [0079.613] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\l7aRrc3_F4hF9.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\l7arrc3_f4hf9.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\l7aRrc3_F4hF9.mp4.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\l7arrc3_f4hf9.mp4.trapget"), dwFlags=0x1) returned 1 [0079.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\lXOUx_EHOhiuCO.avi" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\lxoux_ehohiuco.avi"), fInfoLevelId=0x0, lpFileInformation=0x10cd25a8 | out: lpFileInformation=0x10cd25a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb741500, ftCreationTime.dwHighDateTime=0x1d629b0, ftLastAccessTime.dwLowDateTime=0x4e7f4830, ftLastAccessTime.dwHighDateTime=0x1d63011, ftLastWriteTime.dwLowDateTime=0x4e7f4830, ftLastWriteTime.dwHighDateTime=0x1d63011, nFileSizeHigh=0x0, nFileSizeLow=0x29a5)) returned 1 [0079.613] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\lXOUx_EHOhiuCO.avi" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\lxoux_ehohiuco.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.613] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89b9c | out: lpMode=0x10c89b9c) returned 0 [0079.613] GetFileType (hFile=0x19c) returned 0x1 [0079.613] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89bcc | out: lpFileInformation=0x10c89bcc) returned 1 [0079.613] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e330 | out: pbBuffer=0x1108e330) returned 1 [0079.613] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e340 | out: pbBuffer=0x1108e340) returned 1 [0079.614] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcce01 | out: pbBuffer=0x10fcce01) returned 1 [0079.614] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcd101 | out: pbBuffer=0x10fcd101) returned 1 [0079.614] ReadFile (in: hFile=0x19c, lpBuffer=0x10cb6000, nNumberOfBytesToRead=0x29a5, lpNumberOfBytesRead=0x10c89b8c, lpOverlapped=0x0 | out: lpBuffer=0x10cb6000*, lpNumberOfBytesRead=0x10c89b8c*=0x29a5, lpOverlapped=0x0) returned 1 [0079.615] GetFileType (hFile=0x19c) returned 0x1 [0079.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.615] WriteFile (in: hFile=0x19c, lpBuffer=0x10cb8a80*, nNumberOfBytesToWrite=0x29a5, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10cb8a80*, lpNumberOfBytesWritten=0x10c89b8c*=0x29a5, lpOverlapped=0x10c89b90) returned 1 [0079.615] GetFileType (hFile=0x19c) returned 0x1 [0079.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x29a5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.615] GetFileType (hFile=0x19c) returned 0x1 [0079.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.615] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcd000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10fcd000*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.615] GetFileType (hFile=0x19c) returned 0x1 [0079.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x29a5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.615] GetFileType (hFile=0x19c) returned 0x1 [0079.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.615] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcd200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10fcd200*, lpNumberOfBytesWritten=0x10c89b8c*=0x100, lpOverlapped=0x10c89b90) returned 1 [0079.615] GetFileType (hFile=0x19c) returned 0x1 [0079.615] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x29a5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.616] GetFileType (hFile=0x19c) returned 0x1 [0079.616] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.616] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89c90*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89b8c, lpOverlapped=0x10c89b90 | out: lpBuffer=0x10c89c90*, lpNumberOfBytesWritten=0x10c89b8c*=0x7, lpOverlapped=0x10c89b90) returned 1 [0079.616] GetFileType (hFile=0x19c) returned 0x1 [0079.616] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x29a5, lpNewFilePointer=0x0, dwMoveMethod=0x10c89b74 | out: lpNewFilePointer=0x0) returned 1 [0079.616] CloseHandle (hObject=0x19c) returned 1 [0079.616] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\lXOUx_EHOhiuCO.avi" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\lxoux_ehohiuco.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\p2LArVfRG\\lXOUx_EHOhiuCO.avi.TRAPGET" (normalized: "c:\\users\\fd1hvy\\videos\\p2larvfrg\\lxoux_ehohiuco.avi.trapget"), dwFlags=0x1) returned 1 [0079.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\ntuser.dat.LOG1" (normalized: "c:\\users\\fd1hvy\\ntuser.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x10cd26e8 | out: lpFileInformation=0x10cd26e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0xa9000)) returned 1 [0079.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\ntuser.dat.LOG1" (normalized: "c:\\users\\fd1hvy\\ntuser.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.617] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\ntuser.dat.LOG1\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0079.617] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c920c0*, nNumberOfCharsToWrite=0x2f, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c920c0*, lpNumberOfCharsWritten=0x10c897b8*=0x2f) returned 1 [0079.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\ntuser.dat.LOG2" (normalized: "c:\\users\\fd1hvy\\ntuser.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x10cd2738 | out: lpFileInformation=0x10cd2738*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.631] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\ntuser.dat.LOG2" (normalized: "c:\\users\\fd1hvy\\ntuser.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.631] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\ntuser.dat.LOG2\\*", lpFindFileData=0x10c89990 | out: lpFindFileData=0x10c89990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0079.632] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10c92120*, nNumberOfCharsToWrite=0x2f, lpNumberOfCharsWritten=0x10c897b8, lpReserved=0x0 | out: lpBuffer=0x10c92120*, lpNumberOfCharsWritten=0x10c897b8*=0x2f) returned 1 [0079.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\ntuser.ini" (normalized: "c:\\users\\fd1hvy\\ntuser.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd2788 | out: lpFileInformation=0x10cd2788*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xc1adea7d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc1adea7d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc1adea7d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1 [0079.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\ntuser.ini" (normalized: "c:\\users\\fd1hvy\\ntuser.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.646] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0079.647] GetFileType (hFile=0x19c) returned 0x1 [0079.647] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0079.647] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e430 | out: pbBuffer=0x1108e430) returned 1 [0079.647] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e440 | out: pbBuffer=0x1108e440) returned 1 [0079.647] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcd301 | out: pbBuffer=0x10fcd301) returned 1 [0079.647] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcd501 | out: pbBuffer=0x10fcd501) returned 1 [0079.647] ReadFile (in: hFile=0x19c, lpBuffer=0x10c6caa0, nNumberOfBytesToRead=0x14, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10c6caa0*, lpNumberOfBytesRead=0x10c89c54*=0x14, lpOverlapped=0x0) returned 1 [0079.648] GetFileType (hFile=0x19c) returned 0x1 [0079.648] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0079.648] WriteFile (in: hFile=0x19c, lpBuffer=0x10c6cac0*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c6cac0*, lpNumberOfBytesWritten=0x10c89c54*=0x14, lpOverlapped=0x10c89c58) returned 1 [0079.649] GetFileType (hFile=0x19c) returned 0x1 [0079.649] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0079.649] GetFileType (hFile=0x19c) returned 0x1 [0079.649] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0079.649] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcd400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fcd400*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0079.649] GetFileType (hFile=0x19c) returned 0x1 [0079.649] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0079.649] GetFileType (hFile=0x19c) returned 0x1 [0079.649] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0079.649] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcd600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fcd600*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0079.649] GetFileType (hFile=0x19c) returned 0x1 [0079.649] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0079.649] GetFileType (hFile=0x19c) returned 0x1 [0079.649] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0079.649] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0079.649] GetFileType (hFile=0x19c) returned 0x1 [0079.649] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x14, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0079.649] CloseHandle (hObject=0x19c) returned 1 [0079.650] MoveFileExW (lpExistingFileName="C:\\Users\\FD1HVy\\ntuser.ini" (normalized: "c:\\users\\fd1hvy\\ntuser.ini"), lpNewFileName="C:\\Users\\FD1HVy\\ntuser.ini.TRAPGET" (normalized: "c:\\users\\fd1hvy\\ntuser.ini.trapget"), dwFlags=0x1) returned 1 [0079.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public" (normalized: "c:\\users\\public"), fInfoLevelId=0x0, lpFileInformation=0x10cd28c8 | out: lpFileInformation=0x10cd28c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0079.650] CreateFileW (lpFileName="C:\\Users\\Public" (normalized: "c:\\users\\public"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.650] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x10c89acc | out: lpFindFileData=0x10c89acc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efc38 [0079.651] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.651] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1 [0079.651] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0079.651] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0079.651] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0079.651] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0079.651] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0079.651] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0079.651] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0079.651] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0079.651] FindNextFileW (in: hFindFile=0x7efc38, lpFindFileData=0x10c89aec | out: lpFindFileData=0x10c89aec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.651] FindClose (in: hFindFile=0x7efc38 | out: hFindFile=0x7efc38) returned 1 [0079.651] CreateFileW (lpFileName="C:\\Users\\Public\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\public\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.701] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89d30 | out: lpMode=0x10c89d30) returned 0 [0079.701] GetFileType (hFile=0x19c) returned 0x1 [0079.701] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0079.701] WriteFile (in: hFile=0x19c, lpBuffer=0x10ca8d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89d20, lpOverlapped=0x10c89d24 | out: lpBuffer=0x10ca8d80*, lpNumberOfBytesWritten=0x10c89d20*=0x464, lpOverlapped=0x10c89d24) returned 1 [0079.702] GetFileType (hFile=0x19c) returned 0x1 [0079.702] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89d08 | out: lpNewFilePointer=0x0) returned 1 [0079.702] CloseHandle (hObject=0x19c) returned 1 [0079.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\AccountPictures" (normalized: "c:\\users\\public\\accountpictures"), fInfoLevelId=0x0, lpFileInformation=0x10cd2c88 | out: lpFileInformation=0x10cd2c88*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.715] CreateFileW (lpFileName="C:\\Users\\Public\\AccountPictures" (normalized: "c:\\users\\public\\accountpictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.715] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\AccountPictures\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0079.715] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.715] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xce317778, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0079.715] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.715] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0079.715] CreateFileW (lpFileName="C:\\Users\\Public\\AccountPictures\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\public\\accountpictures\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.728] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0079.728] GetFileType (hFile=0x19c) returned 0x1 [0079.728] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0079.728] WriteFile (in: hFile=0x19c, lpBuffer=0x10ca9680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10ca9680*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0079.729] GetFileType (hFile=0x19c) returned 0x1 [0079.729] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0079.729] CloseHandle (hObject=0x19c) returned 1 [0079.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\public\\accountpictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd2d28 | out: lpFileInformation=0x10cd2d28*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xce317778, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1 [0079.731] CreateFileW (lpFileName="C:\\Users\\Public\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\public\\accountpictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.732] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.732] GetFileType (hFile=0x19c) returned 0x1 [0079.732] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.732] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e640 | out: pbBuffer=0x1108e640) returned 1 [0079.732] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e650 | out: pbBuffer=0x1108e650) returned 1 [0079.732] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcd701 | out: pbBuffer=0x10fcd701) returned 1 [0079.732] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcd901 | out: pbBuffer=0x10fcd901) returned 1 [0079.733] ReadFile (in: hFile=0x19c, lpBuffer=0x10d3a340, nNumberOfBytesToRead=0xc4, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d3a340*, lpNumberOfBytesRead=0x10c89bf0*=0xc4, lpOverlapped=0x0) returned 1 [0079.734] GetFileType (hFile=0x19c) returned 0x1 [0079.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.734] WriteFile (in: hFile=0x19c, lpBuffer=0x10d3a410*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d3a410*, lpNumberOfBytesWritten=0x10c89bf0*=0xc4, lpOverlapped=0x10c89bf4) returned 1 [0079.734] GetFileType (hFile=0x19c) returned 0x1 [0079.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.734] GetFileType (hFile=0x19c) returned 0x1 [0079.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.734] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcd800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fcd800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.734] GetFileType (hFile=0x19c) returned 0x1 [0079.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.734] GetFileType (hFile=0x19c) returned 0x1 [0079.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.734] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcda00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fcda00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.735] GetFileType (hFile=0x19c) returned 0x1 [0079.735] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.735] GetFileType (hFile=0x19c) returned 0x1 [0079.735] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.735] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0079.735] GetFileType (hFile=0x19c) returned 0x1 [0079.735] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xc4, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.735] CloseHandle (hObject=0x19c) returned 1 [0079.735] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\public\\accountpictures\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\AccountPictures\\desktop.ini.TRAPGET" (normalized: "c:\\users\\public\\accountpictures\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0079.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop" (normalized: "c:\\users\\public\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x10cd2e68 | out: lpFileInformation=0x10cd2e68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0079.748] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop" (normalized: "c:\\users\\public\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.748] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcf8 [0079.748] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38bb5c78, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38bb5c78, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38bb5c78, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat Reader DC.lnk", cAlternateFileName="ACROBA~1.LNK")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c3ce2c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c6308a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x91a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x7efcf8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.748] FindClose (in: hFindFile=0x7efcf8 | out: hFindFile=0x7efcf8) returned 1 [0079.748] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\public\\desktop\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.756] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0079.756] GetFileType (hFile=0x19c) returned 0x1 [0079.756] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0079.756] WriteFile (in: hFile=0x19c, lpBuffer=0x10d40000*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10d40000*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0079.757] GetFileType (hFile=0x19c) returned 0x1 [0079.757] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0079.757] CloseHandle (hObject=0x19c) returned 1 [0079.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk" (normalized: "c:\\users\\public\\desktop\\acrobat reader dc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x10cd2ff8 | out: lpFileInformation=0x10cd2ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38bb5c78, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38bb5c78, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38bb5c78, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x852)) returned 1 [0079.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x10cd3048 | out: lpFileInformation=0x10cd3048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c3ce2c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c6308a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x91a)) returned 1 [0079.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x10cd3098 | out: lpFileInformation=0x10cd3098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7)) returned 1 [0079.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd30e8 | out: lpFileInformation=0x10cd30e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0079.820] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.820] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.820] GetFileType (hFile=0x19c) returned 0x1 [0079.820] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.820] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e780 | out: pbBuffer=0x1108e780) returned 1 [0079.820] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e790 | out: pbBuffer=0x1108e790) returned 1 [0079.820] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcdb01 | out: pbBuffer=0x10fcdb01) returned 1 [0079.821] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcdd01 | out: pbBuffer=0x10fcdd01) returned 1 [0079.821] ReadFile (in: hFile=0x19c, lpBuffer=0x10d37340, nNumberOfBytesToRead=0xae, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d37340*, lpNumberOfBytesRead=0x10c89bf0*=0xae, lpOverlapped=0x0) returned 1 [0079.822] GetFileType (hFile=0x19c) returned 0x1 [0079.822] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.822] WriteFile (in: hFile=0x19c, lpBuffer=0x10d37550*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d37550*, lpNumberOfBytesWritten=0x10c89bf0*=0xae, lpOverlapped=0x10c89bf4) returned 1 [0079.824] GetFileType (hFile=0x19c) returned 0x1 [0079.824] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.824] GetFileType (hFile=0x19c) returned 0x1 [0079.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.825] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcdc00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fcdc00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.825] GetFileType (hFile=0x19c) returned 0x1 [0079.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.825] GetFileType (hFile=0x19c) returned 0x1 [0079.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.825] WriteFile (in: hFile=0x19c, lpBuffer=0x10fcde00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fcde00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0079.825] GetFileType (hFile=0x19c) returned 0x1 [0079.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.825] GetFileType (hFile=0x19c) returned 0x1 [0079.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.825] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0079.825] GetFileType (hFile=0x19c) returned 0x1 [0079.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0079.825] CloseHandle (hObject=0x19c) returned 1 [0079.834] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Desktop\\desktop.ini.TRAPGET" (normalized: "c:\\users\\public\\desktop\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0079.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents" (normalized: "c:\\users\\public\\documents"), fInfoLevelId=0x0, lpFileInformation=0x10cd3228 | out: lpFileInformation=0x10cd3228*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.841] CreateFileW (lpFileName="C:\\Users\\Public\\Documents" (normalized: "c:\\users\\public\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.841] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efcb8 [0079.849] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x7efcb8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.849] FindClose (in: hFindFile=0x7efcb8 | out: hFindFile=0x7efcb8) returned 1 [0079.850] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\public\\documents\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.868] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0079.868] GetFileType (hFile=0x19c) returned 0x1 [0079.868] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0079.869] WriteFile (in: hFile=0x19c, lpBuffer=0x10d40900*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10d40900*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0079.869] GetFileType (hFile=0x19c) returned 0x1 [0079.869] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0079.869] CloseHandle (hObject=0x19c) returned 1 [0079.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music" (normalized: "c:\\users\\public\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x10cd33b8 | out: lpFileInformation=0x10cd33b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.872] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Music" (normalized: "c:\\users\\public\\documents\\my music"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.872] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0079.872] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10cc4700*, nNumberOfCharsToWrite=0x32, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10cc4700*, lpNumberOfCharsWritten=0x10c89754*=0x32) returned 1 [0079.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures" (normalized: "c:\\users\\public\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x10cd3408 | out: lpFileInformation=0x10cd3408*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.922] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Pictures" (normalized: "c:\\users\\public\\documents\\my pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.922] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0079.922] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10cc4770*, nNumberOfCharsToWrite=0x35, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10cc4770*, lpNumberOfCharsWritten=0x10c89754*=0x35) returned 1 [0079.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos" (normalized: "c:\\users\\public\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x10cd3458 | out: lpFileInformation=0x10cd3458*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.974] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Videos" (normalized: "c:\\users\\public\\documents\\my videos"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0079.974] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x10c8992c | out: lpFindFileData=0x10c8992c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0079.974] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10cc47e0*, nNumberOfCharsToWrite=0x33, lpNumberOfCharsWritten=0x10c89754, lpReserved=0x0 | out: lpBuffer=0x10cc47e0*, lpNumberOfCharsWritten=0x10c89754*=0x33) returned 1 [0079.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd34a8 | out: lpFileInformation=0x10cd34a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1 [0079.997] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0079.998] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0079.998] GetFileType (hFile=0x19c) returned 0x1 [0079.998] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0079.998] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e900 | out: pbBuffer=0x1108e900) returned 1 [0079.998] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108e910 | out: pbBuffer=0x1108e910) returned 1 [0079.998] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10fcdf01 | out: pbBuffer=0x10fcdf01) returned 1 [0080.002] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee4101 | out: pbBuffer=0x10ee4101) returned 1 [0080.002] ReadFile (in: hFile=0x19c, lpBuffer=0x10fd37a0, nNumberOfBytesToRead=0x116, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fd37a0*, lpNumberOfBytesRead=0x10c89bf0*=0x116, lpOverlapped=0x0) returned 1 [0080.003] GetFileType (hFile=0x19c) returned 0x1 [0080.003] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.003] WriteFile (in: hFile=0x19c, lpBuffer=0x10fd38c0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fd38c0*, lpNumberOfBytesWritten=0x10c89bf0*=0x116, lpOverlapped=0x10c89bf4) returned 1 [0080.004] GetFileType (hFile=0x19c) returned 0x1 [0080.004] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x116, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.004] GetFileType (hFile=0x19c) returned 0x1 [0080.004] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.004] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee4000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee4000*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.004] GetFileType (hFile=0x19c) returned 0x1 [0080.004] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x116, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.004] GetFileType (hFile=0x19c) returned 0x1 [0080.004] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.004] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee4200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee4200*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.012] GetFileType (hFile=0x19c) returned 0x1 [0080.012] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x116, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.012] GetFileType (hFile=0x19c) returned 0x1 [0080.012] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.012] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0080.012] GetFileType (hFile=0x19c) returned 0x1 [0080.012] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x116, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.012] CloseHandle (hObject=0x19c) returned 1 [0080.013] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Documents\\desktop.ini.TRAPGET" (normalized: "c:\\users\\public\\documents\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0080.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Downloads" (normalized: "c:\\users\\public\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x10cd35e8 | out: lpFileInformation=0x10cd35e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.013] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads" (normalized: "c:\\users\\public\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0080.013] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efef8 [0080.014] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.014] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.014] FindNextFileW (in: hFindFile=0x7efef8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.014] FindClose (in: hFindFile=0x7efef8 | out: hFindFile=0x7efef8) returned 1 [0080.014] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\public\\downloads\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0080.014] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0080.014] GetFileType (hFile=0x19c) returned 0x1 [0080.014] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0080.014] WriteFile (in: hFile=0x19c, lpBuffer=0x10d41200*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10d41200*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0080.020] GetFileType (hFile=0x19c) returned 0x1 [0080.020] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0080.020] CloseHandle (hObject=0x19c) returned 1 [0080.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd3688 | out: lpFileInformation=0x10cd3688*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0080.021] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0080.021] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0080.021] GetFileType (hFile=0x19c) returned 0x1 [0080.021] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0080.021] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ea50 | out: pbBuffer=0x1108ea50) returned 1 [0080.021] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ea60 | out: pbBuffer=0x1108ea60) returned 1 [0080.021] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee4301 | out: pbBuffer=0x10ee4301) returned 1 [0080.022] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee4501 | out: pbBuffer=0x10ee4501) returned 1 [0080.022] ReadFile (in: hFile=0x19c, lpBuffer=0x10d37ad0, nNumberOfBytesToRead=0xae, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10d37ad0*, lpNumberOfBytesRead=0x10c89bf0*=0xae, lpOverlapped=0x0) returned 1 [0080.023] GetFileType (hFile=0x19c) returned 0x1 [0080.023] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.023] WriteFile (in: hFile=0x19c, lpBuffer=0x10d37ce0*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10d37ce0*, lpNumberOfBytesWritten=0x10c89bf0*=0xae, lpOverlapped=0x10c89bf4) returned 1 [0080.023] GetFileType (hFile=0x19c) returned 0x1 [0080.023] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.023] GetFileType (hFile=0x19c) returned 0x1 [0080.023] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.023] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee4400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee4400*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.023] GetFileType (hFile=0x19c) returned 0x1 [0080.023] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.023] GetFileType (hFile=0x19c) returned 0x1 [0080.023] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.023] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee4600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee4600*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.023] GetFileType (hFile=0x19c) returned 0x1 [0080.024] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.024] GetFileType (hFile=0x19c) returned 0x1 [0080.024] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.024] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0080.024] GetFileType (hFile=0x19c) returned 0x1 [0080.024] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.024] CloseHandle (hObject=0x19c) returned 1 [0080.024] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Downloads\\desktop.ini.TRAPGET" (normalized: "c:\\users\\public\\downloads\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0080.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries" (normalized: "c:\\users\\public\\libraries"), fInfoLevelId=0x0, lpFileInformation=0x10cd37c8 | out: lpFileInformation=0x10cd37c8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.025] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries" (normalized: "c:\\users\\public\\libraries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0080.025] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efff8 [0080.025] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.025] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.025] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0080.025] FindNextFileW (in: hFindFile=0x7efff8, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.025] FindClose (in: hFindFile=0x7efff8 | out: hFindFile=0x7efff8) returned 1 [0080.025] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\public\\libraries\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0080.092] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0080.092] GetFileType (hFile=0x19c) returned 0x1 [0080.092] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0080.092] WriteFile (in: hFile=0x19c, lpBuffer=0x10d41b00*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10d41b00*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0080.093] GetFileType (hFile=0x19c) returned 0x1 [0080.093] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0080.093] CloseHandle (hObject=0x19c) returned 1 [0080.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x10cd38b8 | out: lpFileInformation=0x10cd38b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0080.093] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0080.093] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0080.094] GetFileType (hFile=0x19c) returned 0x1 [0080.094] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0080.094] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108eb90 | out: pbBuffer=0x1108eb90) returned 1 [0080.094] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108eba0 | out: pbBuffer=0x1108eba0) returned 1 [0080.094] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee4701 | out: pbBuffer=0x10ee4701) returned 1 [0080.094] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee4901 | out: pbBuffer=0x10ee4901) returned 1 [0080.107] ReadFile (in: hFile=0x19c, lpBuffer=0x10fe0000, nNumberOfBytesToRead=0x3c0, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fe0000*, lpNumberOfBytesRead=0x10c89bf0*=0x3c0, lpOverlapped=0x0) returned 1 [0080.116] GetFileType (hFile=0x19c) returned 0x1 [0080.116] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.116] WriteFile (in: hFile=0x19c, lpBuffer=0x10fe0400*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fe0400*, lpNumberOfBytesWritten=0x10c89bf0*=0x3c0, lpOverlapped=0x10c89bf4) returned 1 [0080.117] GetFileType (hFile=0x19c) returned 0x1 [0080.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.117] GetFileType (hFile=0x19c) returned 0x1 [0080.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.117] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee4800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee4800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.117] GetFileType (hFile=0x19c) returned 0x1 [0080.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.117] GetFileType (hFile=0x19c) returned 0x1 [0080.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.117] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee4a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee4a00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.117] GetFileType (hFile=0x19c) returned 0x1 [0080.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.117] GetFileType (hFile=0x19c) returned 0x1 [0080.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.117] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0080.117] GetFileType (hFile=0x19c) returned 0x1 [0080.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.117] CloseHandle (hObject=0x19c) returned 1 [0080.118] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), lpNewFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.TRAPGET" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms.trapget"), dwFlags=0x1) returned 1 [0080.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd39f8 | out: lpFileInformation=0x10cd39f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaf)) returned 1 [0080.118] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0080.118] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0080.118] GetFileType (hFile=0x19c) returned 0x1 [0080.118] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0080.119] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ec70 | out: pbBuffer=0x1108ec70) returned 1 [0080.119] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ec80 | out: pbBuffer=0x1108ec80) returned 1 [0080.119] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee4b01 | out: pbBuffer=0x10ee4b01) returned 1 [0080.119] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee4d01 | out: pbBuffer=0x10ee4d01) returned 1 [0080.119] ReadFile (in: hFile=0x19c, lpBuffer=0x10fe20b0, nNumberOfBytesToRead=0xaf, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10fe20b0*, lpNumberOfBytesRead=0x10c89bf0*=0xaf, lpOverlapped=0x0) returned 1 [0080.120] GetFileType (hFile=0x19c) returned 0x1 [0080.120] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.121] WriteFile (in: hFile=0x19c, lpBuffer=0x10fe22c0*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10fe22c0*, lpNumberOfBytesWritten=0x10c89bf0*=0xaf, lpOverlapped=0x10c89bf4) returned 1 [0080.121] GetFileType (hFile=0x19c) returned 0x1 [0080.121] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xaf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.121] GetFileType (hFile=0x19c) returned 0x1 [0080.121] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.121] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee4c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee4c00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.121] GetFileType (hFile=0x19c) returned 0x1 [0080.121] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xaf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.121] GetFileType (hFile=0x19c) returned 0x1 [0080.121] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.121] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee4e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee4e00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.121] GetFileType (hFile=0x19c) returned 0x1 [0080.121] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xaf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.121] GetFileType (hFile=0x19c) returned 0x1 [0080.121] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.121] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0080.121] GetFileType (hFile=0x19c) returned 0x1 [0080.121] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xaf, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.121] CloseHandle (hObject=0x19c) returned 1 [0080.122] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Libraries\\desktop.ini.TRAPGET" (normalized: "c:\\users\\public\\libraries\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0080.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music" (normalized: "c:\\users\\public\\music"), fInfoLevelId=0x0, lpFileInformation=0x10cd3b38 | out: lpFileInformation=0x10cd3b38*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.122] CreateFileW (lpFileName="C:\\Users\\Public\\Music" (normalized: "c:\\users\\public\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0080.122] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd78 [0080.122] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.122] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.122] FindNextFileW (in: hFindFile=0x7efd78, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.123] FindClose (in: hFindFile=0x7efd78 | out: hFindFile=0x7efd78) returned 1 [0080.123] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\public\\music\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0080.137] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0080.137] GetFileType (hFile=0x19c) returned 0x1 [0080.137] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0080.137] WriteFile (in: hFile=0x19c, lpBuffer=0x10f02480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10f02480*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0080.138] GetFileType (hFile=0x19c) returned 0x1 [0080.138] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0080.138] CloseHandle (hObject=0x19c) returned 1 [0080.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd3bd8 | out: lpFileInformation=0x10cd3bd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0080.139] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0080.139] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0080.139] GetFileType (hFile=0x19c) returned 0x1 [0080.139] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0080.139] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108edc0 | out: pbBuffer=0x1108edc0) returned 1 [0080.139] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108edd0 | out: pbBuffer=0x1108edd0) returned 1 [0080.139] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee4f01 | out: pbBuffer=0x10ee4f01) returned 1 [0080.140] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee5101 | out: pbBuffer=0x10ee5101) returned 1 [0080.140] ReadFile (in: hFile=0x19c, lpBuffer=0x10f0e000, nNumberOfBytesToRead=0x17c, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f0e000*, lpNumberOfBytesRead=0x10c89bf0*=0x17c, lpOverlapped=0x0) returned 1 [0080.141] GetFileType (hFile=0x19c) returned 0x1 [0080.141] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.141] WriteFile (in: hFile=0x19c, lpBuffer=0x10f0e180*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f0e180*, lpNumberOfBytesWritten=0x10c89bf0*=0x17c, lpOverlapped=0x10c89bf4) returned 1 [0080.141] GetFileType (hFile=0x19c) returned 0x1 [0080.141] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.141] GetFileType (hFile=0x19c) returned 0x1 [0080.141] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.141] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee5000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee5000*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.141] GetFileType (hFile=0x19c) returned 0x1 [0080.141] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.141] GetFileType (hFile=0x19c) returned 0x1 [0080.141] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.142] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee5200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee5200*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.146] GetFileType (hFile=0x19c) returned 0x1 [0080.146] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.146] GetFileType (hFile=0x19c) returned 0x1 [0080.165] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.165] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0080.165] GetFileType (hFile=0x19c) returned 0x1 [0080.165] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.165] CloseHandle (hObject=0x19c) returned 1 [0080.165] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Music\\desktop.ini.TRAPGET" (normalized: "c:\\users\\public\\music\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0080.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures" (normalized: "c:\\users\\public\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x10cd3d18 | out: lpFileInformation=0x10cd3d18*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.166] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures" (normalized: "c:\\users\\public\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0080.166] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0378 [0080.166] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.166] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.166] FindNextFileW (in: hFindFile=0x7f0378, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.167] FindClose (in: hFindFile=0x7f0378 | out: hFindFile=0x7f0378) returned 1 [0080.167] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\public\\pictures\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0080.167] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0080.167] GetFileType (hFile=0x19c) returned 0x1 [0080.167] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0080.167] WriteFile (in: hFile=0x19c, lpBuffer=0x10f02d80*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10f02d80*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0080.168] GetFileType (hFile=0x19c) returned 0x1 [0080.168] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0080.168] CloseHandle (hObject=0x19c) returned 1 [0080.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd3db8 | out: lpFileInformation=0x10cd3db8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0080.168] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0080.168] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0080.168] GetFileType (hFile=0x19c) returned 0x1 [0080.168] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0080.169] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ef00 | out: pbBuffer=0x1108ef00) returned 1 [0080.169] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108ef10 | out: pbBuffer=0x1108ef10) returned 1 [0080.169] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee5301 | out: pbBuffer=0x10ee5301) returned 1 [0080.169] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee5501 | out: pbBuffer=0x10ee5501) returned 1 [0080.169] ReadFile (in: hFile=0x19c, lpBuffer=0x10f0e300, nNumberOfBytesToRead=0x17c, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f0e300*, lpNumberOfBytesRead=0x10c89bf0*=0x17c, lpOverlapped=0x0) returned 1 [0080.170] GetFileType (hFile=0x19c) returned 0x1 [0080.170] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.170] WriteFile (in: hFile=0x19c, lpBuffer=0x10f0e480*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f0e480*, lpNumberOfBytesWritten=0x10c89bf0*=0x17c, lpOverlapped=0x10c89bf4) returned 1 [0080.170] GetFileType (hFile=0x19c) returned 0x1 [0080.170] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.170] GetFileType (hFile=0x19c) returned 0x1 [0080.170] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.170] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee5400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee5400*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.171] GetFileType (hFile=0x19c) returned 0x1 [0080.171] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.171] GetFileType (hFile=0x19c) returned 0x1 [0080.171] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.171] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee5600*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee5600*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.176] GetFileType (hFile=0x19c) returned 0x1 [0080.176] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.176] GetFileType (hFile=0x19c) returned 0x1 [0080.176] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.176] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0080.176] GetFileType (hFile=0x19c) returned 0x1 [0080.176] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.176] CloseHandle (hObject=0x19c) returned 1 [0080.176] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Pictures\\desktop.ini.TRAPGET" (normalized: "c:\\users\\public\\pictures\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0080.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos" (normalized: "c:\\users\\public\\videos"), fInfoLevelId=0x0, lpFileInformation=0x10cd3ef8 | out: lpFileInformation=0x10cd3ef8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.177] CreateFileW (lpFileName="C:\\Users\\Public\\Videos" (normalized: "c:\\users\\public\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0080.177] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x10c89a68 | out: lpFindFileData=0x10c89a68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0038 [0080.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.177] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89a88 | out: lpFindFileData=0x10c89a88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.177] FindClose (in: hFindFile=0x7f0038 | out: hFindFile=0x7f0038) returned 1 [0080.177] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\TRAPGET-INSTRUCTION.txt" (normalized: "c:\\users\\public\\videos\\trapget-instruction.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0080.177] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89ccc | out: lpMode=0x10c89ccc) returned 0 [0080.177] GetFileType (hFile=0x19c) returned 0x1 [0080.177] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0080.178] WriteFile (in: hFile=0x19c, lpBuffer=0x10f03680*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x10c89cbc, lpOverlapped=0x10c89cc0 | out: lpBuffer=0x10f03680*, lpNumberOfBytesWritten=0x10c89cbc*=0x464, lpOverlapped=0x10c89cc0) returned 1 [0080.182] GetFileType (hFile=0x19c) returned 0x1 [0080.182] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca4 | out: lpNewFilePointer=0x0) returned 1 [0080.182] CloseHandle (hObject=0x19c) returned 1 [0080.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x10cd3f98 | out: lpFileInformation=0x10cd3f98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0080.182] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0080.183] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c00 | out: lpMode=0x10c89c00) returned 0 [0080.183] GetFileType (hFile=0x19c) returned 0x1 [0080.183] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c30 | out: lpFileInformation=0x10c89c30) returned 1 [0080.183] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f040 | out: pbBuffer=0x1108f040) returned 1 [0080.183] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f050 | out: pbBuffer=0x1108f050) returned 1 [0080.183] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee5701 | out: pbBuffer=0x10ee5701) returned 1 [0080.183] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee5901 | out: pbBuffer=0x10ee5901) returned 1 [0080.184] ReadFile (in: hFile=0x19c, lpBuffer=0x10f0e600, nNumberOfBytesToRead=0x17c, lpNumberOfBytesRead=0x10c89bf0, lpOverlapped=0x0 | out: lpBuffer=0x10f0e600*, lpNumberOfBytesRead=0x10c89bf0*=0x17c, lpOverlapped=0x0) returned 1 [0080.184] GetFileType (hFile=0x19c) returned 0x1 [0080.185] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.185] WriteFile (in: hFile=0x19c, lpBuffer=0x10f0e780*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10f0e780*, lpNumberOfBytesWritten=0x10c89bf0*=0x17c, lpOverlapped=0x10c89bf4) returned 1 [0080.185] GetFileType (hFile=0x19c) returned 0x1 [0080.185] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.185] GetFileType (hFile=0x19c) returned 0x1 [0080.185] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.185] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee5800*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee5800*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.185] GetFileType (hFile=0x19c) returned 0x1 [0080.185] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.185] GetFileType (hFile=0x19c) returned 0x1 [0080.185] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.185] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee5a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10ee5a00*, lpNumberOfBytesWritten=0x10c89bf0*=0x100, lpOverlapped=0x10c89bf4) returned 1 [0080.190] GetFileType (hFile=0x19c) returned 0x1 [0080.190] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.190] GetFileType (hFile=0x19c) returned 0x1 [0080.190] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.190] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89cf4*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89bf0, lpOverlapped=0x10c89bf4 | out: lpBuffer=0x10c89cf4*, lpNumberOfBytesWritten=0x10c89bf0*=0x7, lpOverlapped=0x10c89bf4) returned 1 [0080.190] GetFileType (hFile=0x19c) returned 0x1 [0080.190] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x10c89bd8 | out: lpNewFilePointer=0x0) returned 1 [0080.190] CloseHandle (hObject=0x19c) returned 1 [0080.190] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Videos\\desktop.ini.TRAPGET" (normalized: "c:\\users\\public\\videos\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0080.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x110c60f8 | out: lpFileInformation=0x110c60f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0080.191] CreateFileW (lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0080.191] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89c64 | out: lpMode=0x10c89c64) returned 0 [0080.191] GetFileType (hFile=0x19c) returned 0x1 [0080.191] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89c94 | out: lpFileInformation=0x10c89c94) returned 1 [0080.191] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f120 | out: pbBuffer=0x1108f120) returned 1 [0080.191] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f130 | out: pbBuffer=0x1108f130) returned 1 [0080.191] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee5b01 | out: pbBuffer=0x10ee5b01) returned 1 [0080.192] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee5d01 | out: pbBuffer=0x10ee5d01) returned 1 [0080.192] ReadFile (in: hFile=0x19c, lpBuffer=0x10fe2d10, nNumberOfBytesToRead=0xae, lpNumberOfBytesRead=0x10c89c54, lpOverlapped=0x0 | out: lpBuffer=0x10fe2d10*, lpNumberOfBytesRead=0x10c89c54*=0xae, lpOverlapped=0x0) returned 1 [0080.193] GetFileType (hFile=0x19c) returned 0x1 [0080.193] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0080.193] WriteFile (in: hFile=0x19c, lpBuffer=0x10fe2f20*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10fe2f20*, lpNumberOfBytesWritten=0x10c89c54*=0xae, lpOverlapped=0x10c89c58) returned 1 [0080.193] GetFileType (hFile=0x19c) returned 0x1 [0080.193] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0080.193] GetFileType (hFile=0x19c) returned 0x1 [0080.193] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0080.193] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee5c00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10ee5c00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0080.193] GetFileType (hFile=0x19c) returned 0x1 [0080.193] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0080.193] GetFileType (hFile=0x19c) returned 0x1 [0080.193] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0080.193] WriteFile (in: hFile=0x19c, lpBuffer=0x10ee5e00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10ee5e00*, lpNumberOfBytesWritten=0x10c89c54*=0x100, lpOverlapped=0x10c89c58) returned 1 [0080.193] GetFileType (hFile=0x19c) returned 0x1 [0080.193] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0080.193] GetFileType (hFile=0x19c) returned 0x1 [0080.193] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0080.194] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89d58*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89c54, lpOverlapped=0x10c89c58 | out: lpBuffer=0x10c89d58*, lpNumberOfBytesWritten=0x10c89c54*=0x7, lpOverlapped=0x10c89c58) returned 1 [0080.194] GetFileType (hFile=0x19c) returned 0x1 [0080.194] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89c3c | out: lpNewFilePointer=0x0) returned 1 [0080.194] CloseHandle (hObject=0x19c) returned 1 [0080.194] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\desktop.ini.TRAPGET" (normalized: "c:\\users\\public\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0080.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x110c6238 | out: lpFileInformation=0x110c6238*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a9bc987, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f69dfa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0080.197] CreateFileW (lpFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0080.197] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x10c89cc8 | out: lpMode=0x10c89cc8) returned 0 [0080.197] GetFileType (hFile=0x19c) returned 0x1 [0080.197] GetFileInformationByHandle (in: hFile=0x19c, lpFileInformation=0x10c89cf8 | out: lpFileInformation=0x10c89cf8) returned 1 [0080.197] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f210 | out: pbBuffer=0x1108f210) returned 1 [0080.197] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x10, pbBuffer=0x1108f220 | out: pbBuffer=0x1108f220) returned 1 [0080.197] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10ee5f01 | out: pbBuffer=0x10ee5f01) returned 1 [0080.198] CryptGenRandom (in: hProv=0x7e0190, dwLen=0x40, pbBuffer=0x10e30101 | out: pbBuffer=0x10e30101) returned 1 [0080.198] ReadFile (in: hFile=0x19c, lpBuffer=0x10fe2fd0, nNumberOfBytesToRead=0xae, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x0 | out: lpBuffer=0x10fe2fd0*, lpNumberOfBytesRead=0x10c89cb8*=0xae, lpOverlapped=0x0) returned 1 [0080.198] GetFileType (hFile=0x19c) returned 0x1 [0080.198] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0080.199] WriteFile (in: hFile=0x19c, lpBuffer=0x10fe31e0*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10fe31e0*, lpNumberOfBytesWritten=0x10c89cb8*=0xae, lpOverlapped=0x10c89cbc) returned 1 [0080.199] GetFileType (hFile=0x19c) returned 0x1 [0080.199] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0080.199] GetFileType (hFile=0x19c) returned 0x1 [0080.199] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0080.199] WriteFile (in: hFile=0x19c, lpBuffer=0x10e30000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e30000*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0080.199] GetFileType (hFile=0x19c) returned 0x1 [0080.199] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0080.199] GetFileType (hFile=0x19c) returned 0x1 [0080.199] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0080.199] WriteFile (in: hFile=0x19c, lpBuffer=0x10e30200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e30200*, lpNumberOfBytesWritten=0x10c89cb8*=0x100, lpOverlapped=0x10c89cbc) returned 1 [0080.199] GetFileType (hFile=0x19c) returned 0x1 [0080.199] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0080.214] GetFileType (hFile=0x19c) returned 0x1 [0080.214] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0080.215] WriteFile (in: hFile=0x19c, lpBuffer=0x10c89dbc*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10c89dbc*, lpNumberOfBytesWritten=0x10c89cb8*=0x7, lpOverlapped=0x10c89cbc) returned 1 [0080.215] GetFileType (hFile=0x19c) returned 0x1 [0080.215] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0080.215] CloseHandle (hObject=0x19c) returned 1 [0080.215] MoveFileExW (lpExistingFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), lpNewFileName="C:\\Users\\desktop.ini.TRAPGET" (normalized: "c:\\users\\desktop.ini.trapget"), dwFlags=0x1) returned 1 [0080.216] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x110c6378 | out: lpFileInformation=0x110c6378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0080.216] CreateFileW (lpFileName="C:\\Windows" (normalized: "c:\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0080.216] FindFirstFileW (in: lpFileName="C:\\Windows\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efc78 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd48678d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1aa55324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="addins", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb7482c44, ftLastAccessTime.dwHighDateTime=0x1d3278b, ftLastWriteTime.dwLowDateTime=0xb7482c44, ftLastWriteTime.dwHighDateTime=0x1d3278b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="appcompat", cAlternateFileName="APPCOM~1")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9be24fef, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9be24fef, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPatch", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x12b43423, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x12b43423, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppReadiness", cAlternateFileName="APPREA~1")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8708dc51, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x8708dc51, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="assembly", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xddb7e27d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1aa7b586, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bcastdvr", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x19803c6d, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bfsvc.exe", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xdead1a4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe82a3c51, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BitLockerDiscoveryVolumeContents", cAlternateFileName="BITLOC~1")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d7a0fe, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xdead3502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17dc65cf, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x90872f50, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x90872f50, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf14f8b25, ftLastWriteTime.dwHighDateTime=0x1d69115, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstat.dat", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17dc65cf, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xdebb61df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17dc65cf, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Branding", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67d4c05f, ftCreationTime.dwHighDateTime=0x1d2a029, ftLastAccessTime.dwLowDateTime=0xdbffbc19, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x966e04e2, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CbsTemp", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99b62e0e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x99b62e0e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x15e333d8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="comsetup.log", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x372a1213, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xdebd7d88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x372a1213, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSC", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17dc65cf, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xdebdc411, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1acb7983, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cursors", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17dc65cf, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3def050a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x3def050a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="debug", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28c1595d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x28c1595d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x34dcd0c5, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1dc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagerr.xml", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17dc65cf, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xdebdcd7d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17dec831, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28c1595d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x28c1595d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x34dcd0c5, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1dc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagwrn.xml", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2ee235, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xdf5f218a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2ee235, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalLocker", cAlternateFileName="DIGITA~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17dec831, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xdf5f2bbc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1af664b6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloaded Program Files", cAlternateFileName="DOWNLO~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68850e76, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x68850e76, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x6faa899d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x1050, dwReserved0=0x0, dwReserved1=0x0, cFileName="DtcInstall.log", cAlternateFileName="DTCINS~1.LOG")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17dec831, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xdf5f30a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1af664b6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELAMBKUP", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2ee235, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xdf67a4af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2ee235, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46742519, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x75f1db39, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x46742519, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x49f740, dwReserved0=0x0, dwReserved1=0x0, cFileName="explorer.exe", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0x17dec831, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7afb1a0, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7afb1a0, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e12a9b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xdf7b4f9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17e12a9b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameBarPresenceWriter", cAlternateFileName="GAMEBA~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e12a9b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xdf7b55fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17e12a9b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Globalization", cAlternateFileName="GLOBAL~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e12a9b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xdf800b1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2ee235, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x77c0645d, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xee200, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpPane.exe", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="hh.exe", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x98f4e2a5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x98f4e2a5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HoloShell", cAlternateFileName="HOLOSH~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e12a9b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xdf8fd74b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2ee235, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17e12a9b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xaac5dd0d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaac5dd0d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImmersiveControlPanel", cAlternateFileName="IMMERS~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbfaebd9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe7c06344, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7c06344, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INF", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e851ce, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xdff94e78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17e851ce, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfusedApps", cAlternateFileName="INFUSE~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e851ce, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xef2d3697, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17e851ce, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputMethod", cAlternateFileName="INPUTM~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17e851ce, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8765d7ac, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x8765d7ac, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e851ce, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xef7be331, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1b80afe5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2Schemas", cAlternateFileName="L2SCHE~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e851ce, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xef7bee3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17e851ce, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LiveKernelReports", cAlternateFileName="LIVEKE~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e658e21, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xb7cfde2f, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xb7cfde2f, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0x17e851ce, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xef97d725, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1b8a3976, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c70a82, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x31c70a82, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x31c70a82, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa87b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mib.bin", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3945890, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x3945890, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ef78fc, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf21bb5ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ef78fc, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Migration", cAlternateFileName="MIGRAT~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ef78fc, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xab574c69, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xab574c69, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MiracastView", cAlternateFileName="MIRACA~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ef78fc, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf22b5954, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ef78fc, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModemLogs", cAlternateFileName="MODEML~1")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63139aa0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x63139aa0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x63139aa0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf5f0e76, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xf22b6408, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbf5f0e76, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCR", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ef78fc, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf22b7e54, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1c4dbe35, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Offline Web Pages", cAlternateFileName="OFFLIN~1")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ef78fc, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf22b8a9c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ef78fc, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="PERFOR~1")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de744e6, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x5de744e6, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xb1af82f8, ftLastWriteTime.dwHighDateTime=0x1d4ae7b, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFRO.log", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ef78fc, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf2324e93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ef78fc, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLA", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ef78fc, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf24c3b61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x719034c2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PolicyDefinitions", cAlternateFileName="POLICY~1")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x71da2243, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x1b12c4b0, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0x1b12c4b0, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prefetch", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17f1db62, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xabdf321a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xabdf321a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrintDialog", cAlternateFileName="PRINTD~1")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1e1143, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfc1e1143, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7eaa290a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x87d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Professional.xml", cAlternateFileName="PROFES~1.XML")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1858fd, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x5e1858fd, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x9559d4a0, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x24, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress.ini", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17f1db62, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf25b6daf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7192972a, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b61f88, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x34b61f88, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x34b61f88, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="regedit.exe", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17f1db62, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x27b18d0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x27b18d0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xf2617933, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RemotePackages", cAlternateFileName="REMOTE~1")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17f1db62, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xba570ad6, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xba570ad6, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rescache", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17f1db62, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf274f465, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17f1db62, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17f1db62, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf27a54b2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17f1db62, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SchCache", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17f1db62, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf27dc80b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="schemas", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17f43dc9, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf2961540, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67b1f448, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6c47f3de, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x6c47f3de, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceProfiles", cAlternateFileName="SERVIC~2")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xf3c2f734, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b360946, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="servicing", cAlternateFileName="SERVIC~1")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b773cca, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf0300901, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0xf0300901, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8beb015c, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8beb015c, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8beb015c, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setuperr.log", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17f43dc9, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bebd980, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bebd980, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellExperiences", cAlternateFileName="SHELLE~1")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f04186d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xf41b1a56, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6f067ab4, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellNew", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0cbc470, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xf41b1faa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb0cbc470, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKB", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d14303c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3ac201be, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x3ac201be, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17f43dc9, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf444c3f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17f43dc9, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17f43dc9, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf44cac4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17f43dc9, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech_OneCore", cAlternateFileName="SPEECH~1")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62121717, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62121717, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62121717, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="splwow64.exe", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17f43dc9, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf45e6143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17f43dc9, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x383caa7, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97447ccc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97447ccc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.ini", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc0b701ad, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xc0b701ad, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182fd9c7, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfcb6f216, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6e35c2e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemApps", cAlternateFileName="SYSTEM~1")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183e282c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xff66c3e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6e35c2e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemResources", cAlternateFileName="SYSTEM~2")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec28c54, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xebb5ab66, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xebb5ab66, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysWOW64", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2290850, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x185d2759, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAPI", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16b59ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf5bed750, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xf5bed750, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks", cAlternateFileName="")) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe0836af1, ftLastAccessTime.dwHighDateTime=0x1d63331, ftLastWriteTime.dwLowDateTime=0xe0836af1, ftLastWriteTime.dwHighDateTime=0x1d63331, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2292989, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x185d2759, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracing", cAlternateFileName="")) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x229301d, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20a279c9, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32", cAlternateFileName="")) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7458423a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7458423a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7458423a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32.dll", cAlternateFileName="")) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x22939a7, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x185f89bf, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vss", cAlternateFileName="")) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185f89bf, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x23435b2, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x185f89bf, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web", cAlternateFileName="")) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x383caa7, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97447ccc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97447ccc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="win.ini", cAlternateFileName="")) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x63ec9552, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x63eef7bd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsShell.Manifest", cAlternateFileName="")) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d14303c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1d14303c, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xf1f66f94, ftLastWriteTime.dwHighDateTime=0x1d69115, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.log", cAlternateFileName="WINDOW~1.LOG")) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d205bba, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d205bba, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d205bba, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="winhlp32.exe", cAlternateFileName="")) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x1a20a63, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x1a20a63, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinSxS", cAlternateFileName="")) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa4999f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2aa4999f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2aa4999f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4d4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSysPr9.prx", cAlternateFileName="")) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x630c736a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x630c736a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x630c736a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="write.exe", cAlternateFileName="")) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x7efc78, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.219] FindClose (in: hFindFile=0x7efc78 | out: hFindFile=0x7efc78) returned 1 [0080.219] GetFileAttributesExW (in: lpFileName="C:\\Windows10Upgrade" (normalized: "c:\\windows10upgrade"), fInfoLevelId=0x0, lpFileInformation=0x10e3e418 | out: lpFileInformation=0x10e3e418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0080.219] CreateFileW (lpFileName="C:\\Windows10Upgrade" (normalized: "c:\\windows10upgrade"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0080.219] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\*", lpFindFileData=0x10c89b30 | out: lpFindFileData=0x10c89b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f0038 [0080.222] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.222] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea35483d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea355be9, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0080.222] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3659ec, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3659ec, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x704c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="appraiserxp.dll", cAlternateFileName="APPRAI~1.DLL")) returned 1 [0080.222] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea36cf08, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea36cf08, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x1cec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootsect.exe", cAlternateFileName="")) returned 1 [0080.222] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea350dad, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea350dad, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xb08c3ee, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configuration.ini", cAlternateFileName="CONFIG~1.INI")) returned 1 [0080.222] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea36e29e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea36e29e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xf0c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="cosquery.dll", cAlternateFileName="")) returned 1 [0080.222] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea370998, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea370998, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x508c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DevInv.dll", cAlternateFileName="")) returned 1 [0080.222] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3757e9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea377ed3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea377ed3, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dll1", cAlternateFileName="")) returned 1 [0080.222] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea37cd05, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37cd05, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37cd05, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dll2", cAlternateFileName="")) returned 1 [0080.222] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea380798, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea380798, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x326c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloader.dll", cAlternateFileName="DOWNLO~1.DLL")) returned 1 [0080.222] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea381b2a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea381b2a, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x9d2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea385605, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea385605, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xc2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWDCW20.DLL", cAlternateFileName="")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea386943, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea386943, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xb2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea387cd0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea387cd0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x2652, dwReserved0=0x0, dwReserved1=0x0, cFileName="EnableWiFiTracing.cmd", cAlternateFileName="ENABLE~1.CMD")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea389060, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea389060, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x10cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESDHelper.dll", cAlternateFileName="ESDHEL~1.DLL")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea38cadd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea38cadd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x9ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="esdstub.dll", cAlternateFileName="")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea38de7f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea38de7f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x89ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GatherOSState.EXE", cAlternateFileName="GATHER~1.EXE")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39058e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39058e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x83cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentDeploy.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea392ca4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea392ca4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~2.DLL")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39539e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39539e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x11ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.EXE", cAlternateFileName="GETCUR~1.EXE")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39673d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39673d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x6cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HttpHelper.exe", cAlternateFileName="HTTPHE~1.EXE")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PostOOBEScript.cmd", cAlternateFileName="POSTOO~1.CMD")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b3c1b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b3c1b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea9ef415, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea9ef415, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x624407ed, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0x3d14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="upgrader_default.log", cAlternateFileName="UPGRAD~1.LOG")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdc86a8, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x32fe02cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0x0, dwReserved1=0x0, cFileName="upgrader_win10.log", cAlternateFileName="UPGRAD~2.LOG")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea63f06a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63f06a, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x880c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wimgapi.dll", cAlternateFileName="")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea642af3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea642af3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xdf8c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="windlp.dll", cAlternateFileName="")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea64a022, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea64a022, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x159ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows10UpgraderApp.exe", cAlternateFileName="WINDOW~1.EXE")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea64ee41, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea64ee41, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinREBootApp32.exe", cAlternateFileName="WINREB~1.EXE")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6528e0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea6528e0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x64c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinREBootApp64.exe", cAlternateFileName="WINREB~2.EXE")) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x7f0038, lpFindFileData=0x10c89b50 | out: lpFindFileData=0x10c89b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.223] FindClose (in: hFindFile=0x7f0038 | out: hFindFile=0x7f0038) returned 1 [0080.224] GetFileAttributesExW (in: lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), fInfoLevelId=0x0, lpFileInformation=0x10e3ed78 | out: lpFileInformation=0x10e3ed78*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da)) returned 1 [0080.255] CreateFileW (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0080.256] FindFirstFileW (in: lpFileName="C:\\bootmgr\\*", lpFindFileData=0x10c89a58 | out: lpFindFileData=0x10c89a58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0080.256] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10e46000*, nNumberOfCharsToWrite=0x1a, lpNumberOfCharsWritten=0x10c89880, lpReserved=0x0 | out: lpBuffer=0x10e46000*, lpNumberOfCharsWritten=0x10c89880*=0x1a) returned 1 [0080.283] GetFileAttributesExW (in: lpFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), fInfoLevelId=0x0, lpFileInformation=0x10e48008 | out: lpFileInformation=0x10e48008*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0080.284] FindFirstFileW (in: lpFileName="C:\\hiberfil.sys", lpFindFileData=0x10c899fc | out: lpFindFileData=0x10c899fc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd84572f7, ftLastWriteTime.dwHighDateTime=0x1d63331, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 0x7efc78 [0080.284] FindClose (in: hFindFile=0x7efc78 | out: hFindFile=0x7efc78) returned 1 [0080.285] GetFileAttributesExW (in: lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), fInfoLevelId=0x0, lpFileInformation=0x10e480a8 | out: lpFileInformation=0x10e480a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0080.286] FindFirstFileW (in: lpFileName="C:\\pagefile.sys", lpFindFileData=0x10c899fc | out: lpFindFileData=0x10c899fc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xd9c77627, ftLastWriteTime.dwHighDateTime=0x1d63331, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 0x7efd78 [0080.286] FindClose (in: hFindFile=0x7efd78 | out: hFindFile=0x7efd78) returned 1 [0080.287] GetFileAttributesExW (in: lpFileName="C:\\swapfile.sys" (normalized: "c:\\swapfile.sys"), fInfoLevelId=0x0, lpFileInformation=0x10e48148 | out: lpFileInformation=0x10e48148*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0080.287] FindFirstFileW (in: lpFileName="C:\\swapfile.sys", lpFindFileData=0x10c899fc | out: lpFindFileData=0x10c899fc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xd9c9d88a, ftLastWriteTime.dwHighDateTime=0x1d63331, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 0x7f0238 [0080.297] FindClose (in: hFindFile=0x7f0238 | out: hFindFile=0x7f0238) returned 1 [0080.297] SetEvent (hEvent=0x158) returned 1 [0080.297] ExitProcess (uExitCode=0x0) Thread: id = 12 os_tid = 0x11e0 [0052.066] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x316dff58, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x316dff58*=0x164) returned 1 [0052.066] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x170 [0052.066] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0052.710] SetEvent (hEvent=0x158) returned 1 [0052.710] SetEvent (hEvent=0x138) returned 1 [0052.710] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0052.726] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0052.726] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x0 [0052.734] SetEvent (hEvent=0x158) returned 1 [0052.734] SetEvent (hEvent=0x138) returned 1 [0052.734] SetEvent (hEvent=0x160) returned 1 [0052.734] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0052.743] SetEvent (hEvent=0x168) returned 1 [0052.743] SetEvent (hEvent=0x160) returned 1 [0052.743] SetEvent (hEvent=0x12c) returned 1 [0052.743] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0052.752] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.131] SetEvent (hEvent=0x160) returned 1 [0053.131] SetEvent (hEvent=0x138) returned 1 [0053.131] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0053.149] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.149] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0053.150] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.150] SetEvent (hEvent=0x160) returned 1 [0053.150] SetEvent (hEvent=0x138) returned 1 [0053.150] SetEvent (hEvent=0x158) returned 1 [0053.151] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.152] SetEvent (hEvent=0x168) returned 1 [0053.152] SetEvent (hEvent=0x158) returned 1 [0053.152] SetEvent (hEvent=0x12c) returned 1 [0053.152] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.171] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.262] SetEvent (hEvent=0x12c) returned 1 [0053.262] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.275] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.534] SetEvent (hEvent=0x12c) returned 1 [0053.534] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.541] SetEvent (hEvent=0x138) returned 1 [0053.541] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.613] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.672] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.764] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.893] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.935] SetEvent (hEvent=0x12c) returned 1 [0053.935] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0053.937] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0054.020] SetEvent (hEvent=0x12c) returned 1 [0054.020] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0054.038] SetEvent (hEvent=0x138) returned 1 [0054.038] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0054.273] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0054.277] SetEvent (hEvent=0x138) returned 1 [0054.277] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0054.287] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0054.614] SetEvent (hEvent=0x138) returned 1 [0054.614] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0054.616] SetEvent (hEvent=0x138) returned 1 [0054.616] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0054.823] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0054.824] SetEvent (hEvent=0x138) returned 1 [0054.824] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0054.827] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0054.997] SetEvent (hEvent=0x158) returned 1 [0054.997] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.000] SetEvent (hEvent=0x158) returned 1 [0055.001] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.080] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.082] SetEvent (hEvent=0x158) returned 1 [0055.082] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.084] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.242] SetEvent (hEvent=0x160) returned 1 [0055.242] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.243] SetEvent (hEvent=0x160) returned 1 [0055.243] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.347] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.349] SetEvent (hEvent=0x160) returned 1 [0055.349] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.354] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.727] SetEvent (hEvent=0x138) returned 1 [0055.727] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.729] SetEvent (hEvent=0x138) returned 1 [0055.729] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.818] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.819] SetEvent (hEvent=0x138) returned 1 [0055.819] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.820] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.886] SetEvent (hEvent=0x138) returned 1 [0055.886] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0055.888] SetEvent (hEvent=0x138) returned 1 [0055.889] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.034] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.036] SetEvent (hEvent=0x138) returned 1 [0056.036] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.039] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.138] SetEvent (hEvent=0x138) returned 1 [0056.138] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.142] SetEvent (hEvent=0x138) returned 1 [0056.142] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.203] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.259] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.305] SetEvent (hEvent=0x160) returned 1 [0056.305] SetEvent (hEvent=0x138) returned 1 [0056.305] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0056.318] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.318] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x0 [0056.320] SetEvent (hEvent=0x160) returned 1 [0056.320] SetEvent (hEvent=0x138) returned 1 [0056.320] SetEvent (hEvent=0x158) returned 1 [0056.320] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.321] SetEvent (hEvent=0x168) returned 1 [0056.321] SetEvent (hEvent=0x158) returned 1 [0056.321] SetEvent (hEvent=0x12c) returned 1 [0056.321] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.333] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.377] SetEvent (hEvent=0x158) returned 1 [0056.377] SetEvent (hEvent=0x138) returned 1 [0056.377] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0056.379] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.379] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x0 [0056.381] SetEvent (hEvent=0x158) returned 1 [0056.381] SetEvent (hEvent=0x12c) returned 1 [0056.381] SetEvent (hEvent=0x138) returned 1 [0056.381] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.382] SetEvent (hEvent=0x168) returned 1 [0056.382] SetEvent (hEvent=0x138) returned 1 [0056.385] GetFileType (hFile=0x19c) returned 0x1 [0056.386] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.386] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.387] GetFileType (hFile=0x19c) returned 0x1 [0056.387] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.387] GetFileType (hFile=0x19c) returned 0x1 [0056.387] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.387] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.390] GetFileType (hFile=0x19c) returned 0x1 [0056.390] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.393] GetFileType (hFile=0x19c) returned 0x1 [0056.393] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.393] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.394] GetFileType (hFile=0x19c) returned 0x1 [0056.394] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.394] GetFileType (hFile=0x19c) returned 0x1 [0056.394] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.394] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.402] GetFileType (hFile=0x19c) returned 0x1 [0056.402] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.405] GetFileType (hFile=0x19c) returned 0x1 [0056.405] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.405] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.406] GetFileType (hFile=0x19c) returned 0x1 [0056.406] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.406] GetFileType (hFile=0x19c) returned 0x1 [0056.406] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.406] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.407] GetFileType (hFile=0x19c) returned 0x1 [0056.409] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.412] GetFileType (hFile=0x19c) returned 0x1 [0056.412] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.412] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.413] GetFileType (hFile=0x19c) returned 0x1 [0056.413] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.413] GetFileType (hFile=0x19c) returned 0x1 [0056.413] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.413] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.414] GetFileType (hFile=0x19c) returned 0x1 [0056.414] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.419] GetFileType (hFile=0x19c) returned 0x1 [0056.419] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.419] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.420] GetFileType (hFile=0x19c) returned 0x1 [0056.420] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.420] GetFileType (hFile=0x19c) returned 0x1 [0056.420] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.420] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.431] GetFileType (hFile=0x19c) returned 0x1 [0056.431] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.435] GetFileType (hFile=0x19c) returned 0x1 [0056.435] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.435] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.436] GetFileType (hFile=0x19c) returned 0x1 [0056.436] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.436] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0056.440] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.440] SetEvent (hEvent=0x168) returned 1 [0056.440] SetEvent (hEvent=0x12c) returned 1 [0056.440] GetFileType (hFile=0x19c) returned 0x1 [0056.440] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.440] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.442] GetFileType (hFile=0x19c) returned 0x1 [0056.442] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.443] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0056.445] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.445] SetEvent (hEvent=0x12c) returned 1 [0056.445] SetEvent (hEvent=0x138) returned 1 [0056.445] SetEvent (hEvent=0x158) returned 1 [0056.445] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.446] SetEvent (hEvent=0x168) returned 1 [0056.446] SetEvent (hEvent=0x158) returned 1 [0056.450] GetFileType (hFile=0x19c) returned 0x1 [0056.450] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.450] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.451] GetFileType (hFile=0x19c) returned 0x1 [0056.451] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.451] GetFileType (hFile=0x19c) returned 0x1 [0056.451] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.451] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.459] GetFileType (hFile=0x19c) returned 0x1 [0056.459] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.463] GetFileType (hFile=0x19c) returned 0x1 [0056.463] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.463] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.464] GetFileType (hFile=0x19c) returned 0x1 [0056.464] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.464] GetFileType (hFile=0x19c) returned 0x1 [0056.464] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.464] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.471] GetFileType (hFile=0x19c) returned 0x1 [0056.471] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.475] GetFileType (hFile=0x19c) returned 0x1 [0056.475] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.476] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.477] GetFileType (hFile=0x19c) returned 0x1 [0056.477] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.477] GetFileType (hFile=0x19c) returned 0x1 [0056.477] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.477] ReadFile (in: hFile=0x19c, lpBuffer=0x10e7c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.481] GetFileType (hFile=0x19c) returned 0x1 [0056.481] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.484] GetFileType (hFile=0x19c) returned 0x1 [0056.484] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.484] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.485] GetFileType (hFile=0x19c) returned 0x1 [0056.485] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.485] GetFileType (hFile=0x19c) returned 0x1 [0056.485] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.485] ReadFile (in: hFile=0x19c, lpBuffer=0x10f1c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.494] GetFileType (hFile=0x19c) returned 0x1 [0056.494] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.498] GetFileType (hFile=0x19c) returned 0x1 [0056.498] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.498] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.499] GetFileType (hFile=0x19c) returned 0x1 [0056.499] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.499] GetFileType (hFile=0x19c) returned 0x1 [0056.499] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.499] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.502] GetFileType (hFile=0x19c) returned 0x1 [0056.502] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.506] GetFileType (hFile=0x19c) returned 0x1 [0056.506] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.506] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.506] GetFileType (hFile=0x19c) returned 0x1 [0056.506] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.507] SetEvent (hEvent=0x138) returned 1 [0056.507] GetFileType (hFile=0x19c) returned 0x1 [0056.507] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.507] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0056.517] GetFileType (hFile=0x19c) returned 0x1 [0056.517] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0056.523] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.538] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.568] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.601] SetEvent (hEvent=0x138) returned 1 [0056.601] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.603] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.717] SetEvent (hEvent=0x138) returned 1 [0056.717] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.736] SetEvent (hEvent=0x158) returned 1 [0056.737] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.821] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.874] SetEvent (hEvent=0x158) returned 1 [0056.874] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0056.900] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.225] SetEvent (hEvent=0x158) returned 1 [0057.225] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.228] SetEvent (hEvent=0x158) returned 1 [0057.228] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.305] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.334] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.395] SetEvent (hEvent=0x12c) returned 1 [0057.395] SetEvent (hEvent=0x158) returned 1 [0057.395] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0057.407] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.407] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x0 [0057.408] SetEvent (hEvent=0x12c) returned 1 [0057.408] SetEvent (hEvent=0x158) returned 1 [0057.408] SetEvent (hEvent=0x160) returned 1 [0057.408] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.410] SetEvent (hEvent=0x168) returned 1 [0057.410] SetEvent (hEvent=0x160) returned 1 [0057.410] SetEvent (hEvent=0x138) returned 1 [0057.410] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.431] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.471] SetEvent (hEvent=0x160) returned 1 [0057.471] SetEvent (hEvent=0x158) returned 1 [0057.471] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0057.485] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.485] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x0 [0057.489] SetEvent (hEvent=0x160) returned 1 [0057.489] SetEvent (hEvent=0x138) returned 1 [0057.489] SetEvent (hEvent=0x158) returned 1 [0057.489] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.492] SetEvent (hEvent=0x168) returned 1 [0057.492] SetEvent (hEvent=0x158) returned 1 [0057.493] GetFileType (hFile=0x19c) returned 0x1 [0057.493] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.493] WriteFile (in: hFile=0x19c, lpBuffer=0x10ecc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.494] GetFileType (hFile=0x19c) returned 0x1 [0057.494] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.494] GetFileType (hFile=0x19c) returned 0x1 [0057.494] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.494] ReadFile (in: hFile=0x19c, lpBuffer=0x10f1c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.502] GetFileType (hFile=0x19c) returned 0x1 [0057.502] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.506] GetFileType (hFile=0x19c) returned 0x1 [0057.506] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.506] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.506] GetFileType (hFile=0x19c) returned 0x1 [0057.507] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.507] GetFileType (hFile=0x19c) returned 0x1 [0057.507] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.507] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.507] GetFileType (hFile=0x19c) returned 0x1 [0057.508] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.513] GetFileType (hFile=0x19c) returned 0x1 [0057.513] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.513] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.514] GetFileType (hFile=0x19c) returned 0x1 [0057.514] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.514] GetFileType (hFile=0x19c) returned 0x1 [0057.514] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.514] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.515] GetFileType (hFile=0x19c) returned 0x1 [0057.516] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.520] GetFileType (hFile=0x19c) returned 0x1 [0057.520] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.520] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.521] GetFileType (hFile=0x19c) returned 0x1 [0057.521] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.521] GetFileType (hFile=0x19c) returned 0x1 [0057.521] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.521] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.534] GetFileType (hFile=0x19c) returned 0x1 [0057.535] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.539] GetFileType (hFile=0x19c) returned 0x1 [0057.539] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.539] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.540] GetFileType (hFile=0x19c) returned 0x1 [0057.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.540] SetEvent (hEvent=0x138) returned 1 [0057.540] GetFileType (hFile=0x19c) returned 0x1 [0057.540] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.540] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.541] GetFileType (hFile=0x19c) returned 0x1 [0057.541] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.541] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0057.544] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.544] SetEvent (hEvent=0x138) returned 1 [0057.544] SetEvent (hEvent=0x158) returned 1 [0057.544] SetEvent (hEvent=0x160) returned 1 [0057.544] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.546] SetEvent (hEvent=0x168) returned 1 [0057.546] SetEvent (hEvent=0x160) returned 1 [0057.550] GetFileType (hFile=0x19c) returned 0x1 [0057.550] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.550] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.550] GetFileType (hFile=0x19c) returned 0x1 [0057.550] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.551] GetFileType (hFile=0x19c) returned 0x1 [0057.551] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.551] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.559] GetFileType (hFile=0x19c) returned 0x1 [0057.559] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.562] GetFileType (hFile=0x19c) returned 0x1 [0057.562] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.563] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.563] GetFileType (hFile=0x19c) returned 0x1 [0057.563] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.563] GetFileType (hFile=0x19c) returned 0x1 [0057.563] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.563] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.564] GetFileType (hFile=0x19c) returned 0x1 [0057.564] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.570] GetFileType (hFile=0x19c) returned 0x1 [0057.570] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.570] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.570] GetFileType (hFile=0x19c) returned 0x1 [0057.570] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.570] GetFileType (hFile=0x19c) returned 0x1 [0057.570] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.571] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.571] GetFileType (hFile=0x19c) returned 0x1 [0057.571] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.577] GetFileType (hFile=0x19c) returned 0x1 [0057.577] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.577] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.577] GetFileType (hFile=0x19c) returned 0x1 [0057.577] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.577] GetFileType (hFile=0x19c) returned 0x1 [0057.577] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.578] ReadFile (in: hFile=0x19c, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.589] GetFileType (hFile=0x19c) returned 0x1 [0057.589] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.592] GetFileType (hFile=0x19c) returned 0x1 [0057.592] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.592] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.593] GetFileType (hFile=0x19c) returned 0x1 [0057.593] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.593] GetFileType (hFile=0x19c) returned 0x1 [0057.593] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.593] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.594] GetFileType (hFile=0x19c) returned 0x1 [0057.594] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.600] GetFileType (hFile=0x19c) returned 0x1 [0057.600] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.600] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.600] GetFileType (hFile=0x19c) returned 0x1 [0057.600] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.601] SetEvent (hEvent=0x158) returned 1 [0057.601] GetFileType (hFile=0x19c) returned 0x1 [0057.601] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.601] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.609] GetFileType (hFile=0x19c) returned 0x1 [0057.609] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.613] GetFileType (hFile=0x19c) returned 0x1 [0057.613] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.613] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.614] GetFileType (hFile=0x19c) returned 0x1 [0057.614] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.614] GetFileType (hFile=0x19c) returned 0x1 [0057.614] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.614] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.622] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.626] GetFileType (hFile=0x19c) returned 0x1 [0057.626] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.630] GetFileType (hFile=0x19c) returned 0x1 [0057.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.630] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.631] GetFileType (hFile=0x19c) returned 0x1 [0057.631] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.631] GetFileType (hFile=0x19c) returned 0x1 [0057.632] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.632] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.664] GetFileType (hFile=0x19c) returned 0x1 [0057.664] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.667] GetFileType (hFile=0x19c) returned 0x1 [0057.667] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.667] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.668] GetFileType (hFile=0x19c) returned 0x1 [0057.668] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.668] GetFileType (hFile=0x19c) returned 0x1 [0057.668] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.668] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.677] GetFileType (hFile=0x19c) returned 0x1 [0057.677] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.681] GetFileType (hFile=0x19c) returned 0x1 [0057.681] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.681] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.682] GetFileType (hFile=0x19c) returned 0x1 [0057.682] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.682] GetFileType (hFile=0x19c) returned 0x1 [0057.682] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.682] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.683] GetFileType (hFile=0x19c) returned 0x1 [0057.683] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.688] GetFileType (hFile=0x19c) returned 0x1 [0057.688] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.688] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.689] GetFileType (hFile=0x19c) returned 0x1 [0057.689] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.689] GetFileType (hFile=0x19c) returned 0x1 [0057.689] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.689] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.705] GetFileType (hFile=0x19c) returned 0x1 [0057.705] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.709] GetFileType (hFile=0x19c) returned 0x1 [0057.709] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.709] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.710] GetFileType (hFile=0x19c) returned 0x1 [0057.710] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.710] SetEvent (hEvent=0x158) returned 1 [0057.710] GetFileType (hFile=0x19c) returned 0x1 [0057.710] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.710] ReadFile (in: hFile=0x19c, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.726] GetFileType (hFile=0x19c) returned 0x1 [0057.726] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.730] GetFileType (hFile=0x19c) returned 0x1 [0057.730] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.730] WriteFile (in: hFile=0x19c, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.731] GetFileType (hFile=0x19c) returned 0x1 [0057.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.731] GetFileType (hFile=0x19c) returned 0x1 [0057.731] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.731] ReadFile (in: hFile=0x19c, lpBuffer=0x111ec000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.734] GetFileType (hFile=0x19c) returned 0x1 [0057.734] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.738] GetFileType (hFile=0x19c) returned 0x1 [0057.738] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.738] WriteFile (in: hFile=0x19c, lpBuffer=0x1123c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.738] GetFileType (hFile=0x19c) returned 0x1 [0057.738] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.738] GetFileType (hFile=0x19c) returned 0x1 [0057.738] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.738] ReadFile (in: hFile=0x19c, lpBuffer=0x1128c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.746] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.749] GetFileType (hFile=0x19c) returned 0x1 [0057.749] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.752] GetFileType (hFile=0x19c) returned 0x1 [0057.752] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.752] WriteFile (in: hFile=0x19c, lpBuffer=0x112dc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.753] GetFileType (hFile=0x19c) returned 0x1 [0057.753] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.753] GetFileType (hFile=0x19c) returned 0x1 [0057.753] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.753] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.754] GetFileType (hFile=0x19c) returned 0x1 [0057.754] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.759] GetFileType (hFile=0x19c) returned 0x1 [0057.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.760] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.760] GetFileType (hFile=0x19c) returned 0x1 [0057.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.760] GetFileType (hFile=0x19c) returned 0x1 [0057.760] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.760] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.768] GetFileType (hFile=0x19c) returned 0x1 [0057.768] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.773] GetFileType (hFile=0x19c) returned 0x1 [0057.773] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.773] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.773] GetFileType (hFile=0x19c) returned 0x1 [0057.773] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.773] GetFileType (hFile=0x19c) returned 0x1 [0057.773] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.774] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.788] GetFileType (hFile=0x19c) returned 0x1 [0057.788] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.792] GetFileType (hFile=0x19c) returned 0x1 [0057.792] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.792] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.793] GetFileType (hFile=0x19c) returned 0x1 [0057.793] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.793] SetEvent (hEvent=0x158) returned 1 [0057.793] GetFileType (hFile=0x19c) returned 0x1 [0057.793] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.793] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.794] GetFileType (hFile=0x19c) returned 0x1 [0057.794] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.796] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0057.797] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.797] SetEvent (hEvent=0x158) returned 1 [0057.797] SetEvent (hEvent=0x160) returned 1 [0057.797] SetEvent (hEvent=0x138) returned 1 [0057.797] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.800] SetEvent (hEvent=0x168) returned 1 [0057.800] SetEvent (hEvent=0x138) returned 1 [0057.803] GetFileType (hFile=0x19c) returned 0x1 [0057.803] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.803] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.804] GetFileType (hFile=0x19c) returned 0x1 [0057.804] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.804] GetFileType (hFile=0x19c) returned 0x1 [0057.804] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.804] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.812] GetFileType (hFile=0x19c) returned 0x1 [0057.812] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.817] GetFileType (hFile=0x19c) returned 0x1 [0057.817] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.817] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.817] GetFileType (hFile=0x19c) returned 0x1 [0057.817] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.817] GetFileType (hFile=0x19c) returned 0x1 [0057.817] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.818] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.818] GetFileType (hFile=0x19c) returned 0x1 [0057.818] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.824] GetFileType (hFile=0x19c) returned 0x1 [0057.824] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.824] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.824] GetFileType (hFile=0x19c) returned 0x1 [0057.824] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.824] GetFileType (hFile=0x19c) returned 0x1 [0057.825] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.825] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.829] GetFileType (hFile=0x19c) returned 0x1 [0057.829] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.832] GetFileType (hFile=0x19c) returned 0x1 [0057.832] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.833] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.833] GetFileType (hFile=0x19c) returned 0x1 [0057.833] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.833] GetFileType (hFile=0x19c) returned 0x1 [0057.833] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.833] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.844] GetFileType (hFile=0x19c) returned 0x1 [0057.844] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.850] GetFileType (hFile=0x19c) returned 0x1 [0057.850] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.850] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.851] GetFileType (hFile=0x19c) returned 0x1 [0057.851] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.851] GetFileType (hFile=0x19c) returned 0x1 [0057.851] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.851] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.852] GetFileType (hFile=0x19c) returned 0x1 [0057.852] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.857] GetFileType (hFile=0x19c) returned 0x1 [0057.857] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.858] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.858] GetFileType (hFile=0x19c) returned 0x1 [0057.858] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.858] SetEvent (hEvent=0x160) returned 1 [0057.858] GetFileType (hFile=0x19c) returned 0x1 [0057.858] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.858] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.872] GetFileType (hFile=0x19c) returned 0x1 [0057.872] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.875] GetFileType (hFile=0x19c) returned 0x1 [0057.875] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.876] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.876] GetFileType (hFile=0x19c) returned 0x1 [0057.876] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.876] GetFileType (hFile=0x19c) returned 0x1 [0057.876] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.876] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.885] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.891] GetFileType (hFile=0x19c) returned 0x1 [0057.891] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.895] GetFileType (hFile=0x19c) returned 0x1 [0057.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.895] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.897] GetFileType (hFile=0x19c) returned 0x1 [0057.897] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.897] GetFileType (hFile=0x19c) returned 0x1 [0057.897] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.897] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.898] GetFileType (hFile=0x19c) returned 0x1 [0057.901] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.905] GetFileType (hFile=0x19c) returned 0x1 [0057.905] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.906] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.906] GetFileType (hFile=0x19c) returned 0x1 [0057.906] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.906] GetFileType (hFile=0x19c) returned 0x1 [0057.906] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.906] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.919] GetFileType (hFile=0x19c) returned 0x1 [0057.919] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.922] GetFileType (hFile=0x19c) returned 0x1 [0057.923] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.923] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.924] GetFileType (hFile=0x19c) returned 0x1 [0057.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.924] GetFileType (hFile=0x19c) returned 0x1 [0057.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.924] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.924] GetFileType (hFile=0x19c) returned 0x1 [0057.925] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.934] GetFileType (hFile=0x19c) returned 0x1 [0057.934] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.934] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.935] GetFileType (hFile=0x19c) returned 0x1 [0057.935] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.935] GetFileType (hFile=0x19c) returned 0x1 [0057.935] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.935] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.946] GetFileType (hFile=0x19c) returned 0x1 [0057.946] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.951] GetFileType (hFile=0x19c) returned 0x1 [0057.951] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.951] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.952] GetFileType (hFile=0x19c) returned 0x1 [0057.952] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.952] SetEvent (hEvent=0x160) returned 1 [0057.952] GetFileType (hFile=0x19c) returned 0x1 [0057.952] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.952] ReadFile (in: hFile=0x19c, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.961] GetFileType (hFile=0x19c) returned 0x1 [0057.961] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.964] GetFileType (hFile=0x19c) returned 0x1 [0057.964] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.964] WriteFile (in: hFile=0x19c, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.965] GetFileType (hFile=0x19c) returned 0x1 [0057.965] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.966] GetFileType (hFile=0x19c) returned 0x1 [0057.966] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.966] ReadFile (in: hFile=0x19c, lpBuffer=0x111ec000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.966] GetFileType (hFile=0x19c) returned 0x1 [0057.966] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.972] GetFileType (hFile=0x19c) returned 0x1 [0057.972] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.972] WriteFile (in: hFile=0x19c, lpBuffer=0x1123c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.973] GetFileType (hFile=0x19c) returned 0x1 [0057.973] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.973] GetFileType (hFile=0x19c) returned 0x1 [0057.973] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.973] ReadFile (in: hFile=0x19c, lpBuffer=0x1128c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.981] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0057.984] GetFileType (hFile=0x19c) returned 0x1 [0057.984] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.988] GetFileType (hFile=0x19c) returned 0x1 [0057.988] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.988] WriteFile (in: hFile=0x19c, lpBuffer=0x112dc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.988] GetFileType (hFile=0x19c) returned 0x1 [0057.988] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.989] GetFileType (hFile=0x19c) returned 0x1 [0057.989] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.989] ReadFile (in: hFile=0x19c, lpBuffer=0x10ffe000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.989] GetFileType (hFile=0x19c) returned 0x1 [0057.989] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.995] GetFileType (hFile=0x19c) returned 0x1 [0057.995] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.995] WriteFile (in: hFile=0x19c, lpBuffer=0x10cfc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0057.996] GetFileType (hFile=0x19c) returned 0x1 [0057.996] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.996] GetFileType (hFile=0x19c) returned 0x1 [0057.996] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0057.996] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.007] GetFileType (hFile=0x19c) returned 0x1 [0058.007] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.010] GetFileType (hFile=0x19c) returned 0x1 [0058.010] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.010] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.011] GetFileType (hFile=0x19c) returned 0x1 [0058.011] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.011] GetFileType (hFile=0x19c) returned 0x1 [0058.011] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.011] ReadFile (in: hFile=0x19c, lpBuffer=0x10d8c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.024] GetFileType (hFile=0x19c) returned 0x1 [0058.024] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.028] GetFileType (hFile=0x19c) returned 0x1 [0058.028] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.028] WriteFile (in: hFile=0x19c, lpBuffer=0x10ddc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.029] GetFileType (hFile=0x19c) returned 0x1 [0058.029] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.030] SetEvent (hEvent=0x160) returned 1 [0058.030] GetFileType (hFile=0x19c) returned 0x1 [0058.030] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.030] ReadFile (in: hFile=0x19c, lpBuffer=0x10e2c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.030] GetFileType (hFile=0x19c) returned 0x1 [0058.030] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.030] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0058.034] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.034] SetEvent (hEvent=0x160) returned 1 [0058.034] SetEvent (hEvent=0x138) returned 1 [0058.034] SetEvent (hEvent=0x158) returned 1 [0058.034] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.035] SetEvent (hEvent=0x168) returned 1 [0058.035] SetEvent (hEvent=0x158) returned 1 [0058.038] GetFileType (hFile=0x19c) returned 0x1 [0058.038] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.038] WriteFile (in: hFile=0x19c, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.039] GetFileType (hFile=0x19c) returned 0x1 [0058.039] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.039] GetFileType (hFile=0x19c) returned 0x1 [0058.039] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.039] ReadFile (in: hFile=0x19c, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.049] GetFileType (hFile=0x19c) returned 0x1 [0058.049] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.052] GetFileType (hFile=0x19c) returned 0x1 [0058.052] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.052] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.053] GetFileType (hFile=0x19c) returned 0x1 [0058.053] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.053] GetFileType (hFile=0x19c) returned 0x1 [0058.053] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.053] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.053] GetFileType (hFile=0x19c) returned 0x1 [0058.053] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.059] GetFileType (hFile=0x19c) returned 0x1 [0058.059] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.059] WriteFile (in: hFile=0x19c, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.060] GetFileType (hFile=0x19c) returned 0x1 [0058.060] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.060] GetFileType (hFile=0x19c) returned 0x1 [0058.060] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.060] ReadFile (in: hFile=0x19c, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.060] GetFileType (hFile=0x19c) returned 0x1 [0058.060] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.066] GetFileType (hFile=0x19c) returned 0x1 [0058.066] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.066] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.067] GetFileType (hFile=0x19c) returned 0x1 [0058.067] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.067] GetFileType (hFile=0x19c) returned 0x1 [0058.067] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.067] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.079] GetFileType (hFile=0x19c) returned 0x1 [0058.079] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.083] GetFileType (hFile=0x19c) returned 0x1 [0058.083] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.083] WriteFile (in: hFile=0x19c, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.084] GetFileType (hFile=0x19c) returned 0x1 [0058.084] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.084] GetFileType (hFile=0x19c) returned 0x1 [0058.084] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.084] ReadFile (in: hFile=0x19c, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.085] GetFileType (hFile=0x19c) returned 0x1 [0058.085] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.092] GetFileType (hFile=0x19c) returned 0x1 [0058.092] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.092] WriteFile (in: hFile=0x19c, lpBuffer=0x1128c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1128c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.093] GetFileType (hFile=0x19c) returned 0x1 [0058.093] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.093] SetEvent (hEvent=0x138) returned 1 [0058.093] GetFileType (hFile=0x19c) returned 0x1 [0058.093] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.093] ReadFile (in: hFile=0x19c, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.103] GetFileType (hFile=0x19c) returned 0x1 [0058.103] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.107] GetFileType (hFile=0x19c) returned 0x1 [0058.107] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.107] WriteFile (in: hFile=0x19c, lpBuffer=0x10e7c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e7c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.108] GetFileType (hFile=0x19c) returned 0x1 [0058.108] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.108] GetFileType (hFile=0x19c) returned 0x1 [0058.108] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.108] ReadFile (in: hFile=0x19c, lpBuffer=0x10ecc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ecc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.116] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.121] GetFileType (hFile=0x19c) returned 0x1 [0058.121] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.125] GetFileType (hFile=0x19c) returned 0x1 [0058.125] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.125] WriteFile (in: hFile=0x19c, lpBuffer=0x10ffe000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ffe000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.127] GetFileType (hFile=0x19c) returned 0x1 [0058.127] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.127] GetFileType (hFile=0x19c) returned 0x1 [0058.127] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.127] ReadFile (in: hFile=0x19c, lpBuffer=0x10cfc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10cfc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.130] GetFileType (hFile=0x19c) returned 0x1 [0058.130] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.134] GetFileType (hFile=0x19c) returned 0x1 [0058.134] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.134] WriteFile (in: hFile=0x19c, lpBuffer=0x10f1c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f1c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.135] GetFileType (hFile=0x19c) returned 0x1 [0058.135] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.135] GetFileType (hFile=0x19c) returned 0x1 [0058.135] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.135] ReadFile (in: hFile=0x19c, lpBuffer=0x10f6c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10f6c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.144] GetFileType (hFile=0x19c) returned 0x1 [0058.144] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.147] GetFileType (hFile=0x19c) returned 0x1 [0058.147] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.148] WriteFile (in: hFile=0x19c, lpBuffer=0x10d8c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10d8c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.149] GetFileType (hFile=0x19c) returned 0x1 [0058.149] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.149] GetFileType (hFile=0x19c) returned 0x1 [0058.149] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.149] ReadFile (in: hFile=0x19c, lpBuffer=0x10ddc000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10ddc000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.149] GetFileType (hFile=0x19c) returned 0x1 [0058.150] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.155] GetFileType (hFile=0x19c) returned 0x1 [0058.155] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.155] WriteFile (in: hFile=0x19c, lpBuffer=0x10e2c000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x10e2c000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.156] GetFileType (hFile=0x19c) returned 0x1 [0058.156] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.156] GetFileType (hFile=0x19c) returned 0x1 [0058.156] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.156] ReadFile (in: hFile=0x19c, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.164] GetFileType (hFile=0x19c) returned 0x1 [0058.164] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.167] GetFileType (hFile=0x19c) returned 0x1 [0058.167] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.167] WriteFile (in: hFile=0x19c, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4e200, lpNumberOfBytesWritten=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.168] GetFileType (hFile=0x19c) returned 0x1 [0058.168] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.168] SetEvent (hEvent=0x138) returned 1 [0058.168] GetFileType (hFile=0x19c) returned 0x1 [0058.168] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.168] ReadFile (in: hFile=0x19c, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x4e200, lpNumberOfBytesRead=0x10c89cb8, lpOverlapped=0x10c89cbc | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x10c89cb8*=0x4e200, lpOverlapped=0x10c89cbc) returned 1 [0058.175] GetFileType (hFile=0x19c) returned 0x1 [0058.175] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x10c89ca0 | out: lpNewFilePointer=0x0) returned 1 [0058.184] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.213] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.289] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.330] SetEvent (hEvent=0x138) returned 1 [0058.330] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.330] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.436] SetEvent (hEvent=0x160) returned 1 [0058.436] SetEvent (hEvent=0x12c) returned 1 [0058.436] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.438] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.513] SetEvent (hEvent=0x160) returned 1 [0058.513] SetEvent (hEvent=0x158) returned 1 [0058.513] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.515] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.565] SetEvent (hEvent=0x138) returned 1 [0058.565] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.580] SetEvent (hEvent=0x12c) returned 1 [0058.580] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.700] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.703] SetEvent (hEvent=0x12c) returned 1 [0058.703] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0058.704] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.309] SetEvent (hEvent=0x138) returned 1 [0059.309] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.309] SetEvent (hEvent=0x138) returned 1 [0059.310] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.376] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.420] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.446] SetEvent (hEvent=0x160) returned 1 [0059.446] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.448] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.643] SetEvent (hEvent=0x12c) returned 1 [0059.643] SetEvent (hEvent=0x138) returned 1 [0059.643] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.645] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.720] SetEvent (hEvent=0x160) returned 1 [0059.720] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.744] SetEvent (hEvent=0x158) returned 1 [0059.744] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.792] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.816] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.861] SetEvent (hEvent=0x12c) returned 1 [0059.861] SetEvent (hEvent=0x158) returned 1 [0059.861] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0059.881] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.881] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0059.882] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.882] SetEvent (hEvent=0x12c) returned 1 [0059.882] SetEvent (hEvent=0x158) returned 1 [0059.882] SetEvent (hEvent=0x138) returned 1 [0059.882] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.884] SetEvent (hEvent=0x168) returned 1 [0059.884] SetEvent (hEvent=0x138) returned 1 [0059.884] SetEvent (hEvent=0x160) returned 1 [0059.884] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.899] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.926] SetEvent (hEvent=0x160) returned 1 [0059.926] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0059.927] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0060.011] SetEvent (hEvent=0x160) returned 1 [0060.011] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0060.026] SetEvent (hEvent=0x158) returned 1 [0060.026] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0060.163] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0060.168] SetEvent (hEvent=0x158) returned 1 [0060.168] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0060.169] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0064.620] SetEvent (hEvent=0x158) returned 1 [0064.620] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0064.716] SetEvent (hEvent=0x158) returned 1 [0064.716] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0065.997] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0066.232] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0066.300] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0067.080] SetEvent (hEvent=0x160) returned 1 [0067.080] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0067.115] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0068.291] SetEvent (hEvent=0x138) returned 1 [0068.311] SetEvent (hEvent=0x158) returned 1 [0068.311] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0068.471] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0070.073] SetEvent (hEvent=0x160) returned 1 [0070.073] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0070.278] SetEvent (hEvent=0x12c) returned 1 [0070.278] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0072.036] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0072.273] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0073.086] SetEvent (hEvent=0x138) returned 1 [0073.087] SetEvent (hEvent=0x12c) returned 1 [0073.087] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0073.134] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0073.134] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x1) returned 0x102 [0073.172] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0073.173] SetEvent (hEvent=0x138) returned 1 [0073.173] SetEvent (hEvent=0x12c) returned 1 [0073.173] SetEvent (hEvent=0x158) returned 1 [0073.173] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0073.282] SetEvent (hEvent=0x168) returned 1 [0073.282] SetEvent (hEvent=0x158) returned 1 [0073.282] SetEvent (hEvent=0x160) returned 1 [0073.282] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0073.386] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0074.193] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0074.334] SetEvent (hEvent=0x160) returned 1 [0074.335] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0074.360] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0074.550] SetEvent (hEvent=0x158) returned 1 [0074.550] SetEvent (hEvent=0x12c) returned 1 [0074.550] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0074.641] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0075.073] SetEvent (hEvent=0x160) returned 1 [0075.073] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0075.154] SetEvent (hEvent=0x138) returned 1 [0075.154] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0075.755] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0075.792] SetEvent (hEvent=0x138) returned 1 [0075.792] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0075.805] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0075.911] SetEvent (hEvent=0x138) returned 1 [0075.911] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0075.918] SetEvent (hEvent=0x138) returned 1 [0075.918] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0076.416] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0076.433] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0076.883] SetEvent (hEvent=0x160) returned 1 [0076.885] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0076.902] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0077.259] SetEvent (hEvent=0x160) returned 1 [0077.259] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0077.272] SetEvent (hEvent=0x138) returned 1 [0077.272] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0077.443] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0077.478] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0077.683] SetEvent (hEvent=0x160) returned 1 [0077.683] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0077.688] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0078.695] SetEvent (hEvent=0x160) returned 1 [0078.695] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0078.710] SetEvent (hEvent=0x138) returned 1 [0078.710] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0079.379] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0079.415] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0079.555] SetEvent (hEvent=0x160) returned 1 [0079.555] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) returned 0x0 [0079.575] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0xffffffff) Process: id = "2" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xab51000" os_pid = "0xaa4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xd90" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000116db" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 2 os_tid = 0xcf4 Thread: id = 3 os_tid = 0x10f8 Thread: id = 4 os_tid = 0x1170 Thread: id = 5 os_tid = 0x117c Thread: id = 6 os_tid = 0x1174 Thread: id = 13 os_tid = 0xe78 Thread: id = 14 os_tid = 0xea0