# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 08:38:37 # Log Creation Date: 27.09.2020 08:48:38.659 Process: id = "1" image_name = "cardgame.exe" filename = "c:\\users\\fd1hvy\\desktop\\cardgame.exe" page_root = "0x11a49000" os_pid = "0x1070" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x560" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\CardGame.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x1104 [0073.677] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0073.681] RoInitialize () returned 0x1 [0073.681] RoUninitialize () returned 0x0 [0076.189] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x6fecc8 | out: pfEnabled=0x6fecc8) returned 0x0 [0079.376] SleepEx (dwMilliseconds=0x952, bAlertable=1) returned 0x0 [0083.197] SleepEx (dwMilliseconds=0x2, bAlertable=0) returned 0x0 [0083.209] SleepEx (dwMilliseconds=0x2, bAlertable=0) returned 0x0 [0083.225] SleepEx (dwMilliseconds=0x2, bAlertable=0) returned 0x0 [0083.241] SleepEx (dwMilliseconds=0x2, bAlertable=0) returned 0x0 [0083.258] SleepEx (dwMilliseconds=0x2, bAlertable=0) returned 0x0 [0083.282] SleepEx (dwMilliseconds=0x2, bAlertable=0) returned 0x0 [0086.701] RoGetParameterizedTypeInstanceIID () returned 0x0 [0086.740] Ro::detail::SimpleMetaDataBuilder::SetParameterizedInterface () returned 0x0 [0086.740] Ro::detail::SimpleMetaDataBuilder::SetParameterizedInterface () returned 0x0 [0086.740] Ro::detail::SimpleMetaDataBuilder::SetStruct () returned 0x0 [0086.740] Ro::detail::SimpleMetaDataBuilder::SetEnum () returned 0x0 [0086.744] RoGetParameterizedTypeInstanceIID () returned 0x0 [0086.744] Ro::detail::SimpleMetaDataBuilder::SetParameterizedInterface () returned 0x0 [0086.744] Ro::detail::SimpleMetaDataBuilder::SetStruct () returned 0x0 [0086.744] Ro::detail::SimpleMetaDataBuilder::SetEnum () returned 0x0 [0086.745] RoGetParameterizedTypeInstanceIID () returned 0x0 [0086.745] Ro::detail::SimpleMetaDataBuilder::SetParameterizedInterface () returned 0x0 [0086.745] Ro::detail::SimpleMetaDataBuilder::SetStruct () returned 0x0 [0086.745] Ro::detail::SimpleMetaDataBuilder::SetEnum () returned 0x0 [0088.007] SleepEx (dwMilliseconds=0x7d0, bAlertable=1) returned 0x0 [0090.363] EtwEventRegister (in: ProviderId=0x26a42b4, EnableCallback=0x4b90626, CallbackContext=0x0, RegHandle=0x26a4290 | out: RegHandle=0x26a4290) returned 0x0 [0090.389] GetCurrentProcess () returned 0xffffffff [0090.389] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x6fddd0 | out: TokenHandle=0x6fddd0*=0x2fc) returned 1 [0090.395] GetTokenInformation (in: TokenHandle=0x2fc, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x6fddd4 | out: TokenInformation=0x0, ReturnLength=0x6fddd4) returned 0 [0090.395] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x9adad8 [0090.395] GetTokenInformation (in: TokenHandle=0x2fc, TokenInformationClass=0x8, TokenInformation=0x9adad8, TokenInformationLength=0x4, ReturnLength=0x6fddd4 | out: TokenInformation=0x9adad8, ReturnLength=0x6fddd4) returned 1 [0090.396] LocalFree (hMem=0x9adad8) returned 0x0 [0090.397] DuplicateTokenEx (in: hExistingToken=0x2fc, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x6fdddc | out: phNewToken=0x6fdddc*=0x304) returned 1 [0090.397] CheckTokenMembership (in: TokenHandle=0x304, SidToCheck=0x26a6b8c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x6fddec | out: IsMember=0x6fddec) returned 1 [0090.398] CloseHandle (hObject=0x304) returned 1 [0090.493] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x6fd610 | out: phkResult=0x6fd610*=0x0) returned 0x2 [0090.493] RegCloseKey (hKey=0x80000002) returned 0x0 [0090.496] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x6fd864, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0092.065] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x6fd778, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0092.068] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x6fd7dc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0092.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6fdc90) returned 1 [0092.069] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x6fdd0c | out: lpFileInformation=0x6fdd0c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0092.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6fdc8c) returned 1 [0094.472] CoTaskMemAlloc (cb=0x20c) returned 0x9bd270 [0094.472] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x9bd270 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0094.472] CoTaskMemFree (pv=0x9bd270) [0094.472] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x6fd8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x23 [0094.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CardGame.exe", nBufferLength=0x105, lpBuffer=0x6fd860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CardGame.exe", lpFilePart=0x0) returned 0x24 [0094.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\gpustats.bx", nBufferLength=0x105, lpBuffer=0x6fd798, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\gpustats.bx", lpFilePart=0x0) returned 0x2e [0094.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6fdcdc) returned 1 [0094.486] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\gpustats.bx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\gpustats.bx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2fc [0094.487] GetFileType (hFile=0x2fc) returned 0x1 [0094.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6fdcd8) returned 1 [0094.487] GetFileType (hFile=0x2fc) returned 0x1 [0094.488] WriteFile (in: hFile=0x2fc, lpBuffer=0x25bffd8*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x6fdd58, lpOverlapped=0x0 | out: lpBuffer=0x25bffd8*, lpNumberOfBytesWritten=0x6fdd58*=0x30, lpOverlapped=0x0) returned 1 [0094.489] CloseHandle (hObject=0x2fc) returned 1 [0094.542] CoTaskMemAlloc (cb=0xd) returned 0x9b2168 [0094.542] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0094.543] CoTaskMemFree (pv=0x9b2168) [0094.554] CoTaskMemAlloc (cb=0x11) returned 0xa18578 [0094.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResumeThread", cchWideChar=12, lpMultiByteStr=0x25c2364, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResumeThread", lpUsedDefaultChar=0x0) returned 12 [0094.554] GetProcAddress (hModule=0x772d0000, lpProcName="ResumeThread") returned 0x772e6380 [0094.555] CoTaskMemFree (pv=0xa18578) [0094.726] CoTaskMemAlloc (cb=0xd) returned 0x9b1fe8 [0094.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x25c246c, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0094.726] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0094.726] CoTaskMemFree (pv=0x9b1fe8) [0094.726] CoTaskMemAlloc (cb=0x1a) returned 0x9a83b8 [0094.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wow64SetThreadContext", cchWideChar=21, lpMultiByteStr=0x25c24a4, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wow64SetThreadContext", lpUsedDefaultChar=0x0) returned 21 [0094.727] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64SetThreadContext") returned 0x772e87b0 [0094.727] CoTaskMemFree (pv=0x9a83b8) [0094.733] CoTaskMemAlloc (cb=0xd) returned 0x9b2138 [0094.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x25c25a8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0094.733] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0094.733] CoTaskMemFree (pv=0x9b2138) [0094.733] CoTaskMemAlloc (cb=0x15) returned 0xa18658 [0094.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetThreadContext", cchWideChar=16, lpMultiByteStr=0x25c25e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetThreadContext", lpUsedDefaultChar=0x0) returned 16 [0094.733] GetProcAddress (hModule=0x772d0000, lpProcName="SetThreadContext") returned 0x772e66a0 [0094.733] CoTaskMemFree (pv=0xa18658) [0094.734] CoTaskMemAlloc (cb=0xd) returned 0x9b2138 [0094.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x25c26f4, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0094.734] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0094.735] CoTaskMemFree (pv=0x9b2138) [0094.735] CoTaskMemAlloc (cb=0x1a) returned 0x9a83b8 [0094.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wow64GetThreadContext", cchWideChar=21, lpMultiByteStr=0x25c272c, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wow64GetThreadContext", lpUsedDefaultChar=0x0) returned 21 [0094.735] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64GetThreadContext") returned 0x772e8780 [0094.735] CoTaskMemFree (pv=0x9a83b8) [0094.736] CoTaskMemAlloc (cb=0xd) returned 0x9b20d8 [0094.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x25c2830, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0094.736] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0094.736] CoTaskMemFree (pv=0x9b20d8) [0094.736] CoTaskMemAlloc (cb=0x15) returned 0xa183f8 [0094.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetThreadContext", cchWideChar=16, lpMultiByteStr=0x25c2868, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetThreadContext", lpUsedDefaultChar=0x0) returned 16 [0094.737] GetProcAddress (hModule=0x772d0000, lpProcName="GetThreadContext") returned 0x772e5580 [0094.737] CoTaskMemFree (pv=0xa183f8) [0094.738] CoTaskMemAlloc (cb=0xd) returned 0x9b2048 [0094.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x25c2958, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0094.738] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0094.738] CoTaskMemFree (pv=0x9b2048) [0094.738] CoTaskMemAlloc (cb=0x13) returned 0xa18638 [0094.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VirtualAllocEx", cchWideChar=14, lpMultiByteStr=0x25c2990, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VirtualAllocEx", lpUsedDefaultChar=0x0) returned 14 [0094.738] GetProcAddress (hModule=0x772d0000, lpProcName="VirtualAllocEx") returned 0x772e6990 [0094.739] CoTaskMemFree (pv=0xa18638) [0094.742] CoTaskMemAlloc (cb=0xd) returned 0x9b20a8 [0094.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x25c2a8c, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0094.742] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0094.743] CoTaskMemFree (pv=0x9b20a8) [0094.743] CoTaskMemAlloc (cb=0x17) returned 0xa183b8 [0094.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WriteProcessMemory", cchWideChar=18, lpMultiByteStr=0x25c2ac4, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WriteProcessMemory", lpUsedDefaultChar=0x0) returned 18 [0094.743] GetProcAddress (hModule=0x772d0000, lpProcName="WriteProcessMemory") returned 0x772e6b70 [0094.743] CoTaskMemFree (pv=0xa183b8) [0094.747] CoTaskMemAlloc (cb=0xd) returned 0x9b2150 [0094.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x25c2bc8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0094.747] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0094.748] CoTaskMemFree (pv=0x9b2150) [0094.748] CoTaskMemAlloc (cb=0x16) returned 0xa18578 [0094.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ReadProcessMemory", cchWideChar=17, lpMultiByteStr=0x25c2c00, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ReadProcessMemory", lpUsedDefaultChar=0x0) returned 17 [0094.748] GetProcAddress (hModule=0x772d0000, lpProcName="ReadProcessMemory") returned 0x772e5e30 [0094.749] CoTaskMemFree (pv=0xa18578) [0094.760] CoTaskMemAlloc (cb=0xa) returned 0x9b2138 [0094.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ntdll", cchWideChar=5, lpMultiByteStr=0x25c2d60, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ntdll", lpUsedDefaultChar=0x0) returned 5 [0094.760] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0094.760] CoTaskMemFree (pv=0x9b2138) [0094.760] CoTaskMemAlloc (cb=0x19) returned 0x9a83b8 [0094.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ZwUnmapViewOfSection", cchWideChar=20, lpMultiByteStr=0x25c2d8c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ZwUnmapViewOfSection", lpUsedDefaultChar=0x0) returned 20 [0094.760] GetProcAddress (hModule=0x77970000, lpProcName="ZwUnmapViewOfSection") returned 0x779e1fb0 [0094.760] CoTaskMemFree (pv=0x9a83b8) [0094.763] CoTaskMemAlloc (cb=0xd) returned 0x9b20d8 [0094.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x25c2e88, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0094.764] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0094.764] CoTaskMemFree (pv=0x9b20d8) [0094.764] CoTaskMemAlloc (cb=0x13) returned 0xa18558 [0094.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateProcessA", cchWideChar=14, lpMultiByteStr=0x25c2ec0, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateProcessA", lpUsedDefaultChar=0x0) returned 14 [0094.764] GetProcAddress (hModule=0x772d0000, lpProcName="CreateProcessA") returned 0x772e45b0 [0094.764] CoTaskMemFree (pv=0xa18558) [0094.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.exe", cchWideChar=57, lpMultiByteStr=0x6fdc90, cbMultiByte=59, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.exe\x8d?\x02Æî¼\x1aðù°s\x94áo", lpUsedDefaultChar=0x0) returned 57 [0094.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=0, lpMultiByteStr=0x6fdc8c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x90Üo", lpUsedDefaultChar=0x0) returned 0 [0094.795] CreateProcessA (in: lpApplicationName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.exe", lpCommandLine="", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x6fdd00*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x6fde2c | out: lpCommandLine="", lpProcessInformation=0x6fde2c*(hProcess=0x384, hThread=0x2fc, dwProcessId=0x10ec, dwThreadId=0x102c)) returned 1 [0094.858] CoTaskMemFree (pv=0x0) [0094.858] GetThreadContext (in: hThread=0x2fc, lpContext=0x25c2f58 | out: lpContext=0x25c2f58*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x2d9000, Edx=0x0, Ecx=0x0, Eax=0x1b9a6e, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0094.859] ReadProcessMemory (in: hProcess=0x384, lpBaseAddress=0x2d9008, lpBuffer=0x6fde18, nSize=0x4, lpNumberOfBytesRead=0x6fde08 | out: lpBuffer=0x6fde18*, lpNumberOfBytesRead=0x6fde08*=0x4) returned 1 [0094.859] VirtualAllocEx (hProcess=0x384, lpAddress=0x400000, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0094.924] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x6fd5ec | out: lpLuid=0x6fd5ec*(LowPart=0x14, HighPart=0)) returned 1 [0094.928] GetCurrentProcess () returned 0xffffffff [0094.929] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x6fd5e8 | out: TokenHandle=0x6fd5e8*=0x3a8) returned 1 [0094.929] AdjustTokenPrivileges (in: TokenHandle=0x3a8, DisableAllPrivileges=0, NewState=0x25c3300*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0094.929] CloseHandle (hObject=0x3a8) returned 1 [0094.965] EnumProcesses (in: lpidProcess=0x25c3ae4, cb=0x400, lpcbNeeded=0x6fdcd0 | out: lpidProcess=0x25c3ae4, lpcbNeeded=0x6fdcd0) returned 1 [0095.003] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x10ec) returned 0x3a8 [0095.011] TerminateProcess (hProcess=0x3a8, uExitCode=0xffffffff) returned 1 [0095.019] CloseHandle (hObject=0x3a8) returned 1 [0095.020] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.exe", cchWideChar=57, lpMultiByteStr=0x6fdc90, cbMultiByte=59, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.exe\x8d?\x02Æî¼\x1aðù°s\x94áo", lpUsedDefaultChar=0x0) returned 57 [0095.020] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=0, lpMultiByteStr=0x6fdc8c, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x90Üo", lpUsedDefaultChar=0x0) returned 0 [0095.020] CreateProcessA (in: lpApplicationName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.exe", lpCommandLine="", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x6fdd00*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x6fde2c | out: lpCommandLine="", lpProcessInformation=0x6fde2c*(hProcess=0x3ac, hThread=0x3a8, dwProcessId=0x760, dwThreadId=0x1020)) returned 1 [0095.033] CoTaskMemFree (pv=0x0) [0095.033] GetThreadContext (in: hThread=0x3a8, lpContext=0x25c41d0 | out: lpContext=0x25c41d0*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x1117000, Edx=0x0, Ecx=0x0, Eax=0xe69a6e, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0095.056] ReadProcessMemory (in: hProcess=0x3ac, lpBaseAddress=0x1117008, lpBuffer=0x6fde18, nSize=0x4, lpNumberOfBytesRead=0x6fde08 | out: lpBuffer=0x6fde18*, lpNumberOfBytesRead=0x6fde08*=0x4) returned 1 [0095.057] VirtualAllocEx (hProcess=0x3ac, lpAddress=0x400000, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0095.061] WriteProcessMemory (in: hProcess=0x3ac, lpBaseAddress=0x400000, lpBuffer=0x3927b80*, nSize=0x200, lpNumberOfBytesWritten=0x6fde08 | out: lpBuffer=0x3927b80*, lpNumberOfBytesWritten=0x6fde08*=0x200) returned 1 [0095.068] WriteProcessMemory (in: hProcess=0x3ac, lpBaseAddress=0x402000, lpBuffer=0x39623a0*, nSize=0x39c00, lpNumberOfBytesWritten=0x6fde08 | out: lpBuffer=0x39623a0*, lpNumberOfBytesWritten=0x6fde08*=0x39c00) returned 1 [0095.088] WriteProcessMemory (in: hProcess=0x3ac, lpBaseAddress=0x43c000, lpBuffer=0x25c44a8*, nSize=0x800, lpNumberOfBytesWritten=0x6fde08 | out: lpBuffer=0x25c44a8*, lpNumberOfBytesWritten=0x6fde08*=0x800) returned 1 [0095.095] WriteProcessMemory (in: hProcess=0x3ac, lpBaseAddress=0x43e000, lpBuffer=0x25c4cb4*, nSize=0x200, lpNumberOfBytesWritten=0x6fde08 | out: lpBuffer=0x25c4cb4*, lpNumberOfBytesWritten=0x6fde08*=0x200) returned 1 [0095.102] WriteProcessMemory (in: hProcess=0x3ac, lpBaseAddress=0x1117008, lpBuffer=0x25c4ec0*, nSize=0x4, lpNumberOfBytesWritten=0x6fde08 | out: lpBuffer=0x25c4ec0*, lpNumberOfBytesWritten=0x6fde08*=0x4) returned 1 [0095.102] SetThreadContext (hThread=0x3a8, lpContext=0x25c41d0*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x1117000, Edx=0x0, Ecx=0x0, Eax=0x43bb6e, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0095.103] ResumeThread (hThread=0x3a8) returned 0x1 [0095.224] CoTaskMemAlloc (cb=0x20c) returned 0x9bd270 [0095.224] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x9bd270 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x0 [0095.224] CoTaskMemFree (pv=0x9bd270) [0095.224] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x6fd854, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0095.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\_CL_02f3a8c9sy", nBufferLength=0x105, lpBuffer=0x6fd798, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\_CL_02f3a8c9sy", lpFilePart=0x0) returned 0x38 [0095.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6fdcdc) returned 1 [0095.291] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\_CL_02f3a8c9sy" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\_cl_02f3a8c9sy"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4 [0095.292] GetFileType (hFile=0x3b4) returned 0x1 [0095.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6fdcd8) returned 1 [0095.292] GetFileType (hFile=0x3b4) returned 0x1 [0095.292] WriteFile (in: hFile=0x3b4, lpBuffer=0x25f3818*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x6fdd58, lpOverlapped=0x0 | out: lpBuffer=0x25f3818*, lpNumberOfBytesWritten=0x6fdd58*=0x38, lpOverlapped=0x0) returned 1 [0095.293] CloseHandle (hObject=0x3b4) returned 1 [0095.296] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe", nBufferLength=0x105, lpBuffer=0x6fd7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe", lpFilePart=0x0) returned 0x34 [0095.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6fdd14) returned 1 [0095.296] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ctfmom.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3b4 [0095.296] GetFileType (hFile=0x3b4) returned 0x1 [0095.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6fdd10) returned 1 [0095.296] GetFileType (hFile=0x3b4) returned 0x1 [0095.296] WriteFile (in: hFile=0x3b4, lpBuffer=0x3bfcba0*, nNumberOfBytesToWrite=0x3b800, lpNumberOfBytesWritten=0x6fddc4, lpOverlapped=0x0 | out: lpBuffer=0x3bfcba0*, lpNumberOfBytesWritten=0x6fddc4*=0x3b800, lpOverlapped=0x0) returned 1 [0095.302] CloseHandle (hObject=0x3b4) returned 1 [0095.311] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0096.324] SleepEx (dwMilliseconds=0xbb8, bAlertable=1) returned 0x0 [0139.927] LocalFree (hMem=0x9af920) returned 0x0 [0139.986] CoGetContextToken (in: pToken=0x6fe6c0 | out: pToken=0x6fe6c0) returned 0x0 [0139.986] CObjectContext::QueryInterface () returned 0x0 [0139.986] CObjectContext::GetCurrentThreadType () returned 0x0 [0139.986] Release () returned 0x0 [0139.987] CoGetContextToken (in: pToken=0x6fe3c4 | out: pToken=0x6fe3c4) returned 0x0 [0139.987] CObjectContext::QueryInterface () returned 0x0 [0139.987] CObjectContext::GetCurrentThreadType () returned 0x0 [0139.987] Release () returned 0x0 [0139.988] CoGetContextToken (in: pToken=0x6fe3c4 | out: pToken=0x6fe3c4) returned 0x0 [0139.988] CObjectContext::QueryInterface () returned 0x0 [0139.988] CObjectContext::GetCurrentThreadType () returned 0x0 [0139.988] Release () returned 0x0 [0139.998] CoGetContextToken (in: pToken=0x6fe3c4 | out: pToken=0x6fe3c4) returned 0x0 [0139.998] CObjectContext::QueryInterface () returned 0x0 [0139.998] CObjectContext::GetCurrentThreadType () returned 0x0 [0139.998] Release () returned 0x0 [0139.999] CoGetContextToken (in: pToken=0x6fe3e4 | out: pToken=0x6fe3e4) returned 0x0 [0139.999] CObjectContext::QueryInterface () returned 0x0 [0139.999] CObjectContext::GetCurrentThreadType () returned 0x0 [0139.999] Release () returned 0x0 [0139.999] CoUninitialize () Thread: id = 2 os_tid = 0x10f8 Thread: id = 3 os_tid = 0x1140 Thread: id = 4 os_tid = 0xe70 [0073.762] CoGetContextToken (in: pToken=0x467f924 | out: pToken=0x467f924) returned 0x0 [0073.763] CObjectContext::QueryInterface () returned 0x0 [0073.763] CObjectContext::GetCurrentThreadType () returned 0x0 [0073.763] Release () returned 0x0 [0073.763] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0073.763] RoInitialize () returned 0x1 [0073.763] RoUninitialize () returned 0x0 [0093.111] CloseHandle (hObject=0x2fc) returned 1 [0139.988] EtwEventUnregister (RegHandle=0x971b98) returned 0x0 [0139.997] CloseHandle (hObject=0x5b4) returned 1 [0139.999] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 5 os_tid = 0x1250 [0105.692] CoGetContextToken (in: pToken=0x4c9f89c | out: pToken=0x4c9f89c) returned 0x0 [0105.692] CObjectContext::QueryInterface () returned 0x0 [0105.692] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.692] Release () returned 0x0 Thread: id = 18 os_tid = 0x36c [0099.517] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0100.405] RoInitialize () returned 0x1 [0100.405] RoUninitialize () returned 0x0 [0100.406] ShellExecuteExW (in: pExecInfo=0x25f5fd4*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x25f5fd4*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x5b4)) returned 1 [0139.497] CoGetContextToken (in: pToken=0x517f950 | out: pToken=0x517f950) returned 0x0 [0139.500] CoUninitialize () Thread: id = 23 os_tid = 0xd70 Thread: id = 25 os_tid = 0xab0 Thread: id = 27 os_tid = 0xdc8 Thread: id = 28 os_tid = 0xdb8 Thread: id = 48 os_tid = 0x6e0 Thread: id = 49 os_tid = 0xea4 Process: id = "2" image_name = "msbuild.exe" filename = "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\msbuild.exe" page_root = "0x5826000" os_pid = "0x10ec" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1070" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.exe\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 6 os_tid = 0x102c Process: id = "3" image_name = "msbuild.exe" filename = "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\msbuild.exe" page_root = "0x4cbdc000" os_pid = "0x760" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1070" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.exe\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 7 os_tid = 0x1020 [0095.956] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0095.960] RoInitialize () returned 0x1 [0095.960] RoUninitialize () returned 0x0 [0096.212] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0xffea10 | out: phkResult=0xffea10*=0x0) returned 0x2 [0096.213] RegCloseKey (hKey=0x80000002) returned 0x0 [0096.218] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.exe", nBufferLength=0x105, lpBuffer=0xffec90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.exe", lpFilePart=0x0) returned 0x39 [0096.221] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.exe", nBufferLength=0x105, lpBuffer=0xffec08, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.exe", lpFilePart=0x0) returned 0x39 [0096.247] VirtualProtect (in: lpAddress=0x43bb5e, dwSize=0xb, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.254] VirtualProtect (in: lpAddress=0x43bb52, dwSize=0xb, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.262] VirtualProtect (in: lpAddress=0x400178, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.270] VirtualProtect (in: lpAddress=0x4001a0, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.281] VirtualProtect (in: lpAddress=0x4001c8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.289] VirtualProtect (in: lpAddress=0x402008, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.297] VirtualProtect (in: lpAddress=0x417ffc, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.305] VirtualProtect (in: lpAddress=0x41801c, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.314] VirtualProtect (in: lpAddress=0x418024, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.324] VirtualProtect (in: lpAddress=0x418028, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.333] VirtualProtect (in: lpAddress=0x418030, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.341] VirtualProtect (in: lpAddress=0x418034, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.349] VirtualProtect (in: lpAddress=0x418038, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.412] VirtualProtect (in: lpAddress=0x41803c, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.419] VirtualProtect (in: lpAddress=0x418044, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.426] VirtualProtect (in: lpAddress=0x418048, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.434] VirtualProtect (in: lpAddress=0x418050, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.440] VirtualProtect (in: lpAddress=0x418054, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.487] VirtualProtect (in: lpAddress=0x418058, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.494] VirtualProtect (in: lpAddress=0x418060, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.498] VirtualProtect (in: lpAddress=0x418064, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0xfff280 | out: lpflOldProtect=0xfff280*=0x40) returned 1 [0096.546] WindowsCreateStringReference () returned 0x0 [0096.546] RoGetActivationFactory () returned 0x0 [0097.040] QueryInterface () returned 0x0 [0097.044] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0097.044] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0097.044] QueryInterface () returned 0x0 [0097.044] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::GetRuntimeClassName () returned 0x8000000e [0097.044] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0097.044] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::AddRef () returned 0x4 [0097.044] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0097.044] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0097.044] Release () returned 0x4 [0097.045] CoGetContextToken (in: pToken=0xffde38 | out: pToken=0xffde38) returned 0x0 [0097.045] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0097.045] CoGetContextToken (in: pToken=0xffe148 | out: pToken=0xffe148) returned 0x0 [0097.045] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0097.045] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x4 [0097.045] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0097.045] WindowsDeleteString () returned 0x0 [0097.045] Release () returned 0x2 [0097.045] CoGetContextToken (in: pToken=0xffe8c0 | out: pToken=0xffe8c0) returned 0x0 [0097.046] CoGetContextToken (in: pToken=0xffe820 | out: pToken=0xffe820) returned 0x0 [0097.046] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0097.046] AddRef () returned 0x4 [0097.046] Release () returned 0x3 [0097.056] IIDFromString (in: lpsz="{410B7711-FF3B-477F-9C9A-D2EFDA302DC3}", lpiid=0xffdf50 | out: lpiid=0xffdf50) returned 0x0 [0097.056] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::add_TracingStatusChanged () returned 0x0 [0097.120] GenericStreamBase::Write () returned 0x0 [0097.120] GenericStreamBase::Write () returned 0x0 [0097.121] CoCreateGuid (in: pguid=0x741847a8 | out: pguid=0x741847a8*(Data1=0xa07105d7, Data2=0x583b, Data3=0x475b, Data4=([0]=0xb2, [1]=0x9d, [2]=0x69, [3]=0xdf, [4]=0x47, [5]=0xa, [6]=0xce, [7]=0x1d))) returned 0x0 [0097.121] GenericStreamBase::Write () returned 0x0 [0097.131] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0097.132] CExtensionCatalog::AddRef () returned 0x3 [0097.132] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0097.132] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0097.132] Release () returned 0x3 [0097.132] CoGetContextToken (in: pToken=0xffdd10 | out: pToken=0xffdd10) returned 0x0 [0097.132] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0097.134] WindowsCreateString () returned 0x0 [0097.135] CExtensionCatalog::AddRef () returned 0x4 [0097.135] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x3 [0097.135] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::get_Enabled () returned 0x0 [0097.166] EtwEventRegister (in: ProviderId=0x2fc6284, EnableCallback=0x55d0b9e, CallbackContext=0x0, RegHandle=0x2fc6260 | out: RegHandle=0x2fc6260) returned 0x0 [0097.170] EtwEventRegister (in: ProviderId=0x2fc6988, EnableCallback=0x55d0bc6, CallbackContext=0x0, RegHandle=0x2fc6964 | out: RegHandle=0x2fc6964) returned 0x0 [0097.170] EtwEventSetInformation (RegHandle=0x13db8f0, InformationClass=0x26, EventInformation=0x2, InformationLength=0x2fc6928) returned 0x0 Thread: id = 8 os_tid = 0x101c Thread: id = 9 os_tid = 0x53c Thread: id = 10 os_tid = 0xd74 [0095.960] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0095.960] RoInitialize () returned 0x1 [0095.960] RoUninitialize () returned 0x0 [0131.826] CoGetContextToken (in: pToken=0x515f620 | out: pToken=0x515f620) returned 0x0 [0131.826] CoGetContextToken (in: pToken=0x515f5a0 | out: pToken=0x515f5a0) returned 0x0 [0131.826] WbemLocator:IUnknown:Release (This=0x1428ea0) returned 0x1 [0131.826] WbemLocator:IUnknown:Release (This=0x1428ea0) returned 0x0 [0131.826] CoGetContextToken (in: pToken=0x515f5a0 | out: pToken=0x515f5a0) returned 0x0 [0131.826] IUnknown:Release (This=0x145c810) returned 0x2 [0131.826] IUnknown:Release (This=0x145c810) returned 0x1 [0131.826] CoGetContextToken (in: pToken=0x515f620 | out: pToken=0x515f620) returned 0x0 [0131.826] CoGetContextToken (in: pToken=0x515f5a0 | out: pToken=0x515f5a0) returned 0x0 [0131.826] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x1 [0131.826] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x0 [0131.826] GdipDeleteGraphics (graphics=0x5a52408) returned 0x0 [0131.827] GdipDisposeImage (image=0x5a51f08) returned 0x0 [0131.840] RegCloseKey (hKey=0x4d0) returned 0x0 [0131.840] RegCloseKey (hKey=0x4cc) returned 0x0 [0131.840] RegCloseKey (hKey=0x4c8) returned 0x0 [0131.840] RegCloseKey (hKey=0x4c4) returned 0x0 [0131.840] RegCloseKey (hKey=0x4c0) returned 0x0 [0131.840] RegCloseKey (hKey=0x4bc) returned 0x0 [0131.840] RegCloseKey (hKey=0x4b8) returned 0x0 [0131.840] RegCloseKey (hKey=0x4b4) returned 0x0 [0131.840] RegCloseKey (hKey=0x4b0) returned 0x0 [0131.840] RegCloseKey (hKey=0x4ac) returned 0x0 [0131.841] RegCloseKey (hKey=0x4a8) returned 0x0 [0131.841] RegCloseKey (hKey=0x4a4) returned 0x0 [0131.841] RegCloseKey (hKey=0x4a0) returned 0x0 [0131.841] RegCloseKey (hKey=0x49c) returned 0x0 [0131.841] RegCloseKey (hKey=0x498) returned 0x0 [0131.841] RegCloseKey (hKey=0x494) returned 0x0 [0131.841] RegCloseKey (hKey=0x490) returned 0x0 [0131.841] RegCloseKey (hKey=0x48c) returned 0x0 [0131.841] RegCloseKey (hKey=0x488) returned 0x0 [0131.841] RegCloseKey (hKey=0x484) returned 0x0 [0131.842] RegCloseKey (hKey=0x480) returned 0x0 [0131.842] RegCloseKey (hKey=0x47c) returned 0x0 [0131.842] RegCloseKey (hKey=0x478) returned 0x0 [0131.842] RegCloseKey (hKey=0x474) returned 0x0 [0131.842] RegCloseKey (hKey=0x470) returned 0x0 [0131.842] RegCloseKey (hKey=0x46c) returned 0x0 [0131.842] RegCloseKey (hKey=0x468) returned 0x0 [0131.842] RegCloseKey (hKey=0x464) returned 0x0 [0131.842] RegCloseKey (hKey=0x460) returned 0x0 [0131.843] RegCloseKey (hKey=0x45c) returned 0x0 [0131.843] RegCloseKey (hKey=0x458) returned 0x0 [0131.843] RegCloseKey (hKey=0x454) returned 0x0 [0131.843] RegCloseKey (hKey=0x450) returned 0x0 [0131.843] RegCloseKey (hKey=0x44c) returned 0x0 [0131.843] RegCloseKey (hKey=0x448) returned 0x0 [0131.843] RegCloseKey (hKey=0x444) returned 0x0 [0131.843] RegCloseKey (hKey=0x440) returned 0x0 [0131.843] RegCloseKey (hKey=0x43c) returned 0x0 [0131.843] RegCloseKey (hKey=0x438) returned 0x0 [0131.844] RegCloseKey (hKey=0x434) returned 0x0 [0131.844] RegCloseKey (hKey=0x430) returned 0x0 [0131.844] RegCloseKey (hKey=0x42c) returned 0x0 [0131.844] RegCloseKey (hKey=0x428) returned 0x0 [0131.844] RegCloseKey (hKey=0x424) returned 0x0 [0131.844] RegCloseKey (hKey=0x420) returned 0x0 [0131.844] RegCloseKey (hKey=0x41c) returned 0x0 [0131.844] RegCloseKey (hKey=0x418) returned 0x0 [0131.844] RegCloseKey (hKey=0x410) returned 0x0 [0131.844] RegCloseKey (hKey=0x300) returned 0x0 [0131.845] RegCloseKey (hKey=0x5c4) returned 0x0 [0131.845] RegCloseKey (hKey=0x5c8) returned 0x0 [0131.846] RegCloseKey (hKey=0x5e0) returned 0x0 [0131.846] CloseHandle (hObject=0x4e8) returned 1 [0141.045] CloseHandle (hObject=0x464) returned 1 Thread: id = 11 os_tid = 0xa50 Thread: id = 12 os_tid = 0x900 Thread: id = 13 os_tid = 0x994 Thread: id = 14 os_tid = 0x11e0 [0097.182] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0097.183] CoGetContextToken (in: pToken=0x5a1f7e4 | out: pToken=0x5a1f7e4) returned 0x0 [0097.183] CObjectContext::QueryInterface () returned 0x0 [0097.183] CObjectContext::GetCurrentThreadType () returned 0x0 [0097.183] Release () returned 0x0 [0097.183] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0097.183] CoUninitialize () [0097.183] RoInitialize () returned 0x1 [0097.183] RoUninitialize () returned 0x0 [0097.281] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.354] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.444] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.466] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.511] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.541] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.590] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.631] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.688] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.719] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.734] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.746] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.752] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.753] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.757] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.789] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.811] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.812] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.813] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.813] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.815] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.817] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.817] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.819] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.821] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.823] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.837] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.840] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.894] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.948] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0097.996] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.056] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.066] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.104] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.150] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.159] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.161] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.166] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.173] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.225] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.322] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.348] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.355] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.376] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.378] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.379] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.382] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.383] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.384] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0098.385] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0101.139] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x300) returned 0x0 [0101.139] RegQueryInfoKeyW (in: hKey=0x300, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x5a1f330, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x5a1f32c, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x5a1f330*=0x30, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x5a1f32c*=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.139] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x0, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="AddressBook", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.139] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x1, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Connection Manager", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.139] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x2, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DirectDrawEx", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.139] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x3, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DXM_Runtime", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.139] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x4, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Fontcore", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.139] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x5, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Google Chrome", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x6, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE40", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x7, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE4Data", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x8, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE5BAKEX", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x9, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IEData", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0xa, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MobileOptionPack", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0xb, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MPlayer2", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0xc, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="SchedulingAgent", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0xd, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="WIC", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0xe, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0xf, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x10, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x11, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x12, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x13, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x14, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x15, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x16, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x17, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x18, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{3D82C954-2957-418B-908F-FE78BF3A8BEB}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.140] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x19, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{4A03706F-666A-4037-7777-5F2748764D10}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x1a, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{582EA838-9199-3518-A05C-DB09462F68EC}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x1b, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{68306422-7C57-373F-8860-D26CE4BA2A15}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x1c, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x1d, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x1e, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{AC76BA86-0804-1033-1959-001824245926}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x1f, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x20, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{B175520C-86A2-35A7-8619-86DC379688B9}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x21, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x22, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x23, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{D5C69738-B486-402E-85AC-2456D98A64E4}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x24, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x25, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x26, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x27, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x28, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x29, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x2a, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x2b, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.141] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x2c, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.142] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x2d, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.142] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x2e, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.142] RegEnumKeyExW (in: hKey=0x300, dwIndex=0x2f, lpName=0x2ffe2ac, lpcchName=0x5a1f34c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpcchName=0x5a1f34c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0101.142] RegOpenKeyExW (in: hKey=0x300, lpSubKey="AddressBook", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x410) returned 0x0 [0101.142] RegQueryValueExW (in: hKey=0x410, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.142] RegQueryValueExW (in: hKey=0x410, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.142] RegOpenKeyExW (in: hKey=0x300, lpSubKey="Connection Manager", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x418) returned 0x0 [0101.142] RegQueryValueExW (in: hKey=0x418, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.142] RegQueryValueExW (in: hKey=0x418, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.142] RegOpenKeyExW (in: hKey=0x300, lpSubKey="DirectDrawEx", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x41c) returned 0x0 [0101.142] RegQueryValueExW (in: hKey=0x41c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.142] RegQueryValueExW (in: hKey=0x41c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.142] RegOpenKeyExW (in: hKey=0x300, lpSubKey="DXM_Runtime", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x420) returned 0x0 [0101.142] RegQueryValueExW (in: hKey=0x420, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.142] RegQueryValueExW (in: hKey=0x420, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.142] RegOpenKeyExW (in: hKey=0x300, lpSubKey="Fontcore", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x424) returned 0x0 [0101.142] RegQueryValueExW (in: hKey=0x424, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.142] RegQueryValueExW (in: hKey=0x424, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.143] RegOpenKeyExW (in: hKey=0x300, lpSubKey="Google Chrome", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x428) returned 0x0 [0101.143] RegQueryValueExW (in: hKey=0x428, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x1c) returned 0x0 [0101.143] RegQueryValueExW (in: hKey=0x428, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x2fff97c, lpcbData=0x5a1f324*=0x1c | out: lpType=0x5a1f328*=0x1, lpData="Google Chrome", lpcbData=0x5a1f324*=0x1c) returned 0x0 [0101.143] RegQueryValueExW (in: hKey=0x428, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x1a) returned 0x0 [0101.143] RegQueryValueExW (in: hKey=0x428, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x2fff9cc, lpcbData=0x5a1f324*=0x1a | out: lpType=0x5a1f328*=0x1, lpData="61.0.3163.79", lpcbData=0x5a1f324*=0x1a) returned 0x0 [0101.143] RegOpenKeyExW (in: hKey=0x300, lpSubKey="IE40", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x42c) returned 0x0 [0101.143] RegQueryValueExW (in: hKey=0x42c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.143] RegQueryValueExW (in: hKey=0x42c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.143] RegOpenKeyExW (in: hKey=0x300, lpSubKey="IE4Data", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x430) returned 0x0 [0101.143] RegQueryValueExW (in: hKey=0x430, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.143] RegQueryValueExW (in: hKey=0x430, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.143] RegOpenKeyExW (in: hKey=0x300, lpSubKey="IE5BAKEX", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x434) returned 0x0 [0101.143] RegQueryValueExW (in: hKey=0x434, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.143] RegQueryValueExW (in: hKey=0x434, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.143] RegOpenKeyExW (in: hKey=0x300, lpSubKey="IEData", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x438) returned 0x0 [0101.143] RegQueryValueExW (in: hKey=0x438, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.143] RegQueryValueExW (in: hKey=0x438, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.143] RegOpenKeyExW (in: hKey=0x300, lpSubKey="MobileOptionPack", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x43c) returned 0x0 [0101.143] RegQueryValueExW (in: hKey=0x43c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.144] RegQueryValueExW (in: hKey=0x43c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.144] RegOpenKeyExW (in: hKey=0x300, lpSubKey="MPlayer2", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x440) returned 0x0 [0101.144] RegQueryValueExW (in: hKey=0x440, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.144] RegQueryValueExW (in: hKey=0x440, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.144] RegOpenKeyExW (in: hKey=0x300, lpSubKey="SchedulingAgent", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x444) returned 0x0 [0101.144] RegQueryValueExW (in: hKey=0x444, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.144] RegQueryValueExW (in: hKey=0x444, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.144] RegOpenKeyExW (in: hKey=0x300, lpSubKey="WIC", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x448) returned 0x0 [0101.144] RegQueryValueExW (in: hKey=0x448, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.144] RegQueryValueExW (in: hKey=0x448, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.144] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x44c) returned 0x0 [0101.144] RegQueryValueExW (in: hKey=0x44c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x76) returned 0x0 [0101.144] RegQueryValueExW (in: hKey=0x44c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x30002cc, lpcbData=0x5a1f324*=0x76 | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpcbData=0x5a1f324*=0x76) returned 0x0 [0101.144] RegQueryValueExW (in: hKey=0x44c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x16) returned 0x0 [0101.144] RegQueryValueExW (in: hKey=0x44c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x30003d4, lpcbData=0x5a1f324*=0x16 | out: lpType=0x5a1f328*=0x1, lpData="12.0.21005", lpcbData=0x5a1f324*=0x16) returned 0x0 [0101.144] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x450) returned 0x0 [0101.144] RegQueryValueExW (in: hKey=0x450, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.144] RegQueryValueExW (in: hKey=0x450, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.144] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x454) returned 0x0 [0101.145] RegQueryValueExW (in: hKey=0x454, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.145] RegQueryValueExW (in: hKey=0x454, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.145] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x458) returned 0x0 [0101.145] RegQueryValueExW (in: hKey=0x458, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.145] RegQueryValueExW (in: hKey=0x458, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.145] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x45c) returned 0x0 [0101.145] RegQueryValueExW (in: hKey=0x45c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.145] RegQueryValueExW (in: hKey=0x45c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.145] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x460) returned 0x0 [0101.145] RegQueryValueExW (in: hKey=0x460, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.145] RegQueryValueExW (in: hKey=0x460, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.145] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x464) returned 0x0 [0101.145] RegQueryValueExW (in: hKey=0x464, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.145] RegQueryValueExW (in: hKey=0x464, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.145] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x468) returned 0x0 [0101.145] RegQueryValueExW (in: hKey=0x468, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.145] RegQueryValueExW (in: hKey=0x468, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.145] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x46c) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x46c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x7a) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x46c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3000e44, lpcbData=0x5a1f324*=0x7a | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpcbData=0x5a1f324*=0x7a) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x46c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x1a) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x46c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3000f54, lpcbData=0x5a1f324*=0x1a | out: lpType=0x5a1f328*=0x1, lpData="11.0.61030.0", lpcbData=0x5a1f324*=0x1a) returned 0x0 [0101.146] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{3c3aafc8-d898-43ec-998f-965ffdae065a}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x470) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x470, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x7a) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x470, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3001168, lpcbData=0x5a1f324*=0x7a | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpcbData=0x5a1f324*=0x7a) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x470, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x1a) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x470, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3001278, lpcbData=0x5a1f324*=0x1a | out: lpType=0x5a1f328*=0x1, lpData="12.0.30501.0", lpcbData=0x5a1f324*=0x1a) returned 0x0 [0101.146] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{3D82C954-2957-418B-908F-FE78BF3A8BEB}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x474) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x474, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x38) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x474, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x300148c, lpcbData=0x5a1f324*=0x38 | out: lpType=0x5a1f328*=0x1, lpData="Adobe Flash Player 25 NPAPI", lpcbData=0x5a1f324*=0x38) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x474, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x16) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x474, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3001514, lpcbData=0x5a1f324*=0x16 | out: lpType=0x5a1f328*=0x1, lpData="25.0.0.148", lpcbData=0x5a1f324*=0x16) returned 0x0 [0101.146] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{4A03706F-666A-4037-7777-5F2748764D10}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x478) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x478, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x24) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x478, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3001708, lpcbData=0x5a1f324*=0x24 | out: lpType=0x5a1f328*=0x1, lpData="Java Auto Updater", lpcbData=0x5a1f324*=0x24) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x478, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x14) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x478, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3001768, lpcbData=0x5a1f324*=0x14 | out: lpType=0x5a1f328*=0x1, lpData="2.8.144.1", lpcbData=0x5a1f324*=0x14) returned 0x0 [0101.146] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{582EA838-9199-3518-A05C-DB09462F68EC}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x47c) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x47c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x78) returned 0x0 [0101.146] RegQueryValueExW (in: hKey=0x47c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3001910, lpcbData=0x5a1f324*=0x78 | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpcbData=0x5a1f324*=0x78) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x47c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x18) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x47c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3001a18, lpcbData=0x5a1f324*=0x18 | out: lpType=0x5a1f328*=0x1, lpData="14.10.25017", lpcbData=0x5a1f324*=0x18) returned 0x0 [0101.147] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{68306422-7C57-373F-8860-D26CE4BA2A15}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x480) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x480, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x7e) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x480, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3001c20, lpcbData=0x5a1f324*=0x7e | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpcbData=0x5a1f324*=0x7e) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x480, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x18) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x480, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3001d38, lpcbData=0x5a1f324*=0x18 | out: lpType=0x5a1f328*=0x1, lpData="14.10.25017", lpcbData=0x5a1f324*=0x18) returned 0x0 [0101.147] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x484) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x484, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x54) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x484, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3001f48, lpcbData=0x5a1f324*=0x54 | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2005 Redistributable", lpcbData=0x5a1f324*=0x54) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x484, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x14) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x484, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3002008, lpcbData=0x5a1f324*=0x14 | out: lpType=0x5a1f328*=0x1, lpData="8.0.61001", lpcbData=0x5a1f324*=0x14) returned 0x0 [0101.147] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x488) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x488, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x7e) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x488, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x300222c, lpcbData=0x5a1f324*=0x7e | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpcbData=0x5a1f324*=0x7e) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x488, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x1e) returned 0x0 [0101.147] RegQueryValueExW (in: hKey=0x488, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3002344, lpcbData=0x5a1f324*=0x1e | out: lpType=0x5a1f328*=0x1, lpData="9.0.30729.6161", lpcbData=0x5a1f324*=0x1e) returned 0x0 [0101.147] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{AC76BA86-0804-1033-1959-001824245926}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x48c) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x48c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x2c) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x48c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3002568, lpcbData=0x5a1f324*=0x2c | out: lpType=0x5a1f328*=0x1, lpData="Adobe Refresh Manager", lpcbData=0x5a1f324*=0x2c) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x48c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0xc) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x48c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x30025d8, lpcbData=0x5a1f324*=0xc | out: lpType=0x5a1f328*=0x1, lpData="1.8.0", lpcbData=0x5a1f324*=0xc) returned 0x0 [0101.148] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x490) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x490, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x30) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x490, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3002770, lpcbData=0x5a1f324*=0x30 | out: lpType=0x5a1f328*=0x1, lpData="Adobe Acrobat Reader DC", lpcbData=0x5a1f324*=0x30) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x490, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x1a) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x490, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x30027e8, lpcbData=0x5a1f324*=0x1a | out: lpType=0x5a1f328*=0x1, lpData="18.009.20050", lpcbData=0x5a1f324*=0x1a) returned 0x0 [0101.148] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{B175520C-86A2-35A7-8619-86DC379688B9}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x494) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x494, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x7c) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x494, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x30029b4, lpcbData=0x5a1f324*=0x7c | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpcbData=0x5a1f324*=0x7c) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x494, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x16) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x494, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3002ac4, lpcbData=0x5a1f324*=0x16 | out: lpType=0x5a1f328*=0x1, lpData="11.0.61030", lpcbData=0x5a1f324*=0x16) returned 0x0 [0101.148] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x498) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x498, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x76) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x498, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3002cd0, lpcbData=0x5a1f324*=0x76 | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpcbData=0x5a1f324*=0x76) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x498, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x16) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x498, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3002dd8, lpcbData=0x5a1f324*=0x16 | out: lpType=0x5a1f328*=0x1, lpData="11.0.61030", lpcbData=0x5a1f324*=0x16) returned 0x0 [0101.148] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x49c) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x49c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x7a) returned 0x0 [0101.148] RegQueryValueExW (in: hKey=0x49c, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3002fdc, lpcbData=0x5a1f324*=0x7a | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpcbData=0x5a1f324*=0x7a) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x49c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x1a) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x49c, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x30030ec, lpcbData=0x5a1f324*=0x1a | out: lpType=0x5a1f328*=0x1, lpData="11.0.61030.0", lpcbData=0x5a1f324*=0x1a) returned 0x0 [0101.149] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{D5C69738-B486-402E-85AC-2456D98A64E4}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x4a0) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4a0, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x38) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4a0, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3003300, lpcbData=0x5a1f324*=0x38 | out: lpType=0x5a1f328*=0x1, lpData="Windows 10 Update Assistant", lpcbData=0x5a1f324*=0x38) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4a0, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x1e) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4a0, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3003388, lpcbData=0x5a1f324*=0x1e | out: lpType=0x5a1f328*=0x1, lpData="1.4.9200.22243", lpcbData=0x5a1f324*=0x1e) returned 0x0 [0101.149] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{e52a6842-b0ac-476e-b48f-378a97a67346}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x4a4) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4a4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x7c) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4a4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3003568, lpcbData=0x5a1f324*=0x7c | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpcbData=0x5a1f324*=0x7c) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4a4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x1c) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4a4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3003678, lpcbData=0x5a1f324*=0x1c | out: lpType=0x5a1f328*=0x1, lpData="14.10.25017.0", lpcbData=0x5a1f324*=0x1c) returned 0x0 [0101.149] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x4a8) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4a8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x7a) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4a8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x300391c, lpcbData=0x5a1f324*=0x7a | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpcbData=0x5a1f324*=0x7a) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4a8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x1a) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4a8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3003a2c, lpcbData=0x5a1f324*=0x1a | out: lpType=0x5a1f328*=0x1, lpData="12.0.30501.0", lpcbData=0x5a1f324*=0x1a) returned 0x0 [0101.149] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x4ac) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4ac, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x78) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4ac, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3003c40, lpcbData=0x5a1f324*=0x78 | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpcbData=0x5a1f324*=0x78) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4ac, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x16) returned 0x0 [0101.149] RegQueryValueExW (in: hKey=0x4ac, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3003d48, lpcbData=0x5a1f324*=0x16 | out: lpType=0x5a1f328*=0x1, lpData="10.0.40219", lpcbData=0x5a1f324*=0x16) returned 0x0 [0101.150] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x4b0) returned 0x0 [0101.150] RegQueryValueExW (in: hKey=0x4b0, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.150] RegQueryValueExW (in: hKey=0x4b0, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.150] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x4b4) returned 0x0 [0101.150] RegQueryValueExW (in: hKey=0x4b4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.150] RegQueryValueExW (in: hKey=0x4b4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.150] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x4b8) returned 0x0 [0101.150] RegQueryValueExW (in: hKey=0x4b8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.150] RegQueryValueExW (in: hKey=0x4b8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.150] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x4bc) returned 0x0 [0101.150] RegQueryValueExW (in: hKey=0x4bc, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.150] RegQueryValueExW (in: hKey=0x4bc, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.150] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x4c0) returned 0x0 [0101.150] RegQueryValueExW (in: hKey=0x4c0, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.150] RegQueryValueExW (in: hKey=0x4c0, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.150] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x4c4) returned 0x0 [0101.150] RegQueryValueExW (in: hKey=0x4c4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.150] RegQueryValueExW (in: hKey=0x4c4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.151] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x4c8) returned 0x0 [0101.151] RegQueryValueExW (in: hKey=0x4c8, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.151] RegQueryValueExW (in: hKey=0x4c8, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x0, lpData=0x0, lpcbData=0x5a1f324*=0x0) returned 0x2 [0101.151] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{f325f05b-f963-4640-a43b-c8a494cdda0f}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x4cc) returned 0x0 [0101.151] RegQueryValueExW (in: hKey=0x4cc, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x7c) returned 0x0 [0101.151] RegQueryValueExW (in: hKey=0x4cc, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x30047bc, lpcbData=0x5a1f324*=0x7c | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpcbData=0x5a1f324*=0x7c) returned 0x0 [0101.151] RegQueryValueExW (in: hKey=0x4cc, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x1c) returned 0x0 [0101.151] RegQueryValueExW (in: hKey=0x4cc, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x30048cc, lpcbData=0x5a1f324*=0x1c | out: lpType=0x5a1f328*=0x1, lpData="14.10.25017.0", lpcbData=0x5a1f324*=0x1c) returned 0x0 [0101.151] RegOpenKeyExW (in: hKey=0x300, lpSubKey="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a1f308 | out: phkResult=0x5a1f308*=0x4d0) returned 0x0 [0101.151] RegQueryValueExW (in: hKey=0x4d0, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x7c) returned 0x0 [0101.151] RegQueryValueExW (in: hKey=0x4d0, lpValueName="DisplayName", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3004ae4, lpcbData=0x5a1f324*=0x7c | out: lpType=0x5a1f328*=0x1, lpData="Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpcbData=0x5a1f324*=0x7c) returned 0x0 [0101.151] RegQueryValueExW (in: hKey=0x4d0, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x0, lpcbData=0x5a1f324*=0x0 | out: lpType=0x5a1f328*=0x1, lpData=0x0, lpcbData=0x5a1f324*=0x16) returned 0x0 [0101.151] RegQueryValueExW (in: hKey=0x4d0, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x5a1f328, lpData=0x3004bf4, lpcbData=0x5a1f324*=0x16 | out: lpType=0x5a1f328*=0x1, lpData="12.0.21005", lpcbData=0x5a1f324*=0x16) returned 0x0 [0101.523] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0101.524] CreatePipe (in: hReadPipe=0x5a1f134, hWritePipe=0x5a1f130, lpPipeAttributes=0x5a1f0b4, nSize=0x0 | out: hReadPipe=0x5a1f134*=0x500, hWritePipe=0x5a1f130*=0x504) returned 1 [0101.525] GetCurrentProcess () returned 0xffffffff [0101.525] GetCurrentProcess () returned 0xffffffff [0101.526] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x500, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x5a1f138, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x5a1f138*=0x508) returned 1 [0101.526] CloseHandle (hObject=0x500) returned 1 [0101.526] CreatePipe (in: hReadPipe=0x5a1f134, hWritePipe=0x5a1f130, lpPipeAttributes=0x5a1f0b4, nSize=0x0 | out: hReadPipe=0x5a1f134*=0x500, hWritePipe=0x5a1f130*=0x50c) returned 1 [0101.526] GetCurrentProcess () returned 0xffffffff [0101.526] GetCurrentProcess () returned 0xffffffff [0101.526] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x500, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x5a1f138, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x5a1f138*=0x510) returned 1 [0101.527] CloseHandle (hObject=0x500) returned 1 [0101.527] CoTaskMemAlloc (cb=0x20e) returned 0x141bfb0 [0101.527] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x141bfb0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0101.528] CoTaskMemFree (pv=0x141bfb0) [0101.528] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"cmd.exe\" /C chcp 65001 && netsh wlan show profile | findstr All", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x5a1f03c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x504, hStdError=0x50c), lpProcessInformation=0x300dd54 | out: lpCommandLine="\"cmd.exe\" /C chcp 65001 && netsh wlan show profile | findstr All", lpProcessInformation=0x300dd54*(hProcess=0x4f8, hThread=0x4f4, dwProcessId=0x67c, dwThreadId=0xd50)) returned 1 [0102.317] CloseHandle (hObject=0x504) returned 1 [0102.317] CloseHandle (hObject=0x50c) returned 1 [0102.328] GetFileType (hFile=0x508) returned 0x3 [0102.329] GetFileType (hFile=0x510) returned 0x3 [0102.330] CloseHandle (hObject=0x4f4) returned 1 [0102.331] ReadFile (in: hFile=0x508, lpBuffer=0x300ef54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a1f20c, lpOverlapped=0x0 | out: lpBuffer=0x300ef54*, lpNumberOfBytesRead=0x5a1f20c*=0x19, lpOverlapped=0x0) returned 1 [0122.709] ReadFile (in: hFile=0x508, lpBuffer=0x300ef54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a1f20c, lpOverlapped=0x0 | out: lpBuffer=0x300ef54, lpNumberOfBytesRead=0x5a1f20c*=0x0, lpOverlapped=0x0) returned 0 [0162.656] GetCurrentProcess () returned 0xffffffff [0162.656] GetCurrentProcess () returned 0xffffffff [0162.656] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x4f8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x5a1f1f4, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x5a1f1f4*=0x63c) returned 1 [0162.660] CloseHandle (hObject=0x63c) returned 1 [0162.661] CloseHandle (hObject=0x4f8) returned 1 [0162.661] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.661] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.700] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.751] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0163.312] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0164.117] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0164.324] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0164.770] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.092] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.241] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.343] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.433] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.605] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.886] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0166.042] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0166.715] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0166.857] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0166.950] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.079] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.221] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.294] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.341] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.397] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.481] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.543] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.591] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.641] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.684] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0168.090] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0168.162] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0168.294] SleepEx (dwMilliseconds=0x0, bAlertable=0) Thread: id = 15 os_tid = 0xcd0 Thread: id = 16 os_tid = 0xa6c [0097.315] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0097.315] RoInitialize () returned 0x1 [0097.315] RoUninitialize () returned 0x0 [0097.381] CoTaskMemAlloc (cb=0x20c) returned 0x13fe518 [0097.383] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x13fe518 | out: pszPath="C:\\Users\\FD1HVy\\Desktop") returned 0x0 [0097.389] CoTaskMemFree (pv=0x13fe518) [0097.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x5bdd928, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0097.389] CoTaskMemAlloc (cb=0x20c) returned 0x13fe518 [0097.389] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x13fe518 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x0 [0097.390] CoTaskMemFree (pv=0x13fe518) [0097.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x5bdd928, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local", lpFilePart=0x0) returned 0x1d [0097.391] CoTaskMemAlloc (cb=0x20c) returned 0x13fe518 [0097.391] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x13fe518 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0097.391] CoTaskMemFree (pv=0x13fe518) [0097.391] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x105, lpBuffer=0x5bdd928, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x0) returned 0x13 [0097.391] CoTaskMemAlloc (cb=0x20c) returned 0x13fe518 [0097.391] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x13fe518 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x0 [0097.392] CoTaskMemFree (pv=0x13fe518) [0097.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x5bdd928, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0097.392] CoTaskMemAlloc (cb=0x20c) returned 0x13fe518 [0097.392] SHGetFolderPathW (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x13fe518 | out: pszPath="C:\\ProgramData") returned 0x0 [0097.393] CoTaskMemFree (pv=0x13fe518) [0097.394] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x5bdd928, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0097.394] CoTaskMemAlloc (cb=0x20c) returned 0x13fe518 [0097.394] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x13fe518 | out: pszPath="C:\\Users\\FD1HVy\\Documents") returned 0x0 [0097.394] CoTaskMemFree (pv=0x13fe518) [0097.395] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x5bdd928, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0097.395] CoTaskMemAlloc (cb=0x20c) returned 0x13fe518 [0097.395] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x13fe518 | out: pszPath="C:\\Users\\FD1HVy") returned 0x0 [0097.396] CoTaskMemFree (pv=0x13fe518) [0097.396] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x105, lpBuffer=0x5bdd928, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0097.398] GetTimeZoneInformation (in: lpTimeZoneInformation=0x5bddd34 | out: lpTimeZoneInformation=0x5bddd34) returned 0x2 [0097.449] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x5bddb90 | out: pTimeZoneInformation=0x5bddb90) returned 0x2 [0097.455] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bddc74 | out: phkResult=0x5bddc74*=0x3c4) returned 0x0 [0097.455] RegQueryValueExW (in: hKey=0x3c4, lpValueName="TZI", lpReserved=0x0, lpType=0x5bddc90, lpData=0x0, lpcbData=0x5bddc8c*=0x0 | out: lpType=0x5bddc90*=0x3, lpData=0x0, lpcbData=0x5bddc8c*=0x2c) returned 0x0 [0097.455] RegQueryValueExW (in: hKey=0x3c4, lpValueName="TZI", lpReserved=0x0, lpType=0x5bddc90, lpData=0x2fcaebc, lpcbData=0x5bddc8c*=0x2c | out: lpType=0x5bddc90*=0x3, lpData=0x2fcaebc*, lpcbData=0x5bddc8c*=0x2c) returned 0x0 [0097.461] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bddac8 | out: phkResult=0x5bddac8*=0x0) returned 0x2 [0097.462] RegQueryValueExW (in: hKey=0x3c4, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x5bddc68, lpData=0x0, lpcbData=0x5bddc64*=0x0 | out: lpType=0x5bddc68*=0x1, lpData=0x0, lpcbData=0x5bddc64*=0x20) returned 0x0 [0097.462] RegQueryValueExW (in: hKey=0x3c4, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x5bddc68, lpData=0x2fcb3c8, lpcbData=0x5bddc64*=0x20 | out: lpType=0x5bddc68*=0x1, lpData="@tzres.dll,-320", lpcbData=0x5bddc64*=0x20) returned 0x0 [0097.462] RegQueryValueExW (in: hKey=0x3c4, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x5bddc68, lpData=0x0, lpcbData=0x5bddc64*=0x0 | out: lpType=0x5bddc68*=0x1, lpData=0x0, lpcbData=0x5bddc64*=0x20) returned 0x0 [0097.462] RegQueryValueExW (in: hKey=0x3c4, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x5bddc68, lpData=0x2fcb420, lpcbData=0x5bddc64*=0x20 | out: lpType=0x5bddc68*=0x1, lpData="@tzres.dll,-322", lpcbData=0x5bddc64*=0x20) returned 0x0 [0097.462] RegQueryValueExW (in: hKey=0x3c4, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x5bddc68, lpData=0x0, lpcbData=0x5bddc64*=0x0 | out: lpType=0x5bddc68*=0x1, lpData=0x0, lpcbData=0x5bddc64*=0x20) returned 0x0 [0097.462] RegQueryValueExW (in: hKey=0x3c4, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x5bddc68, lpData=0x2fcb478, lpcbData=0x5bddc64*=0x20 | out: lpType=0x5bddc68*=0x1, lpData="@tzres.dll,-321", lpcbData=0x5bddc64*=0x20) returned 0x0 [0097.463] CoTaskMemAlloc (cb=0x20c) returned 0x1400b68 [0097.463] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1400b68 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0097.463] CoTaskMemFree (pv=0x1400b68) [0097.464] CoTaskMemAlloc (cb=0x20c) returned 0x1400b68 [0097.464] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x5bddc84, pwszFileMUIPath=0x1400b68, pcchFileMUIPath=0x5bddc88, pululEnumerator=0x5bddc7c | out: pwszLanguage=0x0, pcchLanguage=0x5bddc84, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x5bddc88, pululEnumerator=0x5bddc7c) returned 1 [0097.469] CoTaskMemFree (pv=0x0) [0097.469] CoTaskMemFree (pv=0x1400b68) [0097.469] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x55a0001 [0097.474] CoTaskMemAlloc (cb=0x3ec) returned 0x14019b0 [0097.474] LoadStringW (in: hInstance=0x55a0001, uID=0x140, lpBuffer=0x14019b0, cchBufferMax=500 | out: lpBuffer="(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna") returned 0x3c [0097.474] CoTaskMemFree (pv=0x14019b0) [0097.474] FreeLibrary (hLibModule=0x55a0001) returned 1 [0097.475] CoTaskMemAlloc (cb=0x20c) returned 0x14019b0 [0097.475] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x14019b0 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0097.475] CoTaskMemFree (pv=0x14019b0) [0097.475] CoTaskMemAlloc (cb=0x20c) returned 0x14019b0 [0097.475] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x5bddc84, pwszFileMUIPath=0x14019b0, pcchFileMUIPath=0x5bddc88, pululEnumerator=0x5bddc7c | out: pwszLanguage=0x0, pcchLanguage=0x5bddc84, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x5bddc88, pululEnumerator=0x5bddc7c) returned 1 [0097.476] CoTaskMemFree (pv=0x0) [0097.476] CoTaskMemFree (pv=0x14019b0) [0097.477] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x55a0001 [0097.477] CoTaskMemAlloc (cb=0x3ec) returned 0x14019b0 [0097.477] LoadStringW (in: hInstance=0x55a0001, uID=0x142, lpBuffer=0x14019b0, cchBufferMax=500 | out: lpBuffer="W. Europe Standard Time") returned 0x17 [0097.477] CoTaskMemFree (pv=0x14019b0) [0097.477] FreeLibrary (hLibModule=0x55a0001) returned 1 [0097.478] CoTaskMemAlloc (cb=0x20c) returned 0x14019b0 [0097.478] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x14019b0 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0097.478] CoTaskMemFree (pv=0x14019b0) [0097.478] CoTaskMemAlloc (cb=0x20c) returned 0x14019b0 [0097.478] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x5bddc84, pwszFileMUIPath=0x14019b0, pcchFileMUIPath=0x5bddc88, pululEnumerator=0x5bddc7c | out: pwszLanguage=0x0, pcchLanguage=0x5bddc84, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x5bddc88, pululEnumerator=0x5bddc7c) returned 1 [0097.479] CoTaskMemFree (pv=0x0) [0097.479] CoTaskMemFree (pv=0x14019b0) [0097.479] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x55a0001 [0097.480] CoTaskMemAlloc (cb=0x3ec) returned 0x14019b0 [0097.480] LoadStringW (in: hInstance=0x55a0001, uID=0x141, lpBuffer=0x14019b0, cchBufferMax=500 | out: lpBuffer="W. Europe Daylight Time") returned 0x17 [0097.480] CoTaskMemFree (pv=0x14019b0) [0097.480] FreeLibrary (hLibModule=0x55a0001) returned 1 [0097.481] RegCloseKey (hKey=0x3c4) returned 0x0 [0097.527] CoTaskMemAlloc (cb=0x20c) returned 0x14019b0 [0097.527] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x14019b0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0097.527] CoTaskMemFree (pv=0x14019b0) [0097.527] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x5bdd9cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x23 [0097.527] CoTaskMemAlloc (cb=0x20c) returned 0x14019b0 [0097.527] GetEnvironmentVariableW (in: lpName="Temp", lpBuffer=0x14019b0, nSize=0x104 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp") returned 0x22 [0097.527] CoTaskMemFree (pv=0x14019b0) [0097.528] GetUserNameW (in: lpBuffer=0x5bddcb8, pcbBuffer=0x5bddf30 | out: lpBuffer="FD1HVy", pcbBuffer=0x5bddf30) returned 1 [0097.560] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x5bdd834, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0097.560] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x5bdd898, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0097.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bddd4c) returned 1 [0097.562] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x5bdddc8 | out: lpFileInformation=0x5bdddc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0097.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bddd48) returned 1 [0097.636] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x5bddca4 | out: pfEnabled=0x5bddca4) returned 0x0 [0097.647] GetComputerNameW (in: lpBuffer=0x5bddcb8, nSize=0x5bddf30 | out: lpBuffer="NQDPDE", nSize=0x5bddf30) returned 1 [0097.648] GetComputerNameW (in: lpBuffer=0x5bddcb8, nSize=0x5bddf30 | out: lpBuffer="NQDPDE", nSize=0x5bddf30) returned 1 [0097.648] CoTaskMemAlloc (cb=0x20c) returned 0x14079a8 [0097.648] GetEnvironmentVariableW (in: lpName="Temp", lpBuffer=0x14079a8, nSize=0x104 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp") returned 0x22 [0097.648] CoTaskMemFree (pv=0x14079a8) [0097.648] GetUserNameW (in: lpBuffer=0x5bddcb8, pcbBuffer=0x5bddf30 | out: lpBuffer="FD1HVy", pcbBuffer=0x5bddf30) returned 1 [0097.649] GetComputerNameW (in: lpBuffer=0x5bddcb8, nSize=0x5bddf30 | out: lpBuffer="NQDPDE", nSize=0x5bddf30) returned 1 [0097.650] CoTaskMemAlloc (cb=0x20c) returned 0x1407d18 [0097.650] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0x1407d18, nSize=0x104 | out: lpBuffer="C:\\WINDOWS") returned 0xa [0097.650] CoTaskMemFree (pv=0x1407d18) [0097.650] CoTaskMemAlloc (cb=0x20c) returned 0x1407d18 [0097.651] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0x1407d18, nSize=0x104 | out: lpBuffer="C:\\WINDOWS") returned 0xa [0097.651] CoTaskMemFree (pv=0x1407d18) [0101.080] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\38d4c75d597e70a311d22bf9cfe472d4-mat-debug.tmp", nBufferLength=0x105, lpBuffer=0x5bde928, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\38d4c75d597e70a311d22bf9cfe472d4-mat-debug.tmp", lpFilePart=0x0) returned 0x72 [0101.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdeddc) returned 1 [0101.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\38d4c75d597e70a311d22bf9cfe472d4-mat-debug.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\38d4c75d597e70a311d22bf9cfe472d4-mat-debug.tmp"), fInfoLevelId=0x0, lpFileInformation=0x5bdee58 | out: lpFileInformation=0x5bdee58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0101.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdedd8) returned 1 [0101.082] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0", nBufferLength=0x105, lpBuffer=0x5bde92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0", lpFilePart=0x0) returned 0x64 [0101.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdee14) returned 1 [0101.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0"), fInfoLevelId=0x0, lpFileInformation=0x2ffdcdc | out: lpFileInformation=0x2ffdcdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0101.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdee10) returned 1 [0101.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bded80) returned 1 [0101.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0"), fInfoLevelId=0x0, lpFileInformation=0x5bdedfc | out: lpFileInformation=0x5bdedfc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0101.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bded7c) returned 1 [0101.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bded80) returned 1 [0101.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0"), fInfoLevelId=0x0, lpFileInformation=0x5bdedfc | out: lpFileInformation=0x5bdedfc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0101.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bded7c) returned 1 [0101.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bded80) returned 1 [0101.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab"), fInfoLevelId=0x0, lpFileInformation=0x5bdedfc | out: lpFileInformation=0x5bdedfc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0101.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bded7c) returned 1 [0101.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bded80) returned 1 [0101.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x5bdedfc | out: lpFileInformation=0x5bdedfc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x35d8719e, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x35d8719e, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0101.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bded7c) returned 1 [0101.201] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab"), lpSecurityAttributes=0x0) returned 1 [0101.201] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0"), lpSecurityAttributes=0x0) returned 1 [0101.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdee2c) returned 1 [0101.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0"), fInfoLevelId=0x0, lpFileInformation=0x2ffdcdc | out: lpFileInformation=0x2ffdcdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0101.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdee28) returned 1 [0101.203] SetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0", dwFileAttributes=0x12) returned 1 [0101.208] GetCurrentProcess () returned 0xffffffff [0101.208] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5bdee10 | out: TokenHandle=0x5bdee10*=0x4e8) returned 1 [0101.212] GetTokenInformation (in: TokenHandle=0x4e8, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x5bdee14 | out: TokenInformation=0x0, ReturnLength=0x5bdee14) returned 0 [0101.212] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x1410f40 [0101.212] GetTokenInformation (in: TokenHandle=0x4e8, TokenInformationClass=0x8, TokenInformation=0x1410f40, TokenInformationLength=0x4, ReturnLength=0x5bdee14 | out: TokenInformation=0x1410f40, ReturnLength=0x5bdee14) returned 1 [0101.212] LocalFree (hMem=0x1410f40) returned 0x0 [0101.213] DuplicateTokenEx (in: hExistingToken=0x4e8, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x5bdee1c | out: phNewToken=0x5bdee1c*=0x4ec) returned 1 [0101.213] CheckTokenMembership (in: TokenHandle=0x4ec, SidToCheck=0x300c73c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x5bdee2c | out: IsMember=0x5bdee2c) returned 1 [0101.214] CloseHandle (hObject=0x4ec) returned 1 [0101.238] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4f0 [0101.349] CoGetObjectContext (in: riid=0x300c91c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5bde718 | out: ppv=0x5bde718*=0x13dcc0c) returned 0x0 [0101.355] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x5bdd93c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0101.358] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll") returned 0x70a30000 [0101.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x5bddec4, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecurity5ÉpBKþ%ðù°s á½\x05\x01", lpUsedDefaultChar=0x0) returned 13 [0101.586] GetProcAddress (hModule=0x70a30000, lpProcName="ResetSecurity") returned 0x70a37a70 [0101.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x5bddec4, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurity\x01\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 11 [0101.597] GetProcAddress (hModule=0x70a30000, lpProcName="SetSecurity") returned 0x70a37ac0 [0101.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x5bddec0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 18 [0101.606] GetProcAddress (hModule=0x70a30000, lpProcName="BlessIWbemServices") returned 0x70a36b60 [0102.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServicesObject", cchWideChar=24, lpMultiByteStr=0x5bddeb8, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesObject\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 24 [0102.283] GetProcAddress (hModule=0x70a30000, lpProcName="BlessIWbemServicesObject") returned 0x70a36bc0 [0102.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyHandle", cchWideChar=17, lpMultiByteStr=0x5bddec0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyHandle5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 17 [0102.308] GetProcAddress (hModule=0x70a30000, lpProcName="GetPropertyHandle") returned 0x70a37500 [0102.391] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WritePropertyValue", cchWideChar=18, lpMultiByteStr=0x5bddec0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WritePropertyValueÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 18 [0102.392] GetProcAddress (hModule=0x70a30000, lpProcName="WritePropertyValue") returned 0x70a37c30 [0102.405] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x5bddecc, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 5 [0102.405] GetProcAddress (hModule=0x70a30000, lpProcName="Clone") returned 0x70a36c20 [0102.414] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VerifyClientKey", cchWideChar=15, lpMultiByteStr=0x5bddec0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VerifyClientKey\x01\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 15 [0102.414] GetProcAddress (hModule=0x70a30000, lpProcName="VerifyClientKey") returned 0x70a37bb0 [0102.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetQualifierSet", cchWideChar=15, lpMultiByteStr=0x5bddec0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetQualifierSet\x01\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 15 [0102.561] GetProcAddress (hModule=0x70a30000, lpProcName="GetQualifierSet") returned 0x70a372c0 [0102.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Get", cchWideChar=3, lpMultiByteStr=0x5bddecc, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Get\x01\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 3 [0102.562] GetProcAddress (hModule=0x70a30000, lpProcName="Get") returned 0x70a37290 [0102.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Put", cchWideChar=3, lpMultiByteStr=0x5bddecc, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Put\x01\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 3 [0102.580] GetProcAddress (hModule=0x70a30000, lpProcName="Put") returned 0x70a376c0 [0102.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Delete", cchWideChar=6, lpMultiByteStr=0x5bddecc, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 6 [0102.595] GetProcAddress (hModule=0x70a30000, lpProcName="Delete") returned 0x70a36ff0 [0102.604] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetNames", cchWideChar=8, lpMultiByteStr=0x5bddec8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetNames\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 8 [0102.605] GetProcAddress (hModule=0x70a30000, lpProcName="GetNames") returned 0x70a374a0 [0102.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginEnumeration", cchWideChar=16, lpMultiByteStr=0x5bddec0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginEnumeration\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 16 [0102.863] GetProcAddress (hModule=0x70a30000, lpProcName="BeginEnumeration") returned 0x70a36b20 [0102.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Next", cchWideChar=4, lpMultiByteStr=0x5bddecc, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Next\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 4 [0102.872] GetProcAddress (hModule=0x70a30000, lpProcName="Next") returned 0x70a37660 [0103.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndEnumeration", cchWideChar=14, lpMultiByteStr=0x5bddec4, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndEnumerationÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 14 [0103.008] GetProcAddress (hModule=0x70a30000, lpProcName="EndEnumeration") returned 0x70a370b0 [0103.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyQualifierSet", cchWideChar=23, lpMultiByteStr=0x5bddeb8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyQualifierSet\x01\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 23 [0103.036] GetProcAddress (hModule=0x70a30000, lpProcName="GetPropertyQualifierSet") returned 0x70a37590 [0103.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x5bddecc, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 5 [0103.052] GetProcAddress (hModule=0x70a30000, lpProcName="Clone") returned 0x70a36c20 [0103.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetObjectText", cchWideChar=13, lpMultiByteStr=0x5bddec4, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetObjectText5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 13 [0103.052] GetProcAddress (hModule=0x70a30000, lpProcName="GetObjectText") returned 0x70a374d0 [0103.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnDerivedClass", cchWideChar=17, lpMultiByteStr=0x5bddec0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnDerivedClass5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 17 [0103.176] GetProcAddress (hModule=0x70a30000, lpProcName="SpawnDerivedClass") returned 0x70a37b10 [0103.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnInstance", cchWideChar=13, lpMultiByteStr=0x5bddec4, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnInstance5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 13 [0103.188] GetProcAddress (hModule=0x70a30000, lpProcName="SpawnInstance") returned 0x70a37b40 [0103.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CompareTo", cchWideChar=9, lpMultiByteStr=0x5bddec8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CompareTo5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 9 [0103.190] GetProcAddress (hModule=0x70a30000, lpProcName="CompareTo") returned 0x70a36d10 [0103.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyOrigin", cchWideChar=17, lpMultiByteStr=0x5bddec0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyOrigin5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 17 [0103.201] GetProcAddress (hModule=0x70a30000, lpProcName="GetPropertyOrigin") returned 0x70a37560 [0103.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="InheritsFrom", cchWideChar=12, lpMultiByteStr=0x5bddec4, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InheritsFrom\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 12 [0103.875] GetProcAddress (hModule=0x70a30000, lpProcName="InheritsFrom") returned 0x70a375c0 [0103.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethod", cchWideChar=9, lpMultiByteStr=0x5bddec8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethod5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 9 [0103.876] GetProcAddress (hModule=0x70a30000, lpProcName="GetMethod") returned 0x70a37410 [0103.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutMethod", cchWideChar=9, lpMultiByteStr=0x5bddec8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutMethod5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 9 [0103.888] GetProcAddress (hModule=0x70a30000, lpProcName="PutMethod") returned 0x70a37890 [0103.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DeleteMethod", cchWideChar=12, lpMultiByteStr=0x5bddec4, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteMethod\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 12 [0103.900] GetProcAddress (hModule=0x70a30000, lpProcName="DeleteMethod") returned 0x70a37010 [0103.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginMethodEnumeration", cchWideChar=22, lpMultiByteStr=0x5bddebc, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginMethodEnumerationÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 22 [0103.902] GetProcAddress (hModule=0x70a30000, lpProcName="BeginMethodEnumeration") returned 0x70a36b40 [0103.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NextMethod", cchWideChar=10, lpMultiByteStr=0x5bddec8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextMethodÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 10 [0103.936] GetProcAddress (hModule=0x70a30000, lpProcName="NextMethod") returned 0x70a37690 [0103.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndMethodEnumeration", cchWideChar=20, lpMultiByteStr=0x5bddebc, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndMethodEnumeration\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 20 [0103.948] GetProcAddress (hModule=0x70a30000, lpProcName="EndMethodEnumeration") returned 0x70a370d0 [0103.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodQualifierSet", cchWideChar=21, lpMultiByteStr=0x5bddebc, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodQualifierSet5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 21 [0103.949] GetProcAddress (hModule=0x70a30000, lpProcName="GetMethodQualifierSet") returned 0x70a37470 [0105.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodOrigin", cchWideChar=15, lpMultiByteStr=0x5bddec0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodOrigin\x01\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 15 [0105.838] GetProcAddress (hModule=0x70a30000, lpProcName="GetMethodOrigin") returned 0x70a37440 [0105.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Get", cchWideChar=16, lpMultiByteStr=0x5bddec0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Get\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 16 [0105.839] GetProcAddress (hModule=0x70a30000, lpProcName="QualifierSet_Get") returned 0x70a37920 [0105.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Put", cchWideChar=16, lpMultiByteStr=0x5bddec0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Put\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 16 [0105.871] GetProcAddress (hModule=0x70a30000, lpProcName="QualifierSet_Put") returned 0x70a379b0 [0106.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Delete", cchWideChar=19, lpMultiByteStr=0x5bddebc, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Delete\x01\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 19 [0106.095] GetProcAddress (hModule=0x70a30000, lpProcName="QualifierSet_Delete") returned 0x70a378e0 [0106.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_GetNames", cchWideChar=21, lpMultiByteStr=0x5bddebc, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetNames5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 21 [0106.097] GetProcAddress (hModule=0x70a30000, lpProcName="QualifierSet_GetNames") returned 0x70a37950 [0106.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_BeginEnumeration", cchWideChar=29, lpMultiByteStr=0x5bddeb4, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_BeginEnumeration5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 29 [0106.121] GetProcAddress (hModule=0x70a30000, lpProcName="QualifierSet_BeginEnumeration") returned 0x70a378c0 [0106.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Next", cchWideChar=17, lpMultiByteStr=0x5bddec0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Next5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 17 [0106.123] GetProcAddress (hModule=0x70a30000, lpProcName="QualifierSet_Next") returned 0x70a37980 [0108.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_EndEnumeration", cchWideChar=27, lpMultiByteStr=0x5bddeb4, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_EndEnumeration\x01\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 27 [0108.061] GetProcAddress (hModule=0x70a30000, lpProcName="QualifierSet_EndEnumeration") returned 0x70a37900 [0108.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetCurrentApartmentType", cchWideChar=23, lpMultiByteStr=0x5bddeb8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentApartmentType\x01\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 23 [0108.064] GetProcAddress (hModule=0x70a30000, lpProcName="GetCurrentApartmentType") returned 0x70a372c0 [0108.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDemultiplexedStub", cchWideChar=20, lpMultiByteStr=0x5bddebc, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDemultiplexedStub\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 20 [0108.076] GetProcAddress (hModule=0x70a30000, lpProcName="GetDemultiplexedStub") returned 0x70a372e0 [0108.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateInstanceEnumWmi", cchWideChar=21, lpMultiByteStr=0x5bddebc, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateInstanceEnumWmi5ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 21 [0108.297] GetProcAddress (hModule=0x70a30000, lpProcName="CreateInstanceEnumWmi") returned 0x70a36f20 [0108.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateClassEnumWmi", cchWideChar=18, lpMultiByteStr=0x5bddec0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateClassEnumWmiÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 18 [0108.462] GetProcAddress (hModule=0x70a30000, lpProcName="CreateClassEnumWmi") returned 0x70a36e50 [0108.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecQueryWmi", cchWideChar=12, lpMultiByteStr=0x5bddec4, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecQueryWmi\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 12 [0108.463] GetProcAddress (hModule=0x70a30000, lpProcName="ExecQueryWmi") returned 0x70a371c0 [0108.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecNotificationQueryWmi", cchWideChar=24, lpMultiByteStr=0x5bddeb8, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecNotificationQueryWmi\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 24 [0108.639] GetProcAddress (hModule=0x70a30000, lpProcName="ExecNotificationQueryWmi") returned 0x70a370f0 [0108.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutInstanceWmi", cchWideChar=14, lpMultiByteStr=0x5bddec4, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutInstanceWmiÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 14 [0108.641] GetProcAddress (hModule=0x70a30000, lpProcName="PutInstanceWmi") returned 0x70a377c0 [0110.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutClassWmi", cchWideChar=11, lpMultiByteStr=0x5bddec4, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutClassWmi\x01\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 11 [0110.249] GetProcAddress (hModule=0x70a30000, lpProcName="PutClassWmi") returned 0x70a376f0 [0110.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CloneEnumWbemClassObject", cchWideChar=24, lpMultiByteStr=0x5bddeb8, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CloneEnumWbemClassObject\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 24 [0110.251] GetProcAddress (hModule=0x70a30000, lpProcName="CloneEnumWbemClassObject") returned 0x70a36c40 [0110.412] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConnectServerWmi", cchWideChar=16, lpMultiByteStr=0x5bddec0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConnectServerWmi\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 16 [0110.412] GetProcAddress (hModule=0x70a30000, lpProcName="ConnectServerWmi") returned 0x70a36d40 [0110.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetErrorInfo", cchWideChar=12, lpMultiByteStr=0x5bddec4, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetErrorInfo\x045ÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 12 [0110.584] GetProcAddress (hModule=0x70a30000, lpProcName="GetErrorInfo") returned 0x70a37330 [0110.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Initialize", cchWideChar=10, lpMultiByteStr=0x5bddec8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InitializeÉpBKþ%ðù°s á½\x05", lpUsedDefaultChar=0x0) returned 10 [0110.592] GetProcAddress (hModule=0x70a30000, lpProcName="Initialize") returned 0x70a375e0 [0110.803] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdde78 | out: phkResult=0x5bdde78*=0x648) returned 0x0 [0110.806] RegQueryValueExW (in: hKey=0x648, lpValueName="WMIDisableCOMSecurity", lpReserved=0x0, lpType=0x5bdde94, lpData=0x0, lpcbData=0x5bdde90*=0x0 | out: lpType=0x5bdde94*=0x0, lpData=0x0, lpcbData=0x5bdde90*=0x0) returned 0x2 [0110.806] RegCloseKey (hKey=0x648) returned 0x0 [0110.806] IComThreadingInfo:GetCurrentApartmentType (in: This=0x13dcc0c, pAptType=0x5bde710 | out: pAptType=0x5bde710*=1) returned 0x0 [0110.806] IUnknown:QueryInterface (in: This=0x13dcc0c, riid=0x300c904*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5bde714 | out: ppvObject=0x5bde714*=0x0) returned 0x80004002 [0110.807] IUnknown:Release (This=0x13dcc0c) returned 0x0 [0110.828] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x5bde364 | out: lpiid=0x5bde364) returned 0x0 [0110.830] CoGetClassObject (in: rclsid=0x144ff3c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5bde070 | out: ppv=0x5bde070*=0x1428de0) returned 0x0 [0113.068] WbemDefPath:IUnknown:QueryInterface (in: This=0x1428de0, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5bde28c | out: ppvObject=0x5bde28c*=0x0) returned 0x80004002 [0113.068] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1428de0, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde298 | out: ppvObject=0x5bde298*=0x142a9c8) returned 0x0 [0113.068] WbemDefPath:IUnknown:Release (This=0x1428de0) returned 0x0 [0113.068] WbemDefPath:IUnknown:QueryInterface (in: This=0x142a9c8, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bddebc | out: ppvObject=0x5bddebc*=0x142a9c8) returned 0x0 [0113.068] WbemDefPath:IUnknown:QueryInterface (in: This=0x142a9c8, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5bdde78 | out: ppvObject=0x5bdde78*=0x0) returned 0x80004002 [0113.068] WbemDefPath:IUnknown:QueryInterface (in: This=0x142a9c8, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x5bdda6c | out: ppvObject=0x5bdda6c*=0x0) returned 0x80004002 [0113.069] WbemDefPath:IUnknown:AddRef (This=0x142a9c8) returned 0x3 [0113.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x142a9c8, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x5bdd7cc | out: ppvObject=0x5bdd7cc*=0x0) returned 0x80004002 [0113.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x142a9c8, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x5bdd77c | out: ppvObject=0x5bdd77c*=0x0) returned 0x80004002 [0113.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x142a9c8, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdd788 | out: ppvObject=0x5bdd788*=0x1440ba0) returned 0x0 [0113.069] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1440ba0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5bdd790 | out: pCid=0x5bdd790*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0113.069] WbemDefPath:IUnknown:Release (This=0x1440ba0) returned 0x3 [0113.069] CoGetContextToken (in: pToken=0x5bdd7e8 | out: pToken=0x5bdd7e8) returned 0x0 [0113.069] CoGetContextToken (in: pToken=0x5bddbf0 | out: pToken=0x5bddbf0) returned 0x0 [0113.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x142a9c8, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bddc7c | out: ppvObject=0x5bddc7c*=0x0) returned 0x80004002 [0113.069] WbemDefPath:IUnknown:Release (This=0x142a9c8) returned 0x2 [0113.069] WbemDefPath:IUnknown:Release (This=0x142a9c8) returned 0x1 [0113.069] CoGetContextToken (in: pToken=0x5bde590 | out: pToken=0x5bde590) returned 0x0 [0113.070] CoGetContextToken (in: pToken=0x5bde4f0 | out: pToken=0x5bde4f0) returned 0x0 [0113.070] WbemDefPath:IUnknown:QueryInterface (in: This=0x142a9c8, riid=0x5bde5c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5bde5bc | out: ppvObject=0x5bde5bc*=0x142a9c8) returned 0x0 [0113.070] WbemDefPath:IUnknown:AddRef (This=0x142a9c8) returned 0x3 [0113.070] WbemDefPath:IUnknown:Release (This=0x142a9c8) returned 0x2 [0113.071] WbemDefPath:IWbemPath:SetText (This=0x142a9c8, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0113.072] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x142a9c8, puCount=0x5bdee44 | out: puCount=0x5bdee44*=0x2) returned 0x0 [0113.072] WbemDefPath:IWbemPath:GetText (in: This=0x142a9c8, lFlags=4, puBuffLength=0x5bdee40*=0x0, pszText=0x0 | out: puBuffLength=0x5bdee40*=0xf, pszText=0x0) returned 0x0 [0113.073] WbemDefPath:IWbemPath:GetText (in: This=0x142a9c8, lFlags=4, puBuffLength=0x5bdee40*=0xf, pszText="00000000000000" | out: puBuffLength=0x5bdee40*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0113.074] CoGetObjectContext (in: riid=0x300c91c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5bdedcc | out: ppv=0x5bdedcc*=0x13dcc0c) returned 0x0 [0113.074] IComThreadingInfo:GetCurrentApartmentType (in: This=0x13dcc0c, pAptType=0x5bdedc4 | out: pAptType=0x5bdedc4*=1) returned 0x0 [0113.074] IUnknown:QueryInterface (in: This=0x13dcc0c, riid=0x300c904*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5bdedc8 | out: ppvObject=0x5bdedc8*=0x0) returned 0x80004002 [0113.074] IUnknown:Release (This=0x13dcc0c) returned 0x0 [0113.074] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x5bdeccc | out: lpiid=0x5bdeccc) returned 0x0 [0113.075] CoGetClassObject (in: rclsid=0x145008c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5bde9d8 | out: ppv=0x5bde9d8*=0x1440c78) returned 0x0 [0113.455] WbemLocator:IUnknown:QueryInterface (in: This=0x1440c78, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5bdebf4 | out: ppvObject=0x5bdebf4*=0x0) returned 0x80004002 [0113.455] WbemLocator:IClassFactory:CreateInstance (in: This=0x1440c78, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdec00 | out: ppvObject=0x5bdec00*=0x1428ea0) returned 0x0 [0113.455] WbemLocator:IUnknown:Release (This=0x1440c78) returned 0x0 [0113.455] WbemLocator:IUnknown:QueryInterface (in: This=0x1428ea0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde824 | out: ppvObject=0x5bde824*=0x1428ea0) returned 0x0 [0113.455] WbemLocator:IUnknown:QueryInterface (in: This=0x1428ea0, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5bde7e0 | out: ppvObject=0x5bde7e0*=0x0) returned 0x80004002 [0113.455] WbemLocator:IUnknown:QueryInterface (in: This=0x1428ea0, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x5bde3d4 | out: ppvObject=0x5bde3d4*=0x0) returned 0x80004002 [0113.456] WbemLocator:IUnknown:AddRef (This=0x1428ea0) returned 0x3 [0113.456] WbemLocator:IUnknown:QueryInterface (in: This=0x1428ea0, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x5bde134 | out: ppvObject=0x5bde134*=0x0) returned 0x80004002 [0113.456] WbemLocator:IUnknown:QueryInterface (in: This=0x1428ea0, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x5bde0e4 | out: ppvObject=0x5bde0e4*=0x0) returned 0x80004002 [0113.456] WbemLocator:IUnknown:QueryInterface (in: This=0x1428ea0, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde0f0 | out: ppvObject=0x5bde0f0*=0x0) returned 0x80004002 [0113.456] CoGetContextToken (in: pToken=0x5bde150 | out: pToken=0x5bde150) returned 0x0 [0113.491] CoGetObjectContext (in: riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1440b44 | out: ppv=0x1440b44*=0x13dcc00) returned 0x0 [0113.491] CoGetContextToken (in: pToken=0x5bde558 | out: pToken=0x5bde558) returned 0x0 [0113.491] WbemLocator:IUnknown:QueryInterface (in: This=0x1428ea0, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde5e4 | out: ppvObject=0x5bde5e4*=0x0) returned 0x80004002 [0113.491] WbemLocator:IUnknown:Release (This=0x1428ea0) returned 0x2 [0113.491] WbemLocator:IUnknown:Release (This=0x1428ea0) returned 0x1 [0113.491] CoGetContextToken (in: pToken=0x5bdebe0 | out: pToken=0x5bdebe0) returned 0x0 [0113.492] CoGetContextToken (in: pToken=0x5bdeb40 | out: pToken=0x5bdeb40) returned 0x0 [0113.492] WbemLocator:IUnknown:QueryInterface (in: This=0x1428ea0, riid=0x5bdec10*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x5bdec0c | out: ppvObject=0x5bdec0c*=0x1428ea0) returned 0x0 [0113.492] WbemLocator:IUnknown:AddRef (This=0x1428ea0) returned 0x3 [0113.492] WbemLocator:IUnknown:Release (This=0x1428ea0) returned 0x2 [0113.494] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x142a9c8, puCount=0x5bdeda8 | out: puCount=0x5bdeda8*=0x2) returned 0x0 [0113.494] WbemDefPath:IWbemPath:GetText (in: This=0x142a9c8, lFlags=8, puBuffLength=0x5bdeda4*=0x0, pszText=0x0 | out: puBuffLength=0x5bdeda4*=0xf, pszText=0x0) returned 0x0 [0113.494] WbemDefPath:IWbemPath:GetText (in: This=0x142a9c8, lFlags=8, puBuffLength=0x5bdeda4*=0xf, pszText="00000000000000" | out: puBuffLength=0x5bdeda4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0113.494] CoCreateInstance (in: rclsid=0x70a336ac*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x70a3370c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x5bdec60 | out: ppv=0x5bdec60*=0x1428ec0) returned 0x0 [0113.494] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1428ec0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x5bdecf4 | out: ppNamespace=0x5bdecf4*=0x1439a60) returned 0x0 [0118.480] WbemLocator:IUnknown:QueryInterface (in: This=0x1439a60, riid=0x70a3352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdeb88 | out: ppvObject=0x5bdeb88*=0x1458928) returned 0x0 [0118.481] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1458928, pProxy=0x1439a60, pAuthnSvc=0x5bdebd8, pAuthzSvc=0x5bdebd4, pServerPrincName=0x5bdebcc, pAuthnLevel=0x5bdebd0, pImpLevel=0x5bdebc0, pAuthInfo=0x5bdebc4, pCapabilites=0x5bdebc8 | out: pAuthnSvc=0x5bdebd8*=0xa, pAuthzSvc=0x5bdebd4*=0x0, pServerPrincName=0x5bdebcc, pAuthnLevel=0x5bdebd0*=0x6, pImpLevel=0x5bdebc0*=0x2, pAuthInfo=0x5bdebc4, pCapabilites=0x5bdebc8*=0x1) returned 0x0 [0118.481] WbemLocator:IUnknown:Release (This=0x1458928) returned 0x1 [0118.481] WbemLocator:IUnknown:QueryInterface (in: This=0x1439a60, riid=0x70a3351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdeb7c | out: ppvObject=0x5bdeb7c*=0x145894c) returned 0x0 [0118.481] WbemLocator:IUnknown:QueryInterface (in: This=0x1439a60, riid=0x70a3352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdeb68 | out: ppvObject=0x5bdeb68*=0x1458928) returned 0x0 [0118.481] WbemLocator:IClientSecurity:SetBlanket (This=0x1458928, pProxy=0x1439a60, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0118.481] WbemLocator:IUnknown:Release (This=0x1458928) returned 0x2 [0118.481] WbemLocator:IUnknown:Release (This=0x145894c) returned 0x1 [0118.481] CoTaskMemFree (pv=0x14584e8) [0118.481] WbemLocator:IUnknown:AddRef (This=0x1439a60) returned 0x2 [0118.482] WbemLocator:IUnknown:Release (This=0x1428ec0) returned 0x0 [0118.482] CoGetContextToken (in: pToken=0x5bde0a8 | out: pToken=0x5bde0a8) returned 0x0 [0118.482] CoGetContextToken (in: pToken=0x5bde4b0 | out: pToken=0x5bde4b0) returned 0x0 [0118.483] WbemLocator:IUnknown:QueryInterface (in: This=0x1439a60, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde448 | out: ppvObject=0x5bde448*=0x1458930) returned 0x0 [0118.483] WbemLocator:IRpcOptions:Query (in: This=0x1458930, pPrx=0x144daf0, dwProperty=2, pdwValue=0x5bde548 | out: pdwValue=0x5bde548) returned 0x80004002 [0118.483] WbemLocator:IUnknown:Release (This=0x1458930) returned 0x2 [0118.483] CoGetContextToken (in: pToken=0x5bdea88 | out: pToken=0x5bdea88) returned 0x0 [0118.483] CoGetContextToken (in: pToken=0x5bde9e8 | out: pToken=0x5bde9e8) returned 0x0 [0118.483] WbemLocator:IUnknown:QueryInterface (in: This=0x1439a60, riid=0x5bdeab8*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5bde980 | out: ppvObject=0x5bde980*=0x1439a60) returned 0x0 [0118.484] WbemLocator:IUnknown:Release (This=0x1439a60) returned 0x2 [0118.489] SysStringLen (param_1=0x0) returned 0x0 [0118.490] CoGetContextToken (in: pToken=0x5bdeba8 | out: pToken=0x5bdeba8) returned 0x0 [0118.490] IWbemServices:ExecQuery (in: This=0x1439a60, strQueryLanguage="WQL", strQuery="select * from Win32_Processor", lFlags=16, pCtx=0x0, ppEnum=0x5bdedb4 | out: ppEnum=0x5bdedb4*=0x14053e0) returned 0x0 [0118.505] IUnknown:QueryInterface (in: This=0x14053e0, riid=0x70a3352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdec10 | out: ppvObject=0x5bdec10*=0x14053e4) returned 0x0 [0118.505] IClientSecurity:QueryBlanket (in: This=0x14053e4, pProxy=0x14053e0, pAuthnSvc=0x5bdec60, pAuthzSvc=0x5bdec5c, pServerPrincName=0x5bdec54, pAuthnLevel=0x5bdec58, pImpLevel=0x5bdec48, pAuthInfo=0x5bdec4c, pCapabilites=0x5bdec50 | out: pAuthnSvc=0x5bdec60*=0xa, pAuthzSvc=0x5bdec5c*=0x0, pServerPrincName=0x5bdec54, pAuthnLevel=0x5bdec58*=0x6, pImpLevel=0x5bdec48*=0x2, pAuthInfo=0x5bdec4c, pCapabilites=0x5bdec50*=0x1) returned 0x0 [0118.505] IUnknown:Release (This=0x14053e4) returned 0x1 [0118.505] IUnknown:QueryInterface (in: This=0x14053e0, riid=0x70a3351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdec04 | out: ppvObject=0x5bdec04*=0x14449fc) returned 0x0 [0118.505] IUnknown:QueryInterface (in: This=0x14053e0, riid=0x70a3352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdebf0 | out: ppvObject=0x5bdebf0*=0x14053e4) returned 0x0 [0118.506] IClientSecurity:SetBlanket (This=0x14053e4, pProxy=0x14053e0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0118.518] IUnknown:Release (This=0x14053e4) returned 0x2 [0118.518] WbemLocator:IUnknown:Release (This=0x14449fc) returned 0x1 [0118.518] CoTaskMemFree (pv=0x1458308) [0118.518] IUnknown:AddRef (This=0x14053e0) returned 0x2 [0118.520] CoGetContextToken (in: pToken=0x5bde128 | out: pToken=0x5bde128) returned 0x0 [0118.520] CoGetContextToken (in: pToken=0x5bde530 | out: pToken=0x5bde530) returned 0x0 [0118.520] IUnknown:QueryInterface (in: This=0x14053e0, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde4c8 | out: ppvObject=0x5bde4c8*=0x14449e0) returned 0x0 [0118.521] WbemLocator:IRpcOptions:Query (in: This=0x14449e0, pPrx=0x144da60, dwProperty=2, pdwValue=0x5bde5c8 | out: pdwValue=0x5bde5c8) returned 0x80004002 [0118.521] WbemLocator:IUnknown:Release (This=0x14449e0) returned 0x2 [0118.521] CoGetContextToken (in: pToken=0x5bdeb10 | out: pToken=0x5bdeb10) returned 0x0 [0118.521] CoGetContextToken (in: pToken=0x5bdea70 | out: pToken=0x5bdea70) returned 0x0 [0118.521] IUnknown:QueryInterface (in: This=0x14053e0, riid=0x5bdeb40*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5bdea08 | out: ppvObject=0x5bdea08*=0x14053e0) returned 0x0 [0118.521] IUnknown:Release (This=0x14053e0) returned 0x2 [0118.521] SysStringLen (param_1=0x0) returned 0x0 [0118.521] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x142a9c8, puCount=0x5bdee00 | out: puCount=0x5bdee00*=0x2) returned 0x0 [0118.521] WbemDefPath:IWbemPath:GetText (in: This=0x142a9c8, lFlags=4, puBuffLength=0x5bdedfc*=0x0, pszText=0x0 | out: puBuffLength=0x5bdedfc*=0xf, pszText=0x0) returned 0x0 [0118.521] WbemDefPath:IWbemPath:GetText (in: This=0x142a9c8, lFlags=4, puBuffLength=0x5bdedfc*=0xf, pszText="00000000000000" | out: puBuffLength=0x5bdedfc*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0118.711] CoGetContextToken (in: pToken=0x5bdebf8 | out: pToken=0x5bdebf8) returned 0x0 [0118.711] IEnumWbemClassObject:Clone (in: This=0x14053e0, ppEnum=0x5bdedb4 | out: ppEnum=0x5bdedb4*=0x14061f0) returned 0x0 [0118.712] IUnknown:QueryInterface (in: This=0x14061f0, riid=0x70a3352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdec70 | out: ppvObject=0x5bdec70*=0x14061f4) returned 0x0 [0118.713] IClientSecurity:QueryBlanket (in: This=0x14061f4, pProxy=0x14061f0, pAuthnSvc=0x5bdecc0, pAuthzSvc=0x5bdecbc, pServerPrincName=0x5bdecb4, pAuthnLevel=0x5bdecb8, pImpLevel=0x5bdeca8, pAuthInfo=0x5bdecac, pCapabilites=0x5bdecb0 | out: pAuthnSvc=0x5bdecc0*=0xa, pAuthzSvc=0x5bdecbc*=0x0, pServerPrincName=0x5bdecb4, pAuthnLevel=0x5bdecb8*=0x6, pImpLevel=0x5bdeca8*=0x2, pAuthInfo=0x5bdecac, pCapabilites=0x5bdecb0*=0x1) returned 0x0 [0118.713] IUnknown:Release (This=0x14061f4) returned 0x1 [0118.713] IUnknown:QueryInterface (in: This=0x14061f0, riid=0x70a3351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdec64 | out: ppvObject=0x5bdec64*=0x145a06c) returned 0x0 [0118.713] IUnknown:QueryInterface (in: This=0x14061f0, riid=0x70a3352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdec50 | out: ppvObject=0x5bdec50*=0x14061f4) returned 0x0 [0118.713] IClientSecurity:SetBlanket (This=0x14061f4, pProxy=0x14061f0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0118.715] IUnknown:Release (This=0x14061f4) returned 0x2 [0118.716] WbemLocator:IUnknown:Release (This=0x145a06c) returned 0x1 [0118.716] CoTaskMemFree (pv=0x14582d8) [0118.716] IUnknown:AddRef (This=0x14061f0) returned 0x2 [0118.717] CoGetContextToken (in: pToken=0x5bde178 | out: pToken=0x5bde178) returned 0x0 [0118.717] CoGetContextToken (in: pToken=0x5bde580 | out: pToken=0x5bde580) returned 0x0 [0118.717] IUnknown:QueryInterface (in: This=0x14061f0, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde518 | out: ppvObject=0x5bde518*=0x145a050) returned 0x0 [0118.717] WbemLocator:IRpcOptions:Query (in: This=0x145a050, pPrx=0x144db20, dwProperty=2, pdwValue=0x5bde618 | out: pdwValue=0x5bde618) returned 0x80004002 [0118.717] WbemLocator:IUnknown:Release (This=0x145a050) returned 0x2 [0118.717] CoGetContextToken (in: pToken=0x5bdeb60 | out: pToken=0x5bdeb60) returned 0x0 [0118.717] CoGetContextToken (in: pToken=0x5bdeac0 | out: pToken=0x5bdeac0) returned 0x0 [0118.717] IUnknown:QueryInterface (in: This=0x14061f0, riid=0x5bdeb90*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5bdea58 | out: ppvObject=0x5bdea58*=0x14061f0) returned 0x0 [0118.717] IUnknown:Release (This=0x14061f0) returned 0x2 [0118.718] SysStringLen (param_1=0x0) returned 0x0 [0118.718] IEnumWbemClassObject:Reset (This=0x14061f0) returned 0x0 [0118.886] CoTaskMemAlloc (cb=0x4) returned 0x145ed60 [0118.886] IEnumWbemClassObject:Next (in: This=0x14061f0, lTimeout=-1, uCount=0x1, apObjects=0x145ed60, puReturned=0x30cb530 | out: apObjects=0x145ed60*=0x145c810, puReturned=0x30cb530*=0x1) returned 0x0 [0127.753] IUnknown:QueryInterface (in: This=0x145c810, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde410 | out: ppvObject=0x5bde410*=0x145c810) returned 0x0 [0127.753] IUnknown:QueryInterface (in: This=0x145c810, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5bde3cc | out: ppvObject=0x5bde3cc*=0x0) returned 0x80004002 [0127.753] IUnknown:QueryInterface (in: This=0x145c810, riid=0x73bf03bc*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5bde1ec | out: ppvObject=0x5bde1ec*=0x0) returned 0x80004002 [0127.753] IUnknown:QueryInterface (in: This=0x145c810, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x5bddfc4 | out: ppvObject=0x5bddfc4*=0x0) returned 0x80004002 [0127.754] IUnknown:AddRef (This=0x145c810) returned 0x3 [0127.754] IUnknown:QueryInterface (in: This=0x145c810, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x5bddd24 | out: ppvObject=0x5bddd24*=0x0) returned 0x80004002 [0127.754] IUnknown:QueryInterface (in: This=0x145c810, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x5bddcd4 | out: ppvObject=0x5bddcd4*=0x0) returned 0x80004002 [0127.754] IUnknown:QueryInterface (in: This=0x145c810, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bddce0 | out: ppvObject=0x5bddce0*=0x145c814) returned 0x0 [0127.754] IMarshal:GetUnmarshalClass (in: This=0x145c814, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5bddce8 | out: pCid=0x5bddce8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0127.754] IUnknown:Release (This=0x145c814) returned 0x3 [0127.754] CoGetContextToken (in: pToken=0x5bddd40 | out: pToken=0x5bddd40) returned 0x0 [0127.754] CoGetContextToken (in: pToken=0x5bde148 | out: pToken=0x5bde148) returned 0x0 [0127.754] IUnknown:QueryInterface (in: This=0x145c810, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde1d4 | out: ppvObject=0x5bde1d4*=0x0) returned 0x80004002 [0127.754] IUnknown:Release (This=0x145c810) returned 0x2 [0127.754] CoGetContextToken (in: pToken=0x5bde720 | out: pToken=0x5bde720) returned 0x0 [0127.754] CoGetContextToken (in: pToken=0x5bde680 | out: pToken=0x5bde680) returned 0x0 [0127.754] IUnknown:QueryInterface (in: This=0x145c810, riid=0x5bde750*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x5bde74c | out: ppvObject=0x5bde74c*=0x145c810) returned 0x0 [0127.754] IUnknown:AddRef (This=0x145c810) returned 0x4 [0127.754] IUnknown:Release (This=0x145c810) returned 0x3 [0127.754] IUnknown:Release (This=0x145c810) returned 0x2 [0127.755] CoTaskMemFree (pv=0x145ed60) [0127.755] CoGetContextToken (in: pToken=0x5bdea98 | out: pToken=0x5bdea98) returned 0x0 [0127.755] IUnknown:AddRef (This=0x145c810) returned 0x3 [0127.757] IWbemClassObject:Get (in: This=0x145c810, wszName="__GENUS", lFlags=0, pVal=0x5bdeda4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5bdee24*=0, plFlavor=0x5bdee20*=0 | out: pVal=0x5bdeda4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x5bdee24*=3, plFlavor=0x5bdee20*=64) returned 0x0 [0127.839] IWbemClassObject:Get (in: This=0x145c810, wszName="__PATH", lFlags=0, pVal=0x5bded88*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5bdee0c*=0, plFlavor=0x5bdee08*=0 | out: pVal=0x5bded88*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\NQDPDE\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x5bdee0c*=8, plFlavor=0x5bdee08*=64) returned 0x0 [0127.841] SysStringByteLen (bstr="\\\\NQDPDE\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66 [0127.841] SysStringByteLen (bstr="\\\\NQDPDE\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66 [0127.842] CoGetObjectContext (in: riid=0x300c91c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5bdedb4 | out: ppv=0x5bdedb4*=0x13dcc0c) returned 0x0 [0127.842] IComThreadingInfo:GetCurrentApartmentType (in: This=0x13dcc0c, pAptType=0x5bdedac | out: pAptType=0x5bdedac*=1) returned 0x0 [0127.842] IUnknown:QueryInterface (in: This=0x13dcc0c, riid=0x300c904*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5bdedb0 | out: ppvObject=0x5bdedb0*=0x0) returned 0x80004002 [0127.842] IUnknown:Release (This=0x13dcc0c) returned 0x1 [0127.848] CoGetClassObject (in: rclsid=0x144ff3c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5bde710 | out: ppv=0x5bde710*=0x145ee60) returned 0x0 [0127.849] WbemDefPath:IUnknown:QueryInterface (in: This=0x145ee60, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5bde92c | out: ppvObject=0x5bde92c*=0x0) returned 0x80004002 [0127.849] WbemDefPath:IClassFactory:CreateInstance (in: This=0x145ee60, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde938 | out: ppvObject=0x5bde938*=0x14591a8) returned 0x0 [0127.849] WbemDefPath:IUnknown:Release (This=0x145ee60) returned 0x0 [0127.849] WbemDefPath:IUnknown:QueryInterface (in: This=0x14591a8, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde55c | out: ppvObject=0x5bde55c*=0x14591a8) returned 0x0 [0127.849] WbemDefPath:IUnknown:QueryInterface (in: This=0x14591a8, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5bde518 | out: ppvObject=0x5bde518*=0x0) returned 0x80004002 [0127.849] WbemDefPath:IUnknown:QueryInterface (in: This=0x14591a8, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x5bde10c | out: ppvObject=0x5bde10c*=0x0) returned 0x80004002 [0127.849] WbemDefPath:IUnknown:AddRef (This=0x14591a8) returned 0x3 [0127.849] WbemDefPath:IUnknown:QueryInterface (in: This=0x14591a8, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x5bdde6c | out: ppvObject=0x5bdde6c*=0x0) returned 0x80004002 [0127.849] WbemDefPath:IUnknown:QueryInterface (in: This=0x14591a8, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x5bdde1c | out: ppvObject=0x5bdde1c*=0x0) returned 0x80004002 [0127.849] WbemDefPath:IUnknown:QueryInterface (in: This=0x14591a8, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdde28 | out: ppvObject=0x5bdde28*=0x144d7d8) returned 0x0 [0127.849] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x144d7d8, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5bdde30 | out: pCid=0x5bdde30*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.849] WbemDefPath:IUnknown:Release (This=0x144d7d8) returned 0x3 [0127.849] CoGetContextToken (in: pToken=0x5bdde88 | out: pToken=0x5bdde88) returned 0x0 [0127.850] CoGetContextToken (in: pToken=0x5bde290 | out: pToken=0x5bde290) returned 0x0 [0127.850] WbemDefPath:IUnknown:QueryInterface (in: This=0x14591a8, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde31c | out: ppvObject=0x5bde31c*=0x0) returned 0x80004002 [0127.850] WbemDefPath:IUnknown:Release (This=0x14591a8) returned 0x2 [0127.850] WbemDefPath:IUnknown:Release (This=0x14591a8) returned 0x1 [0127.850] CoGetContextToken (in: pToken=0x5bdec30 | out: pToken=0x5bdec30) returned 0x0 [0127.850] CoGetContextToken (in: pToken=0x5bdeb90 | out: pToken=0x5bdeb90) returned 0x0 [0127.850] WbemDefPath:IUnknown:QueryInterface (in: This=0x14591a8, riid=0x5bdec60*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5bdec5c | out: ppvObject=0x5bdec5c*=0x14591a8) returned 0x0 [0127.850] WbemDefPath:IUnknown:AddRef (This=0x14591a8) returned 0x3 [0127.850] WbemDefPath:IUnknown:Release (This=0x14591a8) returned 0x2 [0127.850] WbemDefPath:IWbemPath:SetText (This=0x14591a8, uMode=0x4, pszPath="\\\\NQDPDE\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0 [0127.850] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x142a9c8, puCount=0x5bdede0 | out: puCount=0x5bdede0*=0x2) returned 0x0 [0127.850] WbemDefPath:IWbemPath:GetText (in: This=0x142a9c8, lFlags=4, puBuffLength=0x5bdeddc*=0x0, pszText=0x0 | out: puBuffLength=0x5bdeddc*=0xf, pszText=0x0) returned 0x0 [0127.850] WbemDefPath:IWbemPath:GetText (in: This=0x142a9c8, lFlags=4, puBuffLength=0x5bdeddc*=0xf, pszText="00000000000000" | out: puBuffLength=0x5bdeddc*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.851] CoGetContextToken (in: pToken=0x5bdecd0 | out: pToken=0x5bdecd0) returned 0x0 [0127.851] IUnknown:Release (This=0x14061f0) returned 0x1 [0127.851] IUnknown:Release (This=0x14061f0) returned 0x0 [0127.859] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x142a9c8, puCount=0x5bdee04 | out: puCount=0x5bdee04*=0x2) returned 0x0 [0127.859] WbemDefPath:IWbemPath:GetText (in: This=0x142a9c8, lFlags=4, puBuffLength=0x5bdee00*=0x0, pszText=0x0 | out: puBuffLength=0x5bdee00*=0xf, pszText=0x0) returned 0x0 [0127.859] WbemDefPath:IWbemPath:GetText (in: This=0x142a9c8, lFlags=4, puBuffLength=0x5bdee00*=0xf, pszText="00000000000000" | out: puBuffLength=0x5bdee00*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.859] IWbemClassObject:Get (in: This=0x145c810, wszName="Name", lFlags=0, pVal=0x5bdee00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x30cd894*=0, plFlavor=0x30cd898*=0 | out: pVal=0x5bdee00*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x30cd894*=8, plFlavor=0x30cd898*=0) returned 0x0 [0127.859] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0127.859] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0127.859] IWbemClassObject:Get (in: This=0x145c810, wszName="Name", lFlags=0, pVal=0x5bdee08*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x30cd894*=8, plFlavor=0x30cd898*=0 | out: pVal=0x5bdee08*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x30cd894*=8, plFlavor=0x30cd898*=0) returned 0x0 [0127.859] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0127.859] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0128.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bded64) returned 1 [0128.364] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x5bde818, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local", lpFilePart=0x0) returned 0x1d [0128.365] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\*", lpFindFileData=0x5bdea8c | out: lpFindFileData=0x5bdea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb6f6a4d1, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb6f6a4d1, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374b8 [0128.366] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb6f6a4d1, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb6f6a4d1, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.366] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveSync", cAlternateFileName="ACTIVE~1")) returned 1 [0128.366] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0128.366] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0128.367] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEF", cAlternateFileName="")) returned 1 [0128.367] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0128.367] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectedDevicesPlatform", cAlternateFileName="CONNEC~1")) returned 1 [0128.367] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a3bd622, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0128.367] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0128.367] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4a3b706e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4a3b706e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd2e85042, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x13441, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0128.368] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0128.368] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1 [0128.368] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0128.368] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0128.368] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf9e1b08, ftCreationTime.dwHighDateTime=0x1d32734, ftLastAccessTime.dwLowDateTime=0xd2f40fba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdf9e1b08, ftLastWriteTime.dwHighDateTime=0x1d32734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeerDistRepub", cAlternateFileName="PEERDI~1")) returned 1 [0128.368] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3e09841, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd2f421af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe3e09841, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publishers", cAlternateFileName="PUBLIS~1")) returned 1 [0128.369] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6f6a4d1, ftCreationTime.dwHighDateTime=0x1d5d815, ftLastAccessTime.dwLowDateTime=0xb6f6a4d1, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb6f6a4d1, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x1db5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resmon.ResmonCfg", cAlternateFileName="RESMON~1.RES")) returned 1 [0128.369] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0128.369] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0128.369] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TileDataLayer", cAlternateFileName="TILEDA~1")) returned 1 [0128.369] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0128.370] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0128.370] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x5bdea98 | out: lpFindFileData=0x5bdea98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.370] FindClose (in: hFindFile=0x14374b8 | out: hFindFile=0x14374b8) returned 1 [0128.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bded20) returned 1 [0128.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bded2c) returned 1 [0128.548] CoTaskMemAlloc (cb=0x20c) returned 0x14465c0 [0128.548] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x14465c0 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x0 [0128.548] CoTaskMemFree (pv=0x14465c0) [0128.548] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x5bdd0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0128.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x5bde908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x2f [0128.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdedb8) returned 1 [0128.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox"), fInfoLevelId=0x0, lpFileInformation=0x5bdee34 | out: lpFileInformation=0x5bdee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0128.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdedb4) returned 1 [0128.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Waterfox", nBufferLength=0x105, lpBuffer=0x5bde908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Waterfox", lpFilePart=0x0) returned 0x28 [0128.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdedb8) returned 1 [0128.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Waterfox" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\waterfox"), fInfoLevelId=0x0, lpFileInformation=0x5bdee34 | out: lpFileInformation=0x5bdee34*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0128.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdedb4) returned 1 [0128.631] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\K-Meleon", nBufferLength=0x105, lpBuffer=0x5bde908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\K-Meleon", lpFilePart=0x0) returned 0x28 [0128.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdedb8) returned 1 [0128.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\K-Meleon" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\k-meleon"), fInfoLevelId=0x0, lpFileInformation=0x5bdee34 | out: lpFileInformation=0x5bdee34*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0128.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdedb4) returned 1 [0128.631] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Thunderbird", nBufferLength=0x105, lpBuffer=0x5bde908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Thunderbird", lpFilePart=0x0) returned 0x2b [0128.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdedb8) returned 1 [0128.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Thunderbird" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\thunderbird"), fInfoLevelId=0x0, lpFileInformation=0x5bdee34 | out: lpFileInformation=0x5bdee34*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0128.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdedb4) returned 1 [0128.632] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Comodo\\IceDragon", nBufferLength=0x105, lpBuffer=0x5bde908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Comodo\\IceDragon", lpFilePart=0x0) returned 0x30 [0128.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdedb8) returned 1 [0128.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Comodo\\IceDragon" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\comodo\\icedragon"), fInfoLevelId=0x0, lpFileInformation=0x5bdee34 | out: lpFileInformation=0x5bdee34*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0128.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdedb4) returned 1 [0128.632] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\8pecxstudios\\Cyberfox", nBufferLength=0x105, lpBuffer=0x5bde908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\8pecxstudios\\Cyberfox", lpFilePart=0x0) returned 0x35 [0128.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdedb8) returned 1 [0128.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\8pecxstudios\\Cyberfox" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\8pecxstudios\\cyberfox"), fInfoLevelId=0x0, lpFileInformation=0x5bdee34 | out: lpFileInformation=0x5bdee34*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0128.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdedb4) returned 1 [0128.633] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw", nBufferLength=0x105, lpBuffer=0x5bde908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw", lpFilePart=0x0) returned 0x3d [0128.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdedb8) returned 1 [0128.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\netgate technologies\\blackhaw"), fInfoLevelId=0x0, lpFileInformation=0x5bdee34 | out: lpFileInformation=0x5bdee34*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0128.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdedb4) returned 1 [0128.633] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Moonchild Productions\\Pale Moon", nBufferLength=0x105, lpBuffer=0x5bde908, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Moonchild Productions\\Pale Moon", lpFilePart=0x0) returned 0x3f [0128.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdedb8) returned 1 [0128.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Moonchild Productions\\Pale Moon" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\moonchild productions\\pale moon"), fInfoLevelId=0x0, lpFileInformation=0x5bdee34 | out: lpFileInformation=0x5bdee34*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0128.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdedb4) returned 1 [0128.683] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x5bde920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x3d [0128.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdedd0) returned 1 [0128.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default"), fInfoLevelId=0x0, lpFileInformation=0x5bdee4c | out: lpFileInformation=0x5bdee4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0128.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdedcc) returned 1 [0161.229] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Cookies.txt", nBufferLength=0x105, lpBuffer=0x5bde7cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Cookies.txt", lpFilePart=0x0) returned 0x70 [0161.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bded10) returned 1 [0161.229] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Cookies.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\cookies.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0161.230] GetFileType (hFile=0x63c) returned 0x1 [0161.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bded0c) returned 1 [0161.230] GetFileType (hFile=0x63c) returned 0x1 [0161.230] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5bdece4*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x5bdece4*=0) returned 0x0 [0161.231] WriteFile (in: hFile=0x63c, lpBuffer=0x3048c78*, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0x5bded9c, lpOverlapped=0x0 | out: lpBuffer=0x3048c78*, lpNumberOfBytesWritten=0x5bded9c*=0x4f, lpOverlapped=0x0) returned 1 [0161.232] CloseHandle (hObject=0x63c) returned 1 [0161.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdedc8) returned 1 [0161.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\NordVPN", nBufferLength=0x105, lpBuffer=0x5bde87c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\NordVPN", lpFilePart=0x0) returned 0x25 [0161.684] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\NordVPN\\*", lpFindFileData=0x5bdeaf0 | out: lpFindFileData=0x5bdeaf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0161.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bded8c) returned 1 [0161.697] CoTaskMemAlloc (cb=0x20c) returned 0x14474d8 [0161.697] SHGetFolderPathW (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x14474d8 | out: pszPath="C:\\ProgramData") returned 0x0 [0161.703] CoTaskMemFree (pv=0x14474d8) [0161.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x5bde85c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0161.704] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Privax\\HMA! Pro VPN\\license.hmavpn", nBufferLength=0x105, lpBuffer=0x5bde8f4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Privax\\HMA! Pro VPN\\license.hmavpn", lpFilePart=0x0) returned 0x31 [0161.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdeda8) returned 1 [0161.704] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Privax\\HMA! Pro VPN\\license.hmavpn" (normalized: "c:\\programdata\\privax\\hma! pro vpn\\license.hmavpn"), fInfoLevelId=0x0, lpFileInformation=0x5bdee24 | out: lpFileInformation=0x5bdee24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0161.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdeda4) returned 1 [0161.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ProtonVPN", nBufferLength=0x105, lpBuffer=0x5bde8dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ProtonVPN", lpFilePart=0x0) returned 0x27 [0161.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bded8c) returned 1 [0161.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ProtonVPN" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\protonvpn"), fInfoLevelId=0x0, lpFileInformation=0x5bdee08 | out: lpFileInformation=0x5bdee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0161.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bded88) returned 1 [0161.942] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\FileZilla\\", nBufferLength=0x105, lpBuffer=0x5bde8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\FileZilla\\", lpFilePart=0x0) returned 0x2a [0161.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bded84) returned 1 [0161.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\FileZilla\\" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\filezilla"), fInfoLevelId=0x0, lpFileInformation=0x5bdee00 | out: lpFileInformation=0x5bdee00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0161.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bded80) returned 1 [0162.005] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\GHISLER\\", nBufferLength=0x105, lpBuffer=0x5bde8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\GHISLER\\", lpFilePart=0x0) returned 0x28 [0162.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdeda0) returned 1 [0162.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\GHISLER\\" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ghisler"), fInfoLevelId=0x0, lpFileInformation=0x5bdee1c | out: lpFileInformation=0x5bdee1c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0162.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bded9c) returned 1 [0162.006] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\GHISLER\\", nBufferLength=0x105, lpBuffer=0x5bde8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\GHISLER\\", lpFilePart=0x0) returned 0x28 [0162.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdee10) returned 1 [0162.006] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\GHISLER\\", nBufferLength=0x105, lpBuffer=0x5bde8c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\GHISLER\\", lpFilePart=0x0) returned 0x28 [0162.006] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\GHISLER\\*", lpFindFileData=0x5bdeb38 | out: lpFindFileData=0x5bdeb38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0162.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdedd4) returned 1 [0162.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mega Limited\\MEGAsync\\", nBufferLength=0x105, lpBuffer=0x5bde8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mega Limited\\MEGAsync\\", lpFilePart=0x0) returned 0x34 [0162.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdeda8) returned 1 [0162.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mega Limited\\MEGAsync\\" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mega limited\\megasync"), fInfoLevelId=0x0, lpFileInformation=0x5bdee24 | out: lpFileInformation=0x5bdee24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0162.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdeda4) returned 1 [0162.202] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\uTorrent\\", nBufferLength=0x105, lpBuffer=0x5bde8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\uTorrent\\", lpFilePart=0x0) returned 0x29 [0162.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdeda4) returned 1 [0162.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\uTorrent\\" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\utorrent"), fInfoLevelId=0x0, lpFileInformation=0x5bdee20 | out: lpFileInformation=0x5bdee20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0162.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdeda0) returned 1 [0162.202] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\qBittorrent\\BT_backup\\", nBufferLength=0x105, lpBuffer=0x5bde8f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\qBittorrent\\BT_backup\\", lpFilePart=0x0) returned 0x34 [0162.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdeda4) returned 1 [0162.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\qBittorrent\\BT_backup\\" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\qbittorrent\\bt_backup"), fInfoLevelId=0x0, lpFileInformation=0x5bdee20 | out: lpFileInformation=0x5bdee20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0162.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdeda0) returned 1 [0162.405] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedf8 | out: phkResult=0x5bdedf8*=0x0) returned 0x2 [0162.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Ubisoft Game Launcher", nBufferLength=0x105, lpBuffer=0x5bde8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Ubisoft Game Launcher", lpFilePart=0x0) returned 0x33 [0162.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdeda8) returned 1 [0162.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Ubisoft Game Launcher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\ubisoft game launcher"), fInfoLevelId=0x0, lpFileInformation=0x5bdee24 | out: lpFileInformation=0x5bdee24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0162.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdeda4) returned 1 [0162.473] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\.minecraft", nBufferLength=0x105, lpBuffer=0x5bde904, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\.minecraft", lpFilePart=0x0) returned 0x2a [0162.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdedb4) returned 1 [0162.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\.minecraft" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\.minecraft"), fInfoLevelId=0x0, lpFileInformation=0x5bdee30 | out: lpFileInformation=0x5bdee30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0162.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdedb0) returned 1 [0162.881] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0162.884] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0162.887] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0162.889] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0162.891] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0162.894] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0162.896] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0162.897] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0162.899] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0162.901] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.327] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.330] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.332] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.333] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.335] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.337] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.339] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.368] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.376] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.378] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.381] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.383] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.386] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.388] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.391] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.393] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.395] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.398] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0163.400] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedd4 | out: phkResult=0x5bdedd4*=0x0) returned 0x2 [0164.162] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.163] RegQueryValueExW (in: hKey=0x514, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.163] RegCloseKey (hKey=0x514) returned 0x0 [0164.164] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.164] RegQueryValueExW (in: hKey=0x514, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.164] RegCloseKey (hKey=0x514) returned 0x0 [0164.165] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.166] RegQueryValueExW (in: hKey=0x514, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.166] RegCloseKey (hKey=0x514) returned 0x0 [0164.167] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.173] RegQueryValueExW (in: hKey=0x514, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.173] RegCloseKey (hKey=0x514) returned 0x0 [0164.174] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.175] RegQueryValueExW (in: hKey=0x514, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.175] RegCloseKey (hKey=0x514) returned 0x0 [0164.176] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.176] RegQueryValueExW (in: hKey=0x514, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.176] RegCloseKey (hKey=0x514) returned 0x0 [0164.177] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.178] RegQueryValueExW (in: hKey=0x514, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.178] RegCloseKey (hKey=0x514) returned 0x0 [0164.179] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.179] RegQueryValueExW (in: hKey=0x514, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.179] RegCloseKey (hKey=0x514) returned 0x0 [0164.180] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.181] RegQueryValueExW (in: hKey=0x514, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.181] RegCloseKey (hKey=0x514) returned 0x0 [0164.182] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.188] RegQueryValueExW (in: hKey=0x514, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.189] RegCloseKey (hKey=0x514) returned 0x0 [0164.189] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.190] RegQueryValueExW (in: hKey=0x514, lpValueName="Email", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.190] RegCloseKey (hKey=0x514) returned 0x0 [0164.191] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.192] RegQueryValueExW (in: hKey=0x514, lpValueName="HTTP User", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.192] RegCloseKey (hKey=0x514) returned 0x0 [0164.192] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.193] RegQueryValueExW (in: hKey=0x514, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.193] RegCloseKey (hKey=0x514) returned 0x0 [0164.194] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.195] RegQueryValueExW (in: hKey=0x514, lpValueName="POP3 User", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.195] RegCloseKey (hKey=0x514) returned 0x0 [0164.195] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.196] RegQueryValueExW (in: hKey=0x514, lpValueName="IMAP User", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.196] RegCloseKey (hKey=0x514) returned 0x0 [0164.197] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.197] RegQueryValueExW (in: hKey=0x514, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.197] RegCloseKey (hKey=0x514) returned 0x0 [0164.199] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.199] RegQueryValueExW (in: hKey=0x514, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.199] RegCloseKey (hKey=0x514) returned 0x0 [0164.200] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.201] RegQueryValueExW (in: hKey=0x514, lpValueName="SMTP User", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.201] RegCloseKey (hKey=0x514) returned 0x0 [0164.201] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.202] RegQueryValueExW (in: hKey=0x514, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.202] RegCloseKey (hKey=0x514) returned 0x0 [0164.203] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.203] RegQueryValueExW (in: hKey=0x514, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.203] RegCloseKey (hKey=0x514) returned 0x0 [0164.204] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.205] RegQueryValueExW (in: hKey=0x514, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.205] RegCloseKey (hKey=0x514) returned 0x0 [0164.206] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.206] RegQueryValueExW (in: hKey=0x514, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.206] RegCloseKey (hKey=0x514) returned 0x0 [0164.207] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.208] RegQueryValueExW (in: hKey=0x514, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.208] RegCloseKey (hKey=0x514) returned 0x0 [0164.208] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.209] RegQueryValueExW (in: hKey=0x514, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.209] RegCloseKey (hKey=0x514) returned 0x0 [0164.210] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.210] RegQueryValueExW (in: hKey=0x514, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.210] RegCloseKey (hKey=0x514) returned 0x0 [0164.211] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.212] RegQueryValueExW (in: hKey=0x514, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.212] RegCloseKey (hKey=0x514) returned 0x0 [0164.212] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.213] RegQueryValueExW (in: hKey=0x514, lpValueName="HTTPMail Password", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.213] RegCloseKey (hKey=0x514) returned 0x0 [0164.607] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x514) returned 0x0 [0164.608] RegQueryValueExW (in: hKey=0x514, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x5bdedc8, lpData=0x0, lpcbData=0x5bdedc4*=0x0 | out: lpType=0x5bdedc8*=0x0, lpData=0x0, lpcbData=0x5bdedc4*=0x0) returned 0x2 [0164.608] RegCloseKey (hKey=0x514) returned 0x0 [0164.609] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedd4 | out: phkResult=0x5bdedd4*=0x514) returned 0x0 [0164.610] RegQueryInfoKeyW (in: hKey=0x514, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x5bdedf8, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x5bdedf4, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x5bdedf8*=0x3, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x5bdedf4*=0x6, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0164.610] RegEnumKeyExW (in: hKey=0x514, dwIndex=0x0, lpName=0x30642c8, lpcchName=0x5bdee14, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000001", lpcchName=0x5bdee14, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0164.610] CoTaskMemFree (pv=0x0) [0164.610] RegEnumKeyExW (in: hKey=0x514, dwIndex=0x1, lpName=0x30642c8, lpcchName=0x5bdee14, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000002", lpcchName=0x5bdee14, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0164.610] CoTaskMemFree (pv=0x0) [0164.610] RegEnumKeyExW (in: hKey=0x514, dwIndex=0x2, lpName=0x30642c8, lpcchName=0x5bdee14, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0x5bdee14, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0164.610] CoTaskMemFree (pv=0x0) [0164.611] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.612] RegQueryValueExW (in: hKey=0x4f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.612] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.613] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.614] RegQueryValueExW (in: hKey=0x4f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.614] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.615] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.615] RegQueryValueExW (in: hKey=0x4f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.616] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.616] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.617] RegQueryValueExW (in: hKey=0x4f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.617] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.618] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.619] RegQueryValueExW (in: hKey=0x4f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.619] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.620] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.621] RegQueryValueExW (in: hKey=0x4f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.621] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.622] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.623] RegQueryValueExW (in: hKey=0x4f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.623] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.624] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.625] RegQueryValueExW (in: hKey=0x4f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.625] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.626] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.627] RegQueryValueExW (in: hKey=0x4f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.627] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.628] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.629] RegQueryValueExW (in: hKey=0x4f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.629] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.630] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.631] RegQueryValueExW (in: hKey=0x4f8, lpValueName="Email", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.631] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.632] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.633] RegQueryValueExW (in: hKey=0x4f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.633] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.634] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.635] RegQueryValueExW (in: hKey=0x4f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.635] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.636] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.636] RegQueryValueExW (in: hKey=0x4f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.637] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.637] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.638] RegQueryValueExW (in: hKey=0x4f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.638] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.639] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.640] RegQueryValueExW (in: hKey=0x4f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.640] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.641] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.642] RegQueryValueExW (in: hKey=0x4f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.642] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.643] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.644] RegQueryValueExW (in: hKey=0x4f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.644] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.644] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.645] RegQueryValueExW (in: hKey=0x4f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.645] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.646] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.647] RegQueryValueExW (in: hKey=0x4f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.647] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.648] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.649] RegQueryValueExW (in: hKey=0x4f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.649] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.650] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.651] RegQueryValueExW (in: hKey=0x4f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.651] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.788] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.789] RegQueryValueExW (in: hKey=0x4f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.789] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.790] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.791] RegQueryValueExW (in: hKey=0x4f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.791] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.799] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.800] RegQueryValueExW (in: hKey=0x4f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.800] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.801] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.801] RegQueryValueExW (in: hKey=0x4f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.801] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.802] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.803] RegQueryValueExW (in: hKey=0x4f8, lpValueName="HTTPMail Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.803] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.804] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x4f8) returned 0x0 [0164.804] RegQueryValueExW (in: hKey=0x4f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.804] RegCloseKey (hKey=0x4f8) returned 0x0 [0164.805] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded8c | out: phkResult=0x5bded8c*=0x4f8) returned 0x0 [0164.806] RegQueryInfoKeyW (in: hKey=0x4f8, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x5bdedb0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x5bdedac, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x5bdedb0*=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x5bdedac*=0x7, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0164.806] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0164.807] RegQueryValueExW (in: hKey=0x63c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.807] RegCloseKey (hKey=0x63c) returned 0x0 [0164.808] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0164.809] RegQueryValueExW (in: hKey=0x63c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x1, lpData=0x0, lpcbData=0x5bded7c*=0xe) returned 0x0 [0164.809] RegQueryValueExW (in: hKey=0x63c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x3070eb0, lpcbData=0x5bded7c*=0xe | out: lpType=0x5bded80*=0x1, lpData="lfierh", lpcbData=0x5bded7c*=0xe) returned 0x0 [0164.809] RegCloseKey (hKey=0x63c) returned 0x0 [0164.827] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0164.828] RegQueryValueExW (in: hKey=0x500, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x1, lpData=0x0, lpcbData=0x5bded7c*=0xa) returned 0x0 [0164.828] RegQueryValueExW (in: hKey=0x500, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x3071e5c, lpcbData=0x5bded7c*=0xa | out: lpType=0x5bded80*=0x1, lpData="dgkh", lpcbData=0x5bded7c*=0xa) returned 0x0 [0164.828] RegCloseKey (hKey=0x500) returned 0x0 [0164.831] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0164.832] RegQueryValueExW (in: hKey=0x500, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.832] RegCloseKey (hKey=0x500) returned 0x0 [0164.833] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0164.834] RegQueryValueExW (in: hKey=0x500, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.834] RegCloseKey (hKey=0x500) returned 0x0 [0164.835] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0164.836] RegQueryValueExW (in: hKey=0x500, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.836] RegCloseKey (hKey=0x500) returned 0x0 [0164.837] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0164.838] RegQueryValueExW (in: hKey=0x500, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0164.838] RegCloseKey (hKey=0x500) returned 0x0 [0165.115] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.116] RegQueryValueExW (in: hKey=0x500, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.116] RegCloseKey (hKey=0x500) returned 0x0 [0165.117] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.118] RegQueryValueExW (in: hKey=0x500, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.118] RegCloseKey (hKey=0x500) returned 0x0 [0165.119] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.121] RegQueryValueExW (in: hKey=0x500, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.121] RegCloseKey (hKey=0x500) returned 0x0 [0165.122] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.123] RegQueryValueExW (in: hKey=0x500, lpValueName="Email", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x1, lpData=0x0, lpcbData=0x5bded7c*=0x1a) returned 0x0 [0165.123] RegQueryValueExW (in: hKey=0x500, lpValueName="Email", lpReserved=0x0, lpType=0x5bded80, lpData=0x3073e08, lpcbData=0x5bded7c*=0x1a | out: lpType=0x5bded80*=0x1, lpData="kkcie@kdj.kd", lpcbData=0x5bded7c*=0x1a) returned 0x0 [0165.123] RegCloseKey (hKey=0x500) returned 0x0 [0165.123] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.124] RegQueryValueExW (in: hKey=0x500, lpValueName="HTTP User", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.124] RegCloseKey (hKey=0x500) returned 0x0 [0165.125] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.126] RegQueryValueExW (in: hKey=0x500, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.126] RegCloseKey (hKey=0x500) returned 0x0 [0165.127] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.128] RegQueryValueExW (in: hKey=0x500, lpValueName="POP3 User", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x1, lpData=0x0, lpcbData=0x5bded7c*=0xc) returned 0x0 [0165.128] RegQueryValueExW (in: hKey=0x500, lpValueName="POP3 User", lpReserved=0x0, lpType=0x5bded80, lpData=0x3074950, lpcbData=0x5bded7c*=0xc | out: lpType=0x5bded80*=0x1, lpData="kkcie", lpcbData=0x5bded7c*=0xc) returned 0x0 [0165.128] RegCloseKey (hKey=0x500) returned 0x0 [0165.132] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.133] RegQueryValueExW (in: hKey=0x500, lpValueName="IMAP User", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.133] RegCloseKey (hKey=0x500) returned 0x0 [0165.134] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.135] RegQueryValueExW (in: hKey=0x500, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.135] RegCloseKey (hKey=0x500) returned 0x0 [0165.136] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.136] RegQueryValueExW (in: hKey=0x500, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.136] RegCloseKey (hKey=0x500) returned 0x0 [0165.137] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.138] RegQueryValueExW (in: hKey=0x500, lpValueName="SMTP User", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.138] RegCloseKey (hKey=0x500) returned 0x0 [0165.139] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.139] RegQueryValueExW (in: hKey=0x500, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.139] RegCloseKey (hKey=0x500) returned 0x0 [0165.140] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.141] RegQueryValueExW (in: hKey=0x500, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.141] RegCloseKey (hKey=0x500) returned 0x0 [0165.142] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.142] RegQueryValueExW (in: hKey=0x500, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.142] RegCloseKey (hKey=0x500) returned 0x0 [0165.143] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.144] RegQueryValueExW (in: hKey=0x500, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.144] RegCloseKey (hKey=0x500) returned 0x0 [0165.144] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.145] RegQueryValueExW (in: hKey=0x500, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.145] RegCloseKey (hKey=0x500) returned 0x0 [0165.146] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.146] RegQueryValueExW (in: hKey=0x500, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x3, lpData=0x0, lpcbData=0x5bded7c*=0x111) returned 0x0 [0165.146] RegQueryValueExW (in: hKey=0x500, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x30770ac, lpcbData=0x5bded7c*=0x111 | out: lpType=0x5bded80*=0x3, lpData=0x30770ac*, lpcbData=0x5bded7c*=0x111) returned 0x0 [0165.147] RegCloseKey (hKey=0x500) returned 0x0 [0165.248] CryptUnprotectData (in: pDataIn=0x5bded84, ppszDataDescr=0x0, pOptionalEntropy=0x5bded7c, pvReserved=0x0, pPromptStruct=0x0, dwFlags=0x1, pDataOut=0x5bded8c | out: ppszDataDescr=0x0, pDataOut=0x5bded8c) returned 1 [0165.249] LocalFree (hMem=0x146c8d0) returned 0x0 [0165.250] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.251] RegQueryValueExW (in: hKey=0x500, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.251] RegCloseKey (hKey=0x500) returned 0x0 [0165.252] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.253] RegQueryValueExW (in: hKey=0x500, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.253] RegCloseKey (hKey=0x500) returned 0x0 [0165.254] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.255] RegQueryValueExW (in: hKey=0x500, lpValueName="HTTPMail Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.255] RegCloseKey (hKey=0x500) returned 0x0 [0165.256] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x500) returned 0x0 [0165.256] RegQueryValueExW (in: hKey=0x500, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.256] RegCloseKey (hKey=0x500) returned 0x0 [0165.257] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded8c | out: phkResult=0x5bded8c*=0x500) returned 0x0 [0165.258] RegQueryInfoKeyW (in: hKey=0x500, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x5bdedb0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x5bdedac, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x5bdedb0*=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x5bdedac*=0xe, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0165.258] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.259] RegQueryValueExW (in: hKey=0x63c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.259] RegCloseKey (hKey=0x63c) returned 0x0 [0165.259] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.260] RegQueryValueExW (in: hKey=0x63c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.260] RegCloseKey (hKey=0x63c) returned 0x0 [0165.261] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.262] RegQueryValueExW (in: hKey=0x63c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.262] RegCloseKey (hKey=0x63c) returned 0x0 [0165.262] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.263] RegQueryValueExW (in: hKey=0x63c, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.263] RegCloseKey (hKey=0x63c) returned 0x0 [0165.264] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.264] RegQueryValueExW (in: hKey=0x63c, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.264] RegCloseKey (hKey=0x63c) returned 0x0 [0165.265] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.348] RegQueryValueExW (in: hKey=0x63c, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.348] RegCloseKey (hKey=0x63c) returned 0x0 [0165.349] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.350] RegQueryValueExW (in: hKey=0x63c, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.350] RegCloseKey (hKey=0x63c) returned 0x0 [0165.351] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.351] RegQueryValueExW (in: hKey=0x63c, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.351] RegCloseKey (hKey=0x63c) returned 0x0 [0165.352] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.353] RegQueryValueExW (in: hKey=0x63c, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.353] RegCloseKey (hKey=0x63c) returned 0x0 [0165.354] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.355] RegQueryValueExW (in: hKey=0x63c, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.355] RegCloseKey (hKey=0x63c) returned 0x0 [0165.355] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.356] RegQueryValueExW (in: hKey=0x63c, lpValueName="Email", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.356] RegCloseKey (hKey=0x63c) returned 0x0 [0165.357] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.358] RegQueryValueExW (in: hKey=0x63c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.358] RegCloseKey (hKey=0x63c) returned 0x0 [0165.359] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.360] RegQueryValueExW (in: hKey=0x63c, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.360] RegCloseKey (hKey=0x63c) returned 0x0 [0165.361] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.362] RegQueryValueExW (in: hKey=0x63c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.362] RegCloseKey (hKey=0x63c) returned 0x0 [0165.363] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.364] RegQueryValueExW (in: hKey=0x63c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.364] RegCloseKey (hKey=0x63c) returned 0x0 [0165.365] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.365] RegQueryValueExW (in: hKey=0x63c, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.365] RegCloseKey (hKey=0x63c) returned 0x0 [0165.366] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.367] RegQueryValueExW (in: hKey=0x63c, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.367] RegCloseKey (hKey=0x63c) returned 0x0 [0165.368] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.369] RegQueryValueExW (in: hKey=0x63c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.369] RegCloseKey (hKey=0x63c) returned 0x0 [0165.371] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.372] RegQueryValueExW (in: hKey=0x63c, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.372] RegCloseKey (hKey=0x63c) returned 0x0 [0165.373] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.373] RegQueryValueExW (in: hKey=0x63c, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.374] RegCloseKey (hKey=0x63c) returned 0x0 [0165.374] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.375] RegQueryValueExW (in: hKey=0x63c, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.375] RegCloseKey (hKey=0x63c) returned 0x0 [0165.376] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.377] RegQueryValueExW (in: hKey=0x63c, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.377] RegCloseKey (hKey=0x63c) returned 0x0 [0165.378] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.379] RegQueryValueExW (in: hKey=0x63c, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.379] RegCloseKey (hKey=0x63c) returned 0x0 [0165.380] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.381] RegQueryValueExW (in: hKey=0x63c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.381] RegCloseKey (hKey=0x63c) returned 0x0 [0165.382] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.383] RegQueryValueExW (in: hKey=0x63c, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.383] RegCloseKey (hKey=0x63c) returned 0x0 [0165.384] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.385] RegQueryValueExW (in: hKey=0x63c, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.385] RegCloseKey (hKey=0x63c) returned 0x0 [0165.436] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.437] RegQueryValueExW (in: hKey=0x63c, lpValueName="HTTPMail Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.437] RegCloseKey (hKey=0x63c) returned 0x0 [0165.437] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded64 | out: phkResult=0x5bded64*=0x63c) returned 0x0 [0165.438] RegQueryValueExW (in: hKey=0x63c, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x5bded80, lpData=0x0, lpcbData=0x5bded7c*=0x0 | out: lpType=0x5bded80*=0x0, lpData=0x0, lpcbData=0x5bded7c*=0x0) returned 0x2 [0165.438] RegCloseKey (hKey=0x63c) returned 0x0 [0165.439] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bded8c | out: phkResult=0x5bded8c*=0x63c) returned 0x0 [0165.440] RegQueryInfoKeyW (in: hKey=0x63c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x5bdedb0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x5bdedac, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x5bdedb0*=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x5bdedac*=0x7, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0165.440] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.442] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.443] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.445] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.447] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.524] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.527] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.529] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.532] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.534] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.536] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.538] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.541] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.543] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.545] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.547] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.550] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.552] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.554] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.556] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.753] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.755] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.757] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.759] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.761] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.763] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.765] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.767] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.768] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedd4 | out: phkResult=0x5bdedd4*=0x0) returned 0x2 [0165.770] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.772] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.774] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.775] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.777] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.779] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.781] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.782] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.784] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.786] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.788] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.789] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.791] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.918] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.920] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.922] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.924] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.926] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.928] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.929] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.931] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.933] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.935] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.937] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.938] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.940] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.942] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.944] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedac | out: phkResult=0x5bdedac*=0x0) returned 0x2 [0165.946] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Messaging Subsystem\\Profiles\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bdedd4 | out: phkResult=0x5bdedd4*=0x0) returned 0x2 [0165.947] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Others.txt", nBufferLength=0x105, lpBuffer=0x5bde79c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Others.txt", lpFilePart=0x0) returned 0x6f [0165.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bdece0) returned 1 [0165.947] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Others.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\others.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x520 [0165.948] GetFileType (hFile=0x520) returned 0x1 [0165.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bdecdc) returned 1 [0165.948] GetFileType (hFile=0x520) returned 0x1 [0165.948] SetFilePointer (in: hFile=0x520, lDistanceToMove=0, lpDistanceToMoveHigh=0x5bdecb4*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x5bdecb4*=0) returned 0x0 [0165.949] WriteFile (in: hFile=0x520, lpBuffer=0x30963bc*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x5bded6c, lpOverlapped=0x0 | out: lpBuffer=0x30963bc*, lpNumberOfBytesWritten=0x5bded6c*=0x3f, lpOverlapped=0x0) returned 1 [0165.950] CloseHandle (hObject=0x520) returned 1 [0165.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Others.txt", nBufferLength=0x105, lpBuffer=0x5bde7cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Others.txt", lpFilePart=0x0) returned 0x6f [0165.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bded10) returned 1 [0165.951] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Others.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\others.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x520 [0165.951] GetFileType (hFile=0x520) returned 0x1 [0165.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bded0c) returned 1 [0165.951] GetFileType (hFile=0x520) returned 0x1 [0165.951] SetFilePointer (in: hFile=0x520, lDistanceToMove=0, lpDistanceToMoveHigh=0x5bdece4*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x5bdece4*=0) returned 0x3f [0165.951] WriteFile (in: hFile=0x520, lpBuffer=0x3098abc*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x5bded9c, lpOverlapped=0x0 | out: lpBuffer=0x3098abc*, lpNumberOfBytesWritten=0x5bded9c*=0x2, lpOverlapped=0x0) returned 1 [0165.951] CloseHandle (hObject=0x520) returned 1 [0166.795] GetLogicalDrives () returned 0x4 [0166.795] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x5bde830, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0166.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5bded98) returned 1 [0166.795] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x5bdee14 | out: lpFileInformation=0x5bdee14*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x31b3b9e4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x865407b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0x865407b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0166.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5bded94) returned 1 [0166.795] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x5bde8c8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0166.796] CoGetObjectContext (in: riid=0x2fd23a8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5bdedcc | out: ppv=0x5bdedcc*=0x13dcc0c) returned 0x0 [0166.796] IComThreadingInfo:GetCurrentApartmentType (in: This=0x13dcc0c, pAptType=0x5bdedc4 | out: pAptType=0x5bdedc4*=1) returned 0x0 [0166.796] IUnknown:QueryInterface (in: This=0x13dcc0c, riid=0x2fd2390*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5bdedc8 | out: ppvObject=0x5bdedc8*=0x0) returned 0x80004002 [0166.796] IUnknown:Release (This=0x13dcc0c) returned 0x1 [0166.798] CoGetClassObject (in: rclsid=0x144ff3c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5bde728 | out: ppv=0x5bde728*=0x1428938) returned 0x0 [0166.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x1428938, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5bde944 | out: ppvObject=0x5bde944*=0x0) returned 0x80004002 [0166.798] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1428938, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde950 | out: ppvObject=0x5bde950*=0x1459288) returned 0x0 [0166.798] WbemDefPath:IUnknown:Release (This=0x1428938) returned 0x0 [0166.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x1459288, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde574 | out: ppvObject=0x5bde574*=0x1459288) returned 0x0 [0166.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x1459288, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5bde530 | out: ppvObject=0x5bde530*=0x0) returned 0x80004002 [0166.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x1459288, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x5bde124 | out: ppvObject=0x5bde124*=0x0) returned 0x80004002 [0166.799] WbemDefPath:IUnknown:AddRef (This=0x1459288) returned 0x3 [0166.799] WbemDefPath:IUnknown:QueryInterface (in: This=0x1459288, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x5bdde84 | out: ppvObject=0x5bdde84*=0x0) returned 0x80004002 [0166.799] WbemDefPath:IUnknown:QueryInterface (in: This=0x1459288, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x5bdde34 | out: ppvObject=0x5bdde34*=0x0) returned 0x80004002 [0166.799] WbemDefPath:IUnknown:QueryInterface (in: This=0x1459288, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdde40 | out: ppvObject=0x5bdde40*=0x14649c8) returned 0x0 [0166.799] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x14649c8, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5bdde48 | out: pCid=0x5bdde48*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0166.799] WbemDefPath:IUnknown:Release (This=0x14649c8) returned 0x3 [0166.799] CoGetContextToken (in: pToken=0x5bddea0 | out: pToken=0x5bddea0) returned 0x0 [0166.799] CoGetContextToken (in: pToken=0x5bde2a8 | out: pToken=0x5bde2a8) returned 0x0 [0166.799] WbemDefPath:IUnknown:QueryInterface (in: This=0x1459288, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde334 | out: ppvObject=0x5bde334*=0x0) returned 0x80004002 [0166.799] WbemDefPath:IUnknown:Release (This=0x1459288) returned 0x2 [0166.799] WbemDefPath:IUnknown:Release (This=0x1459288) returned 0x1 [0166.799] CoGetContextToken (in: pToken=0x5bdec48 | out: pToken=0x5bdec48) returned 0x0 [0166.799] CoGetContextToken (in: pToken=0x5bdeba8 | out: pToken=0x5bdeba8) returned 0x0 [0166.799] WbemDefPath:IUnknown:QueryInterface (in: This=0x1459288, riid=0x5bdec78*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5bdec74 | out: ppvObject=0x5bdec74*=0x1459288) returned 0x0 [0166.799] WbemDefPath:IUnknown:AddRef (This=0x1459288) returned 0x3 [0166.799] WbemDefPath:IUnknown:Release (This=0x1459288) returned 0x2 [0166.799] WbemDefPath:IWbemPath:SetText (This=0x1459288, uMode=0x4, pszPath="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0166.799] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1459288, puCount=0x5bdedec | out: puCount=0x5bdedec*=0x0) returned 0x0 [0166.799] WbemDefPath:IWbemPath:GetText (in: This=0x1459288, lFlags=2, puBuffLength=0x5bdede8*=0x0, pszText=0x0 | out: puBuffLength=0x5bdede8*=0x20, pszText=0x0) returned 0x0 [0166.799] WbemDefPath:IWbemPath:GetText (in: This=0x1459288, lFlags=2, puBuffLength=0x5bdede8*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5bdede8*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0166.800] WbemDefPath:IWbemPath:GetInfo (in: This=0x1459288, uRequestedInfo=0x0, puResponse=0x5bdedf4 | out: puResponse=0x5bdedf4*=0xc19) returned 0x0 [0166.800] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1459288, puCount=0x5bdedec | out: puCount=0x5bdedec*=0x0) returned 0x0 [0166.800] WbemDefPath:IWbemPath:GetInfo (in: This=0x1459288, uRequestedInfo=0x0, puResponse=0x5bdedf4 | out: puResponse=0x5bdedf4*=0xc19) returned 0x0 [0166.800] WbemDefPath:IWbemPath:GetInfo (in: This=0x1459288, uRequestedInfo=0x0, puResponse=0x5bdedf4 | out: puResponse=0x5bdedf4*=0xc19) returned 0x0 [0166.800] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1459288, puCount=0x5bded78 | out: puCount=0x5bded78*=0x0) returned 0x0 [0166.800] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x142a9c8, puCount=0x5bded64 | out: puCount=0x5bded64*=0x2) returned 0x0 [0166.800] WbemDefPath:IWbemPath:GetText (in: This=0x142a9c8, lFlags=4, puBuffLength=0x5bded60*=0x0, pszText=0x0 | out: puBuffLength=0x5bded60*=0xf, pszText=0x0) returned 0x0 [0166.800] WbemDefPath:IWbemPath:GetText (in: This=0x142a9c8, lFlags=4, puBuffLength=0x5bded60*=0xf, pszText="00000000000000" | out: puBuffLength=0x5bded60*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0166.800] CoGetObjectContext (in: riid=0x2fd23a8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5bded14 | out: ppv=0x5bded14*=0x13dcc0c) returned 0x0 [0166.800] IComThreadingInfo:GetCurrentApartmentType (in: This=0x13dcc0c, pAptType=0x5bded0c | out: pAptType=0x5bded0c*=1) returned 0x0 [0166.800] IUnknown:QueryInterface (in: This=0x13dcc0c, riid=0x2fd2390*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5bded10 | out: ppvObject=0x5bded10*=0x0) returned 0x80004002 [0166.801] IUnknown:Release (This=0x13dcc0c) returned 0x1 [0166.802] CoGetClassObject (in: rclsid=0x144ff3c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5bde670 | out: ppv=0x5bde670*=0x1428a28) returned 0x0 [0166.802] WbemDefPath:IUnknown:QueryInterface (in: This=0x1428a28, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5bde88c | out: ppvObject=0x5bde88c*=0x0) returned 0x80004002 [0166.802] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1428a28, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde898 | out: ppvObject=0x5bde898*=0x14596e8) returned 0x0 [0166.802] WbemDefPath:IUnknown:Release (This=0x1428a28) returned 0x0 [0166.802] WbemDefPath:IUnknown:QueryInterface (in: This=0x14596e8, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde4bc | out: ppvObject=0x5bde4bc*=0x14596e8) returned 0x0 [0166.802] WbemDefPath:IUnknown:QueryInterface (in: This=0x14596e8, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5bde478 | out: ppvObject=0x5bde478*=0x0) returned 0x80004002 [0166.802] WbemDefPath:IUnknown:QueryInterface (in: This=0x14596e8, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x5bde06c | out: ppvObject=0x5bde06c*=0x0) returned 0x80004002 [0166.802] WbemDefPath:IUnknown:AddRef (This=0x14596e8) returned 0x3 [0166.802] WbemDefPath:IUnknown:QueryInterface (in: This=0x14596e8, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x5bdddcc | out: ppvObject=0x5bdddcc*=0x0) returned 0x80004002 [0166.802] WbemDefPath:IUnknown:QueryInterface (in: This=0x14596e8, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x5bddd7c | out: ppvObject=0x5bddd7c*=0x0) returned 0x80004002 [0166.802] WbemDefPath:IUnknown:QueryInterface (in: This=0x14596e8, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bddd88 | out: ppvObject=0x5bddd88*=0x1464998) returned 0x0 [0166.802] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1464998, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5bddd90 | out: pCid=0x5bddd90*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0166.802] WbemDefPath:IUnknown:Release (This=0x1464998) returned 0x3 [0166.802] CoGetContextToken (in: pToken=0x5bddde8 | out: pToken=0x5bddde8) returned 0x0 [0166.802] CoGetContextToken (in: pToken=0x5bde1f0 | out: pToken=0x5bde1f0) returned 0x0 [0166.802] WbemDefPath:IUnknown:QueryInterface (in: This=0x14596e8, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde27c | out: ppvObject=0x5bde27c*=0x0) returned 0x80004002 [0166.802] WbemDefPath:IUnknown:Release (This=0x14596e8) returned 0x2 [0166.802] WbemDefPath:IUnknown:Release (This=0x14596e8) returned 0x1 [0166.802] CoGetContextToken (in: pToken=0x5bdeb90 | out: pToken=0x5bdeb90) returned 0x0 [0166.803] CoGetContextToken (in: pToken=0x5bdeaf0 | out: pToken=0x5bdeaf0) returned 0x0 [0166.803] WbemDefPath:IUnknown:QueryInterface (in: This=0x14596e8, riid=0x5bdebc0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5bdebbc | out: ppvObject=0x5bdebbc*=0x14596e8) returned 0x0 [0166.803] WbemDefPath:IUnknown:AddRef (This=0x14596e8) returned 0x3 [0166.803] WbemDefPath:IUnknown:Release (This=0x14596e8) returned 0x2 [0166.803] WbemDefPath:IWbemPath:SetText (This=0x14596e8, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0166.803] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x14596e8, puCount=0x5bded3c | out: puCount=0x5bded3c*=0x2) returned 0x0 [0166.803] WbemDefPath:IWbemPath:GetText (in: This=0x14596e8, lFlags=4, puBuffLength=0x5bded38*=0x0, pszText=0x0 | out: puBuffLength=0x5bded38*=0xf, pszText=0x0) returned 0x0 [0166.803] WbemDefPath:IWbemPath:GetText (in: This=0x14596e8, lFlags=4, puBuffLength=0x5bded38*=0xf, pszText="00000000000000" | out: puBuffLength=0x5bded38*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0166.803] CoGetObjectContext (in: riid=0x2fd23a8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5bded3c | out: ppv=0x5bded3c*=0x13dcc0c) returned 0x0 [0166.803] IComThreadingInfo:GetCurrentApartmentType (in: This=0x13dcc0c, pAptType=0x5bded34 | out: pAptType=0x5bded34*=1) returned 0x0 [0166.803] IUnknown:QueryInterface (in: This=0x13dcc0c, riid=0x2fd2390*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5bded38 | out: ppvObject=0x5bded38*=0x0) returned 0x80004002 [0166.803] IUnknown:Release (This=0x13dcc0c) returned 0x1 [0166.804] CoGetClassObject (in: rclsid=0x145008c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5bde948 | out: ppv=0x5bde948*=0x1464788) returned 0x0 [0166.804] WbemLocator:IUnknown:QueryInterface (in: This=0x1464788, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5bdeb64 | out: ppvObject=0x5bdeb64*=0x0) returned 0x80004002 [0166.804] WbemLocator:IClassFactory:CreateInstance (in: This=0x1464788, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdeb70 | out: ppvObject=0x5bdeb70*=0x1428a18) returned 0x0 [0166.804] WbemLocator:IUnknown:Release (This=0x1464788) returned 0x0 [0166.804] WbemLocator:IUnknown:QueryInterface (in: This=0x1428a18, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde794 | out: ppvObject=0x5bde794*=0x1428a18) returned 0x0 [0166.804] WbemLocator:IUnknown:QueryInterface (in: This=0x1428a18, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5bde750 | out: ppvObject=0x5bde750*=0x0) returned 0x80004002 [0166.804] WbemLocator:IUnknown:QueryInterface (in: This=0x1428a18, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x5bde344 | out: ppvObject=0x5bde344*=0x0) returned 0x80004002 [0166.805] WbemLocator:IUnknown:AddRef (This=0x1428a18) returned 0x3 [0166.805] WbemLocator:IUnknown:QueryInterface (in: This=0x1428a18, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x5bde0a4 | out: ppvObject=0x5bde0a4*=0x0) returned 0x80004002 [0166.805] WbemLocator:IUnknown:QueryInterface (in: This=0x1428a18, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x5bde054 | out: ppvObject=0x5bde054*=0x0) returned 0x80004002 [0166.805] WbemLocator:IUnknown:QueryInterface (in: This=0x1428a18, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde060 | out: ppvObject=0x5bde060*=0x0) returned 0x80004002 [0166.805] CoGetContextToken (in: pToken=0x5bde0c0 | out: pToken=0x5bde0c0) returned 0x0 [0166.805] CoGetContextToken (in: pToken=0x5bde4c8 | out: pToken=0x5bde4c8) returned 0x0 [0166.805] WbemLocator:IUnknown:QueryInterface (in: This=0x1428a18, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde554 | out: ppvObject=0x5bde554*=0x0) returned 0x80004002 [0166.805] WbemLocator:IUnknown:Release (This=0x1428a18) returned 0x2 [0166.805] WbemLocator:IUnknown:Release (This=0x1428a18) returned 0x1 [0166.805] CoGetContextToken (in: pToken=0x5bdeb50 | out: pToken=0x5bdeb50) returned 0x0 [0166.805] CoGetContextToken (in: pToken=0x5bdeab0 | out: pToken=0x5bdeab0) returned 0x0 [0166.805] WbemLocator:IUnknown:QueryInterface (in: This=0x1428a18, riid=0x5bdeb80*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x5bdeb7c | out: ppvObject=0x5bdeb7c*=0x1428a18) returned 0x0 [0166.805] WbemLocator:IUnknown:AddRef (This=0x1428a18) returned 0x3 [0166.805] WbemLocator:IUnknown:Release (This=0x1428a18) returned 0x2 [0166.805] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x14596e8, puCount=0x5bded18 | out: puCount=0x5bded18*=0x2) returned 0x0 [0166.805] WbemDefPath:IWbemPath:GetText (in: This=0x14596e8, lFlags=8, puBuffLength=0x5bded14*=0x0, pszText=0x0 | out: puBuffLength=0x5bded14*=0xf, pszText=0x0) returned 0x0 [0166.805] WbemDefPath:IWbemPath:GetText (in: This=0x14596e8, lFlags=8, puBuffLength=0x5bded14*=0xf, pszText="00000000000000" | out: puBuffLength=0x5bded14*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0166.805] CoCreateInstance (in: rclsid=0x70a336ac*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x70a3370c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x5bdebd0 | out: ppv=0x5bdebd0*=0x1428a28) returned 0x0 [0166.806] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1428a28, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x5bdec64 | out: ppNamespace=0x5bdec64*=0x141d628) returned 0x0 [0167.644] WbemLocator:IUnknown:QueryInterface (in: This=0x141d628, riid=0x70a3352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdeaf8 | out: ppvObject=0x5bdeaf8*=0x145df88) returned 0x0 [0167.644] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x145df88, pProxy=0x141d628, pAuthnSvc=0x5bdeb48, pAuthzSvc=0x5bdeb44, pServerPrincName=0x5bdeb3c, pAuthnLevel=0x5bdeb40, pImpLevel=0x5bdeb30, pAuthInfo=0x5bdeb34, pCapabilites=0x5bdeb38 | out: pAuthnSvc=0x5bdeb48*=0xa, pAuthzSvc=0x5bdeb44*=0x0, pServerPrincName=0x5bdeb3c, pAuthnLevel=0x5bdeb40*=0x6, pImpLevel=0x5bdeb30*=0x2, pAuthInfo=0x5bdeb34, pCapabilites=0x5bdeb38*=0x1) returned 0x0 [0167.644] WbemLocator:IUnknown:Release (This=0x145df88) returned 0x1 [0167.644] WbemLocator:IUnknown:QueryInterface (in: This=0x141d628, riid=0x70a3351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdeaec | out: ppvObject=0x5bdeaec*=0x145dfac) returned 0x0 [0167.644] WbemLocator:IUnknown:QueryInterface (in: This=0x141d628, riid=0x70a3352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bdead8 | out: ppvObject=0x5bdead8*=0x145df88) returned 0x0 [0167.644] WbemLocator:IClientSecurity:SetBlanket (This=0x145df88, pProxy=0x141d628, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0167.645] WbemLocator:IUnknown:Release (This=0x145df88) returned 0x2 [0167.645] WbemLocator:IUnknown:Release (This=0x145dfac) returned 0x1 [0167.645] CoTaskMemFree (pv=0x1475b90) [0167.645] WbemLocator:IUnknown:AddRef (This=0x141d628) returned 0x2 [0167.645] WbemLocator:IUnknown:Release (This=0x1428a28) returned 0x0 [0167.645] CoGetContextToken (in: pToken=0x5bde018 | out: pToken=0x5bde018) returned 0x0 [0167.645] CoGetContextToken (in: pToken=0x5bde420 | out: pToken=0x5bde420) returned 0x0 [0167.645] WbemLocator:IUnknown:QueryInterface (in: This=0x141d628, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5bde3b8 | out: ppvObject=0x5bde3b8*=0x145df90) returned 0x0 [0167.645] WbemLocator:IRpcOptions:Query (in: This=0x145df90, pPrx=0x1464890, dwProperty=2, pdwValue=0x5bde4b8 | out: pdwValue=0x5bde4b8) returned 0x80004002 [0167.645] WbemLocator:IUnknown:Release (This=0x145df90) returned 0x2 [0167.646] CoGetContextToken (in: pToken=0x5bde9f8 | out: pToken=0x5bde9f8) returned 0x0 [0167.646] CoGetContextToken (in: pToken=0x5bde958 | out: pToken=0x5bde958) returned 0x0 [0167.646] WbemLocator:IUnknown:QueryInterface (in: This=0x141d628, riid=0x5bdea28*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5bde8f0 | out: ppvObject=0x5bde8f0*=0x141d628) returned 0x0 [0167.646] WbemLocator:IUnknown:Release (This=0x141d628) returned 0x2 [0167.646] SysStringLen (param_1=0x0) returned 0x0 [0167.646] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1459288, puCount=0x5bdede8 | out: puCount=0x5bdede8*=0x0) returned 0x0 [0167.646] WbemDefPath:IWbemPath:GetText (in: This=0x1459288, lFlags=2, puBuffLength=0x5bdede4*=0x0, pszText=0x0 | out: puBuffLength=0x5bdede4*=0x20, pszText=0x0) returned 0x0 [0167.646] WbemDefPath:IWbemPath:GetText (in: This=0x1459288, lFlags=2, puBuffLength=0x5bdede4*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5bdede4*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0167.646] WbemDefPath:IWbemPath:GetText (in: This=0x1459288, lFlags=2, puBuffLength=0x5bdedec*=0x0, pszText=0x0 | out: puBuffLength=0x5bdedec*=0x20, pszText=0x0) returned 0x0 [0167.646] WbemDefPath:IWbemPath:GetText (in: This=0x1459288, lFlags=2, puBuffLength=0x5bdedec*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5bdedec*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0168.054] IWbemServices:GetObject (This=0x141d628, strObjectPath="win32_logicaldisk.deviceid=\"C:\"", lFlags=0, pCtx=0x0, ppObject=0x5bdece8*=0x0, ppCallResult=0x0) Thread: id = 17 os_tid = 0x25c [0097.439] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0097.439] RoInitialize () returned 0x1 [0097.439] RoUninitialize () returned 0x0 [0097.444] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0098.152] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0098.888] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0100.303] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0101.157] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0102.310] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0103.111] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0105.742] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0108.083] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0110.258] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0111.009] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0111.731] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0112.992] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0113.750] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0114.552] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0117.079] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0118.047] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0118.884] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0119.701] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0121.348] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0122.536] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0123.347] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0124.115] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0124.880] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0125.672] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0126.421] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0127.179] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0128.191] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0129.241] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0130.283] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0131.325] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0132.398] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0133.565] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0135.058] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0135.826] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0136.770] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0137.801] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0139.161] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0140.067] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0141.185] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0142.168] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0143.217] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0144.252] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0145.354] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0146.257] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0147.155] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0148.143] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0149.277] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0150.341] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0151.651] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0152.643] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0153.718] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0154.884] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0155.785] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0156.589] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0157.431] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0158.259] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0159.086] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0160.070] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0161.168] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0161.949] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0162.673] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0164.159] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0165.194] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0166.044] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0166.865] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0167.593] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) returned 0x0 [0168.294] SleepEx (dwMilliseconds=0x2bc, bAlertable=1) Thread: id = 19 os_tid = 0x794 Thread: id = 20 os_tid = 0xd18 [0101.327] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0101.327] CoGetContextToken (in: pToken=0x5e9f3e4 | out: pToken=0x5e9f3e4) returned 0x0 [0101.327] CObjectContext::QueryInterface () returned 0x0 [0101.327] CObjectContext::GetCurrentThreadType () returned 0x0 [0101.327] Release () returned 0x0 [0101.327] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0101.327] CoUninitialize () [0101.328] RoInitialize () returned 0x1 [0101.328] RoUninitialize () returned 0x0 [0101.580] LocalAlloc (uFlags=0x0, uBytes=0x11a) returned 0x13c3068 [0140.071] LocalFree (hMem=0x141ad18) returned 0x0 [0140.071] LocalFree (hMem=0x13c3068) returned 0x0 [0140.072] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0140.849] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0141.210] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0141.477] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0141.904] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0142.227] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0142.477] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0142.783] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0143.198] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0143.495] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0143.656] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0144.156] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0144.536] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0144.946] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.354] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.883] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.967] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.136] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.267] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.319] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.366] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.415] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.460] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.515] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.570] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0147.155] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0147.669] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.142] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.315] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.426] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.904] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0149.387] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0149.707] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0150.332] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0150.709] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0150.966] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.649] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.231] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.630] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0153.089] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0153.213] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0153.386] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.183] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.233] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.837] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.961] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.045] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.143] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.246] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.389] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 Thread: id = 21 os_tid = 0xd00 [0102.249] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0102.543] RoInitialize () returned 0x1 [0102.544] RoUninitialize () returned 0x0 [0102.544] ShellExecuteExW (in: pExecInfo=0x300e7c4*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="cmd.exe", lpParameters="/C tasklist /FO TABLE > \"C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\processes.txt\"", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x300e7c4*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="cmd.exe", lpParameters="/C tasklist /FO TABLE > \"C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\processes.txt\"", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x464)) returned 1 [0139.651] CoGetContextToken (in: pToken=0x5fdf9c0 | out: pToken=0x5fdf9c0) returned 0x0 [0139.651] CoUninitialize () Thread: id = 24 os_tid = 0xabc [0102.420] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0102.500] CoGetContextToken (in: pToken=0x614fa44 | out: pToken=0x614fa44) returned 0x0 [0102.500] CObjectContext::QueryInterface () returned 0x0 [0102.500] IComThreadingInfo:GetCurrentThreadType (in: This=0x13dcc0c, pThreadType=0x614fa94 | out: pThreadType=0x614fa94*=0) returned 0x0 [0102.500] IUnknown:Release (This=0x13dcc0c) returned 0x1 [0102.500] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0102.500] CoUninitialize () [0102.500] RoInitialize () returned 0x1 [0102.500] RoUninitialize () returned 0x0 [0102.521] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\", nBufferLength=0x105, lpBuffer=0x614f000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\", lpFilePart=0x0) returned 0x6a [0102.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0102.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\dirs"), fInfoLevelId=0x0, lpFileInformation=0x614f4b8 | out: lpFileInformation=0x614f4b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0102.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f438) returned 1 [0102.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0102.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\dirs"), fInfoLevelId=0x0, lpFileInformation=0x614f4b8 | out: lpFileInformation=0x614f4b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0102.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f438) returned 1 [0102.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0102.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0"), fInfoLevelId=0x0, lpFileInformation=0x614f4b8 | out: lpFileInformation=0x614f4b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0102.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f438) returned 1 [0102.522] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\dirs"), lpSecurityAttributes=0x0) returned 1 [0102.536] CoTaskMemAlloc (cb=0x20c) returned 0x141d018 [0102.536] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x141d018 | out: pszPath="C:\\Users\\FD1HVy\\Desktop") returned 0x0 [0102.536] CoTaskMemFree (pv=0x141d018) [0102.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x614d75c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0102.536] CoTaskMemAlloc (cb=0x20c) returned 0x141d018 [0102.536] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x141d018 | out: pszPath="C:\\Users\\FD1HVy\\Documents") returned 0x0 [0102.536] CoTaskMemFree (pv=0x141d018) [0102.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x614d75c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0102.536] CoTaskMemAlloc (cb=0x20c) returned 0x141d018 [0102.536] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0x141d018 | out: pszPath="C:\\Users\\FD1HVy\\Pictures") returned 0x0 [0102.538] CoTaskMemFree (pv=0x141d018) [0102.538] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0x614d75c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0102.538] CoTaskMemAlloc (cb=0x20c) returned 0x141d018 [0102.538] SHGetFolderPathW (in: hwnd=0x0, csidl=14, hToken=0x0, dwFlags=0x0, pszPath=0x141d018 | out: pszPath="C:\\Users\\FD1HVy\\Videos") returned 0x0 [0102.538] CoTaskMemFree (pv=0x141d018) [0102.539] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0x614d75c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0102.539] CoTaskMemAlloc (cb=0x20c) returned 0x141d018 [0102.539] SHGetFolderPathW (in: hwnd=0x0, csidl=7, hToken=0x0, dwFlags=0x0, pszPath=0x141d018 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x0 [0102.539] CoTaskMemFree (pv=0x141d018) [0102.539] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x614d75c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x4d [0102.539] CoTaskMemAlloc (cb=0x20c) returned 0x141d018 [0102.539] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x141d018 | out: pszPath="C:\\Users\\FD1HVy") returned 0x0 [0102.540] CoTaskMemFree (pv=0x141d018) [0102.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x105, lpBuffer=0x614d75c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0102.540] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x614dbe4, nSize=0x80 | out: lpBuffer="C:\\Users\\FD1HVy") returned 0xf [0102.540] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x614dbe4, nSize=0x80 | out: lpBuffer="C:\\Users\\FD1HVy") returned 0xf [0102.540] GetEnvironmentVariableW (in: lpName="TEMP", lpBuffer=0x614dbe4, nSize=0x80 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp") returned 0x22 [0102.812] GetLogicalDrives () returned 0x4 [0102.812] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x614ef14, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0102.813] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0102.994] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x614ef60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0102.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f410) returned 1 [0102.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x614f48c | out: lpFileInformation=0x614f48c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1381d081, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x1381d081, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0102.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f40c) returned 1 [0102.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x614ef68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0103.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0103.011] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0103.013] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1381d081, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x1381d081, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd398 [0103.015] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1381d081, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x1381d081, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.015] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26edfe10, ftCreationTime.dwHighDateTime=0x1d5ec14, ftLastAccessTime.dwLowDateTime=0x58b11aa0, ftLastAccessTime.dwHighDateTime=0x1d5e943, ftLastWriteTime.dwLowDateTime=0x58b11aa0, ftLastWriteTime.dwHighDateTime=0x1d5e943, nFileSizeHigh=0x0, nFileSizeLow=0x4c49, dwReserved0=0x0, dwReserved1=0x0, cFileName="-7gEihQNLL7BJ.jpg", cAlternateFileName="-7GEIH~1.JPG")) returned 1 [0103.015] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2d88270, ftCreationTime.dwHighDateTime=0x1d5ed0f, ftLastAccessTime.dwLowDateTime=0xdd1e7130, ftLastAccessTime.dwHighDateTime=0x1d5e528, ftLastWriteTime.dwLowDateTime=0xdd1e7130, ftLastWriteTime.dwHighDateTime=0x1d5e528, nFileSizeHigh=0x0, nFileSizeLow=0x130b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="-z-Li5hFd.mp3", cAlternateFileName="-Z-LI5~1.MP3")) returned 1 [0103.015] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dee6dc0, ftCreationTime.dwHighDateTime=0x1d5e8b8, ftLastAccessTime.dwLowDateTime=0xdb65a880, ftLastAccessTime.dwHighDateTime=0x1d5e8a8, ftLastWriteTime.dwLowDateTime=0xdb65a880, ftLastWriteTime.dwHighDateTime=0x1d5e8a8, nFileSizeHigh=0x0, nFileSizeLow=0x1387a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ZMhImbPPz6Bu8ctZ.gif", cAlternateFileName="0ZMHIM~1.GIF")) returned 1 [0103.016] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb00bfe40, ftCreationTime.dwHighDateTime=0x1d5e5f2, ftLastAccessTime.dwLowDateTime=0x712dfe40, ftLastAccessTime.dwHighDateTime=0x1d5f005, ftLastWriteTime.dwLowDateTime=0x712dfe40, ftLastWriteTime.dwHighDateTime=0x1d5f005, nFileSizeHigh=0x0, nFileSizeLow=0x14950, dwReserved0=0x0, dwReserved1=0x0, cFileName="5czk0AiMnrY.mp4", cAlternateFileName="5CZK0A~1.MP4")) returned 1 [0103.016] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e77a050, ftCreationTime.dwHighDateTime=0x1d5ec26, ftLastAccessTime.dwLowDateTime=0xfe1582f0, ftLastAccessTime.dwHighDateTime=0x1d5e327, ftLastWriteTime.dwLowDateTime=0xfe1582f0, ftLastWriteTime.dwHighDateTime=0x1d5e327, nFileSizeHigh=0x0, nFileSizeLow=0x56c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="67KYe6P-sh8CO4U.pptx", cAlternateFileName="67KYE6~1.PPT")) returned 1 [0103.016] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4c9480, ftCreationTime.dwHighDateTime=0x1d5eca2, ftLastAccessTime.dwLowDateTime=0xe80a3ef0, ftLastAccessTime.dwHighDateTime=0x1d5eb34, ftLastWriteTime.dwLowDateTime=0xe80a3ef0, ftLastWriteTime.dwHighDateTime=0x1d5eb34, nFileSizeHigh=0x0, nFileSizeLow=0x2322, dwReserved0=0x0, dwReserved1=0x0, cFileName="6wZ 3eZOEM3qP5.png", cAlternateFileName="6WZ3EZ~1.PNG")) returned 1 [0103.016] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5565d240, ftCreationTime.dwHighDateTime=0x1d5ec9b, ftLastAccessTime.dwLowDateTime=0x3a864480, ftLastAccessTime.dwHighDateTime=0x1d5e860, ftLastWriteTime.dwLowDateTime=0x3a864480, ftLastWriteTime.dwHighDateTime=0x1d5e860, nFileSizeHigh=0x0, nFileSizeLow=0xb551, dwReserved0=0x0, dwReserved1=0x0, cFileName="8jt8LLXyOZgw.avi", cAlternateFileName="8JT8LL~1.AVI")) returned 1 [0103.017] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcc30a00, ftCreationTime.dwHighDateTime=0x1d694aa, ftLastAccessTime.dwLowDateTime=0xfcc30a00, ftLastAccessTime.dwHighDateTime=0x1d694aa, ftLastWriteTime.dwLowDateTime=0xa7d2c400, ftLastWriteTime.dwHighDateTime=0x1d694a9, nFileSizeHigh=0x0, nFileSizeLow=0xd2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="CardGame.exe", cAlternateFileName="")) returned 1 [0103.017] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0103.017] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91ed3b0, ftCreationTime.dwHighDateTime=0x1d5eb1c, ftLastAccessTime.dwLowDateTime=0xc49197f0, ftLastAccessTime.dwHighDateTime=0x1d5e35c, ftLastWriteTime.dwLowDateTime=0xc49197f0, ftLastWriteTime.dwHighDateTime=0x1d5e35c, nFileSizeHigh=0x0, nFileSizeLow=0x1495e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DM1zFzr 1O.bmp", cAlternateFileName="DM1ZFZ~1.BMP")) returned 1 [0103.017] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda3a360, ftCreationTime.dwHighDateTime=0x1d5ea57, ftLastAccessTime.dwLowDateTime=0x9b37970, ftLastAccessTime.dwHighDateTime=0x1d5ecf4, ftLastWriteTime.dwLowDateTime=0x9b37970, ftLastWriteTime.dwHighDateTime=0x1d5ecf4, nFileSizeHigh=0x0, nFileSizeLow=0xf170, dwReserved0=0x0, dwReserved1=0x0, cFileName="d_zdRE.mp4", cAlternateFileName="")) returned 1 [0103.017] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87f280c0, ftCreationTime.dwHighDateTime=0x1d5e532, ftLastAccessTime.dwLowDateTime=0x90ce6b0, ftLastAccessTime.dwHighDateTime=0x1d5e3d4, ftLastWriteTime.dwLowDateTime=0x90ce6b0, ftLastWriteTime.dwHighDateTime=0x1d5e3d4, nFileSizeHigh=0x0, nFileSizeLow=0xc120, dwReserved0=0x0, dwReserved1=0x0, cFileName="e7uGEaLylJ.png", cAlternateFileName="E7UGEA~1.PNG")) returned 1 [0103.018] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe34a04c0, ftCreationTime.dwHighDateTime=0x1d5e0e1, ftLastAccessTime.dwLowDateTime=0xb53048c0, ftLastAccessTime.dwHighDateTime=0x1d5e7f2, ftLastWriteTime.dwLowDateTime=0xb53048c0, ftLastWriteTime.dwHighDateTime=0x1d5e7f2, nFileSizeHigh=0x0, nFileSizeLow=0x6bbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="EqNOEROZFyyl.bmp", cAlternateFileName="EQNOER~1.BMP")) returned 1 [0103.018] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0ced70, ftCreationTime.dwHighDateTime=0x1d5eb37, ftLastAccessTime.dwLowDateTime=0x20ab2f10, ftLastAccessTime.dwHighDateTime=0x1d5e3d0, ftLastWriteTime.dwLowDateTime=0x20ab2f10, ftLastWriteTime.dwHighDateTime=0x1d5e3d0, nFileSizeHigh=0x0, nFileSizeLow=0x14e6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKh7RwVW47wI.csv", cAlternateFileName="GKH7RW~1.CSV")) returned 1 [0103.018] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff828e60, ftCreationTime.dwHighDateTime=0x1d5e833, ftLastAccessTime.dwLowDateTime=0xab09eab0, ftLastAccessTime.dwHighDateTime=0x1d5e453, ftLastWriteTime.dwLowDateTime=0xab09eab0, ftLastWriteTime.dwHighDateTime=0x1d5e453, nFileSizeHigh=0x0, nFileSizeLow=0x1466b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GnnPd4nKHncT614x7YWX.flv", cAlternateFileName="GNNPD4~1.FLV")) returned 1 [0103.018] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dea5100, ftCreationTime.dwHighDateTime=0x1d5ea29, ftLastAccessTime.dwLowDateTime=0xd8200420, ftLastAccessTime.dwHighDateTime=0x1d5e3aa, ftLastWriteTime.dwLowDateTime=0xd8200420, ftLastWriteTime.dwHighDateTime=0x1d5e3aa, nFileSizeHigh=0x0, nFileSizeLow=0x7129, dwReserved0=0x0, dwReserved1=0x0, cFileName="gsViRH3d.odt", cAlternateFileName="")) returned 1 [0103.019] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7b6dc0, ftCreationTime.dwHighDateTime=0x1d5ec1d, ftLastAccessTime.dwLowDateTime=0x4d6678b0, ftLastAccessTime.dwHighDateTime=0x1d5efe8, ftLastWriteTime.dwLowDateTime=0x4d6678b0, ftLastWriteTime.dwHighDateTime=0x1d5efe8, nFileSizeHigh=0x0, nFileSizeLow=0x16fd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="H0NQC_GJOYxHd7LAhuc.rtf", cAlternateFileName="H0NQC_~1.RTF")) returned 1 [0103.019] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb427d00, ftCreationTime.dwHighDateTime=0x1d5e424, ftLastAccessTime.dwLowDateTime=0xb0cfd0d0, ftLastAccessTime.dwHighDateTime=0x1d5ea8f, ftLastWriteTime.dwLowDateTime=0xb0cfd0d0, ftLastWriteTime.dwHighDateTime=0x1d5ea8f, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="i0Y3XU7Vh-UKMBjhV6M.xls", cAlternateFileName="I0Y3XU~1.XLS")) returned 1 [0103.019] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a92000, ftCreationTime.dwHighDateTime=0x1d5eb49, ftLastAccessTime.dwLowDateTime=0x85114fc0, ftLastAccessTime.dwHighDateTime=0x1d5e3f3, ftLastWriteTime.dwLowDateTime=0x85114fc0, ftLastWriteTime.dwHighDateTime=0x1d5e3f3, nFileSizeHigh=0x0, nFileSizeLow=0x51d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="jcdiSJQPBvqUBx8 r.flv", cAlternateFileName="JCDISJ~1.FLV")) returned 1 [0103.019] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f242340, ftCreationTime.dwHighDateTime=0x1d5e8c0, ftLastAccessTime.dwLowDateTime=0xb1754bc0, ftLastAccessTime.dwHighDateTime=0x1d5e501, ftLastWriteTime.dwLowDateTime=0xb1754bc0, ftLastWriteTime.dwHighDateTime=0x1d5e501, nFileSizeHigh=0x0, nFileSizeLow=0x17a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="kSyeUF82R.wav", cAlternateFileName="KSYEUF~1.WAV")) returned 1 [0103.020] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1936030, ftCreationTime.dwHighDateTime=0x1d5ed2d, ftLastAccessTime.dwLowDateTime=0xb2b6a720, ftLastAccessTime.dwHighDateTime=0x1d5ef4e, ftLastWriteTime.dwLowDateTime=0xb2b6a720, ftLastWriteTime.dwHighDateTime=0x1d5ef4e, nFileSizeHigh=0x0, nFileSizeLow=0xe9cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="kxwl2Nyo9U0OcTApBggA.mkv", cAlternateFileName="KXWL2N~1.MKV")) returned 1 [0103.020] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1f6020, ftCreationTime.dwHighDateTime=0x1d5ebf6, ftLastAccessTime.dwLowDateTime=0xdb47f960, ftLastAccessTime.dwHighDateTime=0x1d5e23c, ftLastWriteTime.dwLowDateTime=0xdb47f960, ftLastWriteTime.dwHighDateTime=0x1d5e23c, nFileSizeHigh=0x0, nFileSizeLow=0x1887e, dwReserved0=0x0, dwReserved1=0x0, cFileName="L7l-rJ5_O.m4a", cAlternateFileName="L7L-RJ~1.M4A")) returned 1 [0103.020] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1f7e330, ftCreationTime.dwHighDateTime=0x1d5e396, ftLastAccessTime.dwLowDateTime=0x4c1aa330, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0x4c1aa330, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x4c8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lv7kY3iq1NSBMygmLCxl.swf", cAlternateFileName="LV7KY3~1.SWF")) returned 1 [0103.020] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd7bcc40, ftCreationTime.dwHighDateTime=0x1d5e79a, ftLastAccessTime.dwLowDateTime=0x17bb2e20, ftLastAccessTime.dwHighDateTime=0x1d5e9f5, ftLastWriteTime.dwLowDateTime=0x17bb2e20, ftLastWriteTime.dwHighDateTime=0x1d5e9f5, nFileSizeHigh=0x0, nFileSizeLow=0x163f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="nkVUOj N7QkB5UTJAbnQ.bmp", cAlternateFileName="NKVUOJ~1.BMP")) returned 1 [0103.020] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881852e0, ftCreationTime.dwHighDateTime=0x1d5e2ae, ftLastAccessTime.dwLowDateTime=0x9f8f8d50, ftLastAccessTime.dwHighDateTime=0x1d5f076, ftLastWriteTime.dwLowDateTime=0x9f8f8d50, ftLastWriteTime.dwHighDateTime=0x1d5f076, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nWZX.mp3", cAlternateFileName="")) returned 1 [0103.021] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc369730, ftCreationTime.dwHighDateTime=0x1d5e728, ftLastAccessTime.dwLowDateTime=0x8474e960, ftLastAccessTime.dwHighDateTime=0x1d5ea2d, ftLastWriteTime.dwLowDateTime=0x8474e960, ftLastWriteTime.dwHighDateTime=0x1d5ea2d, nFileSizeHigh=0x0, nFileSizeLow=0x11893, dwReserved0=0x0, dwReserved1=0x0, cFileName="nYZo51s.jpg", cAlternateFileName="")) returned 1 [0103.021] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128d8910, ftCreationTime.dwHighDateTime=0x1d5ecbc, ftLastAccessTime.dwLowDateTime=0x650854f0, ftLastAccessTime.dwHighDateTime=0x1d5eeaf, ftLastWriteTime.dwLowDateTime=0x650854f0, ftLastWriteTime.dwHighDateTime=0x1d5eeaf, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE5l_.m4a", cAlternateFileName="")) returned 1 [0103.021] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28e6e600, ftCreationTime.dwHighDateTime=0x1d5e5c0, ftLastAccessTime.dwLowDateTime=0xe01e1ec0, ftLastAccessTime.dwHighDateTime=0x1d5e119, ftLastWriteTime.dwLowDateTime=0xe01e1ec0, ftLastWriteTime.dwHighDateTime=0x1d5e119, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pfJ9-Grb4Gam66e", cAlternateFileName="PFJ9-G~1")) returned 1 [0103.022] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb46c0b0, ftCreationTime.dwHighDateTime=0x1d5ec29, ftLastAccessTime.dwLowDateTime=0xc6a5af80, ftLastAccessTime.dwHighDateTime=0x1d5ef10, ftLastWriteTime.dwLowDateTime=0xc6a5af80, ftLastWriteTime.dwHighDateTime=0x1d5ef10, nFileSizeHigh=0x0, nFileSizeLow=0xeb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGgcq.mp3", cAlternateFileName="")) returned 1 [0103.022] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a520b90, ftCreationTime.dwHighDateTime=0x1d5f091, ftLastAccessTime.dwLowDateTime=0x6a2e5630, ftLastAccessTime.dwHighDateTime=0x1d5e835, ftLastWriteTime.dwLowDateTime=0x6a2e5630, ftLastWriteTime.dwHighDateTime=0x1d5e835, nFileSizeHigh=0x0, nFileSizeLow=0x5b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="puBZjomV6GOHhpRB8lAc.wav", cAlternateFileName="PUBZJO~1.WAV")) returned 1 [0103.022] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734badc0, ftCreationTime.dwHighDateTime=0x1d5efbb, ftLastAccessTime.dwLowDateTime=0xce4929e0, ftLastAccessTime.dwHighDateTime=0x1d5f057, ftLastWriteTime.dwLowDateTime=0xce4929e0, ftLastWriteTime.dwHighDateTime=0x1d5f057, nFileSizeHigh=0x0, nFileSizeLow=0x686b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QgIoeiRRd.wav", cAlternateFileName="QGIOEI~1.WAV")) returned 1 [0103.022] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1a9810, ftCreationTime.dwHighDateTime=0x1d5e8e2, ftLastAccessTime.dwLowDateTime=0x75caf280, ftLastAccessTime.dwHighDateTime=0x1d5e850, ftLastWriteTime.dwLowDateTime=0x75caf280, ftLastWriteTime.dwHighDateTime=0x1d5e850, nFileSizeHigh=0x0, nFileSizeLow=0x104ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="rbgbzG.bmp", cAlternateFileName="")) returned 1 [0103.023] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8099830, ftCreationTime.dwHighDateTime=0x1d5ece0, ftLastAccessTime.dwLowDateTime=0xb1aecc0, ftLastAccessTime.dwHighDateTime=0x1d5ecb4, ftLastWriteTime.dwLowDateTime=0xb1aecc0, ftLastWriteTime.dwHighDateTime=0x1d5ecb4, nFileSizeHigh=0x0, nFileSizeLow=0x8ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sz7SJzZ.mp3", cAlternateFileName="")) returned 1 [0103.023] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5d80, ftCreationTime.dwHighDateTime=0x1d5ec28, ftLastAccessTime.dwLowDateTime=0x4cb926b0, ftLastAccessTime.dwHighDateTime=0x1d5e10b, ftLastWriteTime.dwLowDateTime=0x4cb926b0, ftLastWriteTime.dwHighDateTime=0x1d5e10b, nFileSizeHigh=0x0, nFileSizeLow=0x159ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="T2QbMoIKvY4rR-.rtf", cAlternateFileName="T2QBMO~1.RTF")) returned 1 [0103.023] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7863d1e0, ftCreationTime.dwHighDateTime=0x1d5e226, ftLastAccessTime.dwLowDateTime=0xfc38ed60, ftLastAccessTime.dwHighDateTime=0x1d5e0fb, ftLastWriteTime.dwLowDateTime=0xfc38ed60, ftLastWriteTime.dwHighDateTime=0x1d5e0fb, nFileSizeHigh=0x0, nFileSizeLow=0x25e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tsj_CuF98dlIN3cxv0.swf", cAlternateFileName="TSJ_CU~1.SWF")) returned 1 [0103.023] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450d3da0, ftCreationTime.dwHighDateTime=0x1d5e5b3, ftLastAccessTime.dwLowDateTime=0xb965c020, ftLastAccessTime.dwHighDateTime=0x1d5e1d3, ftLastWriteTime.dwLowDateTime=0xb965c020, ftLastWriteTime.dwHighDateTime=0x1d5e1d3, nFileSizeHigh=0x0, nFileSizeLow=0xbd39, dwReserved0=0x0, dwReserved1=0x0, cFileName="vgVoYDiPiQ8ZW6le.flv", cAlternateFileName="VGVOYD~1.FLV")) returned 1 [0103.023] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd561b4c0, ftCreationTime.dwHighDateTime=0x1d5e90b, ftLastAccessTime.dwLowDateTime=0x7d155730, ftLastAccessTime.dwHighDateTime=0x1d5f078, ftLastWriteTime.dwLowDateTime=0x7d155730, ftLastWriteTime.dwHighDateTime=0x1d5f078, nFileSizeHigh=0x0, nFileSizeLow=0x34fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSkkEoNsyYPDMZ--.wav", cAlternateFileName="VSKKEO~1.WAV")) returned 1 [0103.024] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a597f0, ftCreationTime.dwHighDateTime=0x1d5e34a, ftLastAccessTime.dwLowDateTime=0x608dda80, ftLastAccessTime.dwHighDateTime=0x1d5eba8, ftLastWriteTime.dwLowDateTime=0x608dda80, ftLastWriteTime.dwHighDateTime=0x1d5eba8, nFileSizeHigh=0x0, nFileSizeLow=0x14d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="wPhLVG.avi", cAlternateFileName="")) returned 1 [0103.024] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fadf2b0, ftCreationTime.dwHighDateTime=0x1d5f0bb, ftLastAccessTime.dwLowDateTime=0xaa3b45c0, ftLastAccessTime.dwHighDateTime=0x1d5e895, ftLastWriteTime.dwLowDateTime=0xaa3b45c0, ftLastWriteTime.dwHighDateTime=0x1d5e895, nFileSizeHigh=0x0, nFileSizeLow=0xcc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZyjTEjw7C_25gW1D21.bmp", cAlternateFileName="ZYJTEJ~1.BMP")) returned 1 [0103.024] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fadf2b0, ftCreationTime.dwHighDateTime=0x1d5f0bb, ftLastAccessTime.dwLowDateTime=0xaa3b45c0, ftLastAccessTime.dwHighDateTime=0x1d5e895, ftLastWriteTime.dwLowDateTime=0xaa3b45c0, ftLastWriteTime.dwHighDateTime=0x1d5e895, nFileSizeHigh=0x0, nFileSizeLow=0xcc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZyjTEjw7C_25gW1D21.bmp", cAlternateFileName="ZYJTEJ~1.BMP")) returned 0 [0103.024] FindClose (in: hFindFile=0x13fd398 | out: hFindFile=0x13fd398) returned 1 [0103.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0103.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0103.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pfJ9-Grb4Gam66e", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pfJ9-Grb4Gam66e", lpFilePart=0x0) returned 0x27 [0103.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0103.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pfJ9-Grb4Gam66e" (normalized: "c:\\users\\fd1hvy\\desktop\\pfj9-grb4gam66e"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28e6e600, ftCreationTime.dwHighDateTime=0x1d5e5c0, ftLastAccessTime.dwLowDateTime=0xe01e1ec0, ftLastAccessTime.dwHighDateTime=0x1d5e119, ftLastWriteTime.dwLowDateTime=0xe01e1ec0, ftLastWriteTime.dwHighDateTime=0x1d5e119, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0103.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0103.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pfJ9-Grb4Gam66e", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pfJ9-Grb4Gam66e", lpFilePart=0x0) returned 0x27 [0103.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0103.026] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pfJ9-Grb4Gam66e", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pfJ9-Grb4Gam66e", lpFilePart=0x0) returned 0x27 [0103.026] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pfJ9-Grb4Gam66e\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28e6e600, ftCreationTime.dwHighDateTime=0x1d5e5c0, ftLastAccessTime.dwLowDateTime=0xe01e1ec0, ftLastAccessTime.dwHighDateTime=0x1d5e119, ftLastWriteTime.dwLowDateTime=0xe01e1ec0, ftLastWriteTime.dwHighDateTime=0x1d5e119, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd558 [0103.026] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28e6e600, ftCreationTime.dwHighDateTime=0x1d5e5c0, ftLastAccessTime.dwLowDateTime=0xe01e1ec0, ftLastAccessTime.dwHighDateTime=0x1d5e119, ftLastWriteTime.dwLowDateTime=0xe01e1ec0, ftLastWriteTime.dwHighDateTime=0x1d5e119, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.027] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e51b0, ftCreationTime.dwHighDateTime=0x1d5e9f1, ftLastAccessTime.dwLowDateTime=0xde8dffe0, ftLastAccessTime.dwHighDateTime=0x1d5e17c, ftLastWriteTime.dwLowDateTime=0xde8dffe0, ftLastWriteTime.dwHighDateTime=0x1d5e17c, nFileSizeHigh=0x0, nFileSizeLow=0x12f7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="1IrsoMbaAb9pgFff.mp3", cAlternateFileName="1IRSOM~1.MP3")) returned 1 [0103.027] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1389850, ftCreationTime.dwHighDateTime=0x1d5e1f0, ftLastAccessTime.dwLowDateTime=0x54f5bdd0, ftLastAccessTime.dwHighDateTime=0x1d5ea97, ftLastWriteTime.dwLowDateTime=0x54f5bdd0, ftLastWriteTime.dwHighDateTime=0x1d5ea97, nFileSizeHigh=0x0, nFileSizeLow=0xb21c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7TGK.odp", cAlternateFileName="")) returned 1 [0103.027] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55fc590, ftCreationTime.dwHighDateTime=0x1d5eaa3, ftLastAccessTime.dwLowDateTime=0xab93a60, ftLastAccessTime.dwHighDateTime=0x1d5ea67, ftLastWriteTime.dwLowDateTime=0xab93a60, ftLastWriteTime.dwHighDateTime=0x1d5ea67, nFileSizeHigh=0x0, nFileSizeLow=0xbad6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTjUvLDnSqqoO.avi", cAlternateFileName="AUTJUV~1.AVI")) returned 1 [0103.027] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284f10f0, ftCreationTime.dwHighDateTime=0x1d5e930, ftLastAccessTime.dwLowDateTime=0x543e5050, ftLastAccessTime.dwHighDateTime=0x1d5ecea, ftLastWriteTime.dwLowDateTime=0x543e5050, ftLastWriteTime.dwHighDateTime=0x1d5ecea, nFileSizeHigh=0x0, nFileSizeLow=0xc07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSyEYH.pps", cAlternateFileName="")) returned 1 [0103.111] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862ac230, ftCreationTime.dwHighDateTime=0x1d5e0d6, ftLastAccessTime.dwLowDateTime=0xbdd08270, ftLastAccessTime.dwHighDateTime=0x1d5e111, ftLastWriteTime.dwLowDateTime=0xbdd08270, ftLastWriteTime.dwHighDateTime=0x1d5e111, nFileSizeHigh=0x0, nFileSizeLow=0xf0a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_9Y7FY32jltQTnk.m4a", cAlternateFileName="B_9Y7F~1.M4A")) returned 1 [0103.111] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65571d0, ftCreationTime.dwHighDateTime=0x1d5e75d, ftLastAccessTime.dwLowDateTime=0xf933a530, ftLastAccessTime.dwHighDateTime=0x1d5e865, ftLastWriteTime.dwLowDateTime=0xf933a530, ftLastWriteTime.dwHighDateTime=0x1d5e865, nFileSizeHigh=0x0, nFileSizeLow=0x1e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="e0W3t1XHOLbp0.odp", cAlternateFileName="E0W3T1~1.ODP")) returned 1 [0103.112] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862411a0, ftCreationTime.dwHighDateTime=0x1d5e59b, ftLastAccessTime.dwLowDateTime=0x72ec7f40, ftLastAccessTime.dwHighDateTime=0x1d5ee25, ftLastWriteTime.dwLowDateTime=0x72ec7f40, ftLastWriteTime.dwHighDateTime=0x1d5ee25, nFileSizeHigh=0x0, nFileSizeLow=0x1200b, dwReserved0=0x0, dwReserved1=0x0, cFileName="hfwT-Yk0P8NWV.mkv", cAlternateFileName="HFWT-Y~1.MKV")) returned 1 [0103.112] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf658780, ftCreationTime.dwHighDateTime=0x1d5e16b, ftLastAccessTime.dwLowDateTime=0xdf02fc20, ftLastAccessTime.dwHighDateTime=0x1d5ea6c, ftLastWriteTime.dwLowDateTime=0xdf02fc20, ftLastWriteTime.dwHighDateTime=0x1d5ea6c, nFileSizeHigh=0x0, nFileSizeLow=0xc360, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKxGP3v8wZuO1y.flv", cAlternateFileName="HKXGP3~1.FLV")) returned 1 [0103.112] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90337b0, ftCreationTime.dwHighDateTime=0x1d5ec62, ftLastAccessTime.dwLowDateTime=0xdb74c20, ftLastAccessTime.dwHighDateTime=0x1d5e98b, ftLastWriteTime.dwLowDateTime=0xdb74c20, ftLastWriteTime.dwHighDateTime=0x1d5e98b, nFileSizeHigh=0x0, nFileSizeLow=0x13fcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="hvJ4 Xf85XgQ.wav", cAlternateFileName="HVJ4XF~1.WAV")) returned 1 [0103.112] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3719da0, ftCreationTime.dwHighDateTime=0x1d5ed9d, ftLastAccessTime.dwLowDateTime=0x1696e0b0, ftLastAccessTime.dwHighDateTime=0x1d5e7f8, ftLastWriteTime.dwLowDateTime=0x1696e0b0, ftLastWriteTime.dwHighDateTime=0x1d5e7f8, nFileSizeHigh=0x0, nFileSizeLow=0x167c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="qSAbMWl.avi", cAlternateFileName="")) returned 1 [0103.112] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73711ba0, ftCreationTime.dwHighDateTime=0x1d5ed40, ftLastAccessTime.dwLowDateTime=0xed17b480, ftLastAccessTime.dwHighDateTime=0x1d5f102, ftLastWriteTime.dwLowDateTime=0xed17b480, ftLastWriteTime.dwHighDateTime=0x1d5f102, nFileSizeHigh=0x0, nFileSizeLow=0x10e4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sTC4gXnSDMRk-c.ppt", cAlternateFileName="STC4GX~1.PPT")) returned 1 [0103.113] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38843270, ftCreationTime.dwHighDateTime=0x1d5e4bc, ftLastAccessTime.dwLowDateTime=0x8c57bc50, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x8c57bc50, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x7dc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="vLRy6aZeYgdq9Y.mp3", cAlternateFileName="VLRY6A~1.MP3")) returned 1 [0103.113] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe61c3950, ftCreationTime.dwHighDateTime=0x1d5e64c, ftLastAccessTime.dwLowDateTime=0x627ac460, ftLastAccessTime.dwHighDateTime=0x1d5ed7f, ftLastWriteTime.dwLowDateTime=0x627ac460, ftLastWriteTime.dwHighDateTime=0x1d5ed7f, nFileSizeHigh=0x0, nFileSizeLow=0x6223, dwReserved0=0x0, dwReserved1=0x0, cFileName="ymZyLC-Yu7ctXM-1.ppt", cAlternateFileName="YMZYLC~1.PPT")) returned 1 [0103.113] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe61c3950, ftCreationTime.dwHighDateTime=0x1d5e64c, ftLastAccessTime.dwLowDateTime=0x627ac460, ftLastAccessTime.dwHighDateTime=0x1d5ed7f, ftLastWriteTime.dwLowDateTime=0x627ac460, ftLastWriteTime.dwHighDateTime=0x1d5ed7f, nFileSizeHigh=0x0, nFileSizeLow=0x6223, dwReserved0=0x0, dwReserved1=0x0, cFileName="ymZyLC-Yu7ctXM-1.ppt", cAlternateFileName="YMZYLC~1.PPT")) returned 0 [0103.113] FindClose (in: hFindFile=0x13fd558 | out: hFindFile=0x13fd558) returned 1 [0103.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0103.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0103.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0103.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pfJ9-Grb4Gam66e", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pfJ9-Grb4Gam66e", lpFilePart=0x0) returned 0x27 [0103.114] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pfJ9-Grb4Gam66e\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28e6e600, ftCreationTime.dwHighDateTime=0x1d5e5c0, ftLastAccessTime.dwLowDateTime=0xe01e1ec0, ftLastAccessTime.dwHighDateTime=0x1d5e119, ftLastWriteTime.dwLowDateTime=0xe01e1ec0, ftLastWriteTime.dwHighDateTime=0x1d5e119, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd918 [0103.115] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28e6e600, ftCreationTime.dwHighDateTime=0x1d5e5c0, ftLastAccessTime.dwLowDateTime=0xe01e1ec0, ftLastAccessTime.dwHighDateTime=0x1d5e119, ftLastWriteTime.dwLowDateTime=0xe01e1ec0, ftLastWriteTime.dwHighDateTime=0x1d5e119, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.116] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e51b0, ftCreationTime.dwHighDateTime=0x1d5e9f1, ftLastAccessTime.dwLowDateTime=0xde8dffe0, ftLastAccessTime.dwHighDateTime=0x1d5e17c, ftLastWriteTime.dwLowDateTime=0xde8dffe0, ftLastWriteTime.dwHighDateTime=0x1d5e17c, nFileSizeHigh=0x0, nFileSizeLow=0x12f7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="1IrsoMbaAb9pgFff.mp3", cAlternateFileName="1IRSOM~1.MP3")) returned 1 [0103.116] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1389850, ftCreationTime.dwHighDateTime=0x1d5e1f0, ftLastAccessTime.dwLowDateTime=0x54f5bdd0, ftLastAccessTime.dwHighDateTime=0x1d5ea97, ftLastWriteTime.dwLowDateTime=0x54f5bdd0, ftLastWriteTime.dwHighDateTime=0x1d5ea97, nFileSizeHigh=0x0, nFileSizeLow=0xb21c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7TGK.odp", cAlternateFileName="")) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55fc590, ftCreationTime.dwHighDateTime=0x1d5eaa3, ftLastAccessTime.dwLowDateTime=0xab93a60, ftLastAccessTime.dwHighDateTime=0x1d5ea67, ftLastWriteTime.dwLowDateTime=0xab93a60, ftLastWriteTime.dwHighDateTime=0x1d5ea67, nFileSizeHigh=0x0, nFileSizeLow=0xbad6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTjUvLDnSqqoO.avi", cAlternateFileName="AUTJUV~1.AVI")) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284f10f0, ftCreationTime.dwHighDateTime=0x1d5e930, ftLastAccessTime.dwLowDateTime=0x543e5050, ftLastAccessTime.dwHighDateTime=0x1d5ecea, ftLastWriteTime.dwLowDateTime=0x543e5050, ftLastWriteTime.dwHighDateTime=0x1d5ecea, nFileSizeHigh=0x0, nFileSizeLow=0xc07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSyEYH.pps", cAlternateFileName="")) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862ac230, ftCreationTime.dwHighDateTime=0x1d5e0d6, ftLastAccessTime.dwLowDateTime=0xbdd08270, ftLastAccessTime.dwHighDateTime=0x1d5e111, ftLastWriteTime.dwLowDateTime=0xbdd08270, ftLastWriteTime.dwHighDateTime=0x1d5e111, nFileSizeHigh=0x0, nFileSizeLow=0xf0a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_9Y7FY32jltQTnk.m4a", cAlternateFileName="B_9Y7F~1.M4A")) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65571d0, ftCreationTime.dwHighDateTime=0x1d5e75d, ftLastAccessTime.dwLowDateTime=0xf933a530, ftLastAccessTime.dwHighDateTime=0x1d5e865, ftLastWriteTime.dwLowDateTime=0xf933a530, ftLastWriteTime.dwHighDateTime=0x1d5e865, nFileSizeHigh=0x0, nFileSizeLow=0x1e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="e0W3t1XHOLbp0.odp", cAlternateFileName="E0W3T1~1.ODP")) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862411a0, ftCreationTime.dwHighDateTime=0x1d5e59b, ftLastAccessTime.dwLowDateTime=0x72ec7f40, ftLastAccessTime.dwHighDateTime=0x1d5ee25, ftLastWriteTime.dwLowDateTime=0x72ec7f40, ftLastWriteTime.dwHighDateTime=0x1d5ee25, nFileSizeHigh=0x0, nFileSizeLow=0x1200b, dwReserved0=0x0, dwReserved1=0x0, cFileName="hfwT-Yk0P8NWV.mkv", cAlternateFileName="HFWT-Y~1.MKV")) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf658780, ftCreationTime.dwHighDateTime=0x1d5e16b, ftLastAccessTime.dwLowDateTime=0xdf02fc20, ftLastAccessTime.dwHighDateTime=0x1d5ea6c, ftLastWriteTime.dwLowDateTime=0xdf02fc20, ftLastWriteTime.dwHighDateTime=0x1d5ea6c, nFileSizeHigh=0x0, nFileSizeLow=0xc360, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKxGP3v8wZuO1y.flv", cAlternateFileName="HKXGP3~1.FLV")) returned 1 [0103.118] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90337b0, ftCreationTime.dwHighDateTime=0x1d5ec62, ftLastAccessTime.dwLowDateTime=0xdb74c20, ftLastAccessTime.dwHighDateTime=0x1d5e98b, ftLastWriteTime.dwLowDateTime=0xdb74c20, ftLastWriteTime.dwHighDateTime=0x1d5e98b, nFileSizeHigh=0x0, nFileSizeLow=0x13fcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="hvJ4 Xf85XgQ.wav", cAlternateFileName="HVJ4XF~1.WAV")) returned 1 [0103.118] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3719da0, ftCreationTime.dwHighDateTime=0x1d5ed9d, ftLastAccessTime.dwLowDateTime=0x1696e0b0, ftLastAccessTime.dwHighDateTime=0x1d5e7f8, ftLastWriteTime.dwLowDateTime=0x1696e0b0, ftLastWriteTime.dwHighDateTime=0x1d5e7f8, nFileSizeHigh=0x0, nFileSizeLow=0x167c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="qSAbMWl.avi", cAlternateFileName="")) returned 1 [0103.118] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73711ba0, ftCreationTime.dwHighDateTime=0x1d5ed40, ftLastAccessTime.dwLowDateTime=0xed17b480, ftLastAccessTime.dwHighDateTime=0x1d5f102, ftLastWriteTime.dwLowDateTime=0xed17b480, ftLastWriteTime.dwHighDateTime=0x1d5f102, nFileSizeHigh=0x0, nFileSizeLow=0x10e4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sTC4gXnSDMRk-c.ppt", cAlternateFileName="STC4GX~1.PPT")) returned 1 [0103.118] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38843270, ftCreationTime.dwHighDateTime=0x1d5e4bc, ftLastAccessTime.dwLowDateTime=0x8c57bc50, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x8c57bc50, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x7dc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="vLRy6aZeYgdq9Y.mp3", cAlternateFileName="VLRY6A~1.MP3")) returned 1 [0103.118] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe61c3950, ftCreationTime.dwHighDateTime=0x1d5e64c, ftLastAccessTime.dwLowDateTime=0x627ac460, ftLastAccessTime.dwHighDateTime=0x1d5ed7f, ftLastWriteTime.dwLowDateTime=0x627ac460, ftLastWriteTime.dwHighDateTime=0x1d5ed7f, nFileSizeHigh=0x0, nFileSizeLow=0x6223, dwReserved0=0x0, dwReserved1=0x0, cFileName="ymZyLC-Yu7ctXM-1.ppt", cAlternateFileName="YMZYLC~1.PPT")) returned 1 [0103.119] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.119] FindClose (in: hFindFile=0x13fd918 | out: hFindFile=0x13fd918) returned 1 [0103.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0103.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0103.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0103.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0103.119] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1381d081, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x1381d081, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd918 [0103.120] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1381d081, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x1381d081, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.120] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26edfe10, ftCreationTime.dwHighDateTime=0x1d5ec14, ftLastAccessTime.dwLowDateTime=0x58b11aa0, ftLastAccessTime.dwHighDateTime=0x1d5e943, ftLastWriteTime.dwLowDateTime=0x58b11aa0, ftLastWriteTime.dwHighDateTime=0x1d5e943, nFileSizeHigh=0x0, nFileSizeLow=0x4c49, dwReserved0=0x0, dwReserved1=0x0, cFileName="-7gEihQNLL7BJ.jpg", cAlternateFileName="-7GEIH~1.JPG")) returned 1 [0103.120] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2d88270, ftCreationTime.dwHighDateTime=0x1d5ed0f, ftLastAccessTime.dwLowDateTime=0xdd1e7130, ftLastAccessTime.dwHighDateTime=0x1d5e528, ftLastWriteTime.dwLowDateTime=0xdd1e7130, ftLastWriteTime.dwHighDateTime=0x1d5e528, nFileSizeHigh=0x0, nFileSizeLow=0x130b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="-z-Li5hFd.mp3", cAlternateFileName="-Z-LI5~1.MP3")) returned 1 [0103.120] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dee6dc0, ftCreationTime.dwHighDateTime=0x1d5e8b8, ftLastAccessTime.dwLowDateTime=0xdb65a880, ftLastAccessTime.dwHighDateTime=0x1d5e8a8, ftLastWriteTime.dwLowDateTime=0xdb65a880, ftLastWriteTime.dwHighDateTime=0x1d5e8a8, nFileSizeHigh=0x0, nFileSizeLow=0x1387a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ZMhImbPPz6Bu8ctZ.gif", cAlternateFileName="0ZMHIM~1.GIF")) returned 1 [0103.120] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb00bfe40, ftCreationTime.dwHighDateTime=0x1d5e5f2, ftLastAccessTime.dwLowDateTime=0x712dfe40, ftLastAccessTime.dwHighDateTime=0x1d5f005, ftLastWriteTime.dwLowDateTime=0x712dfe40, ftLastWriteTime.dwHighDateTime=0x1d5f005, nFileSizeHigh=0x0, nFileSizeLow=0x14950, dwReserved0=0x0, dwReserved1=0x0, cFileName="5czk0AiMnrY.mp4", cAlternateFileName="5CZK0A~1.MP4")) returned 1 [0103.121] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e77a050, ftCreationTime.dwHighDateTime=0x1d5ec26, ftLastAccessTime.dwLowDateTime=0xfe1582f0, ftLastAccessTime.dwHighDateTime=0x1d5e327, ftLastWriteTime.dwLowDateTime=0xfe1582f0, ftLastWriteTime.dwHighDateTime=0x1d5e327, nFileSizeHigh=0x0, nFileSizeLow=0x56c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="67KYe6P-sh8CO4U.pptx", cAlternateFileName="67KYE6~1.PPT")) returned 1 [0103.121] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4c9480, ftCreationTime.dwHighDateTime=0x1d5eca2, ftLastAccessTime.dwLowDateTime=0xe80a3ef0, ftLastAccessTime.dwHighDateTime=0x1d5eb34, ftLastWriteTime.dwLowDateTime=0xe80a3ef0, ftLastWriteTime.dwHighDateTime=0x1d5eb34, nFileSizeHigh=0x0, nFileSizeLow=0x2322, dwReserved0=0x0, dwReserved1=0x0, cFileName="6wZ 3eZOEM3qP5.png", cAlternateFileName="6WZ3EZ~1.PNG")) returned 1 [0103.121] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5565d240, ftCreationTime.dwHighDateTime=0x1d5ec9b, ftLastAccessTime.dwLowDateTime=0x3a864480, ftLastAccessTime.dwHighDateTime=0x1d5e860, ftLastWriteTime.dwLowDateTime=0x3a864480, ftLastWriteTime.dwHighDateTime=0x1d5e860, nFileSizeHigh=0x0, nFileSizeLow=0xb551, dwReserved0=0x0, dwReserved1=0x0, cFileName="8jt8LLXyOZgw.avi", cAlternateFileName="8JT8LL~1.AVI")) returned 1 [0103.121] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcc30a00, ftCreationTime.dwHighDateTime=0x1d694aa, ftLastAccessTime.dwLowDateTime=0xfcc30a00, ftLastAccessTime.dwHighDateTime=0x1d694aa, ftLastWriteTime.dwLowDateTime=0xa7d2c400, ftLastWriteTime.dwHighDateTime=0x1d694a9, nFileSizeHigh=0x0, nFileSizeLow=0xd2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="CardGame.exe", cAlternateFileName="")) returned 1 [0103.121] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0103.122] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91ed3b0, ftCreationTime.dwHighDateTime=0x1d5eb1c, ftLastAccessTime.dwLowDateTime=0xc49197f0, ftLastAccessTime.dwHighDateTime=0x1d5e35c, ftLastWriteTime.dwLowDateTime=0xc49197f0, ftLastWriteTime.dwHighDateTime=0x1d5e35c, nFileSizeHigh=0x0, nFileSizeLow=0x1495e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DM1zFzr 1O.bmp", cAlternateFileName="DM1ZFZ~1.BMP")) returned 1 [0103.122] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda3a360, ftCreationTime.dwHighDateTime=0x1d5ea57, ftLastAccessTime.dwLowDateTime=0x9b37970, ftLastAccessTime.dwHighDateTime=0x1d5ecf4, ftLastWriteTime.dwLowDateTime=0x9b37970, ftLastWriteTime.dwHighDateTime=0x1d5ecf4, nFileSizeHigh=0x0, nFileSizeLow=0xf170, dwReserved0=0x0, dwReserved1=0x0, cFileName="d_zdRE.mp4", cAlternateFileName="")) returned 1 [0103.122] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87f280c0, ftCreationTime.dwHighDateTime=0x1d5e532, ftLastAccessTime.dwLowDateTime=0x90ce6b0, ftLastAccessTime.dwHighDateTime=0x1d5e3d4, ftLastWriteTime.dwLowDateTime=0x90ce6b0, ftLastWriteTime.dwHighDateTime=0x1d5e3d4, nFileSizeHigh=0x0, nFileSizeLow=0xc120, dwReserved0=0x0, dwReserved1=0x0, cFileName="e7uGEaLylJ.png", cAlternateFileName="E7UGEA~1.PNG")) returned 1 [0103.122] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe34a04c0, ftCreationTime.dwHighDateTime=0x1d5e0e1, ftLastAccessTime.dwLowDateTime=0xb53048c0, ftLastAccessTime.dwHighDateTime=0x1d5e7f2, ftLastWriteTime.dwLowDateTime=0xb53048c0, ftLastWriteTime.dwHighDateTime=0x1d5e7f2, nFileSizeHigh=0x0, nFileSizeLow=0x6bbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="EqNOEROZFyyl.bmp", cAlternateFileName="EQNOER~1.BMP")) returned 1 [0103.123] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0ced70, ftCreationTime.dwHighDateTime=0x1d5eb37, ftLastAccessTime.dwLowDateTime=0x20ab2f10, ftLastAccessTime.dwHighDateTime=0x1d5e3d0, ftLastWriteTime.dwLowDateTime=0x20ab2f10, ftLastWriteTime.dwHighDateTime=0x1d5e3d0, nFileSizeHigh=0x0, nFileSizeLow=0x14e6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKh7RwVW47wI.csv", cAlternateFileName="GKH7RW~1.CSV")) returned 1 [0103.123] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff828e60, ftCreationTime.dwHighDateTime=0x1d5e833, ftLastAccessTime.dwLowDateTime=0xab09eab0, ftLastAccessTime.dwHighDateTime=0x1d5e453, ftLastWriteTime.dwLowDateTime=0xab09eab0, ftLastWriteTime.dwHighDateTime=0x1d5e453, nFileSizeHigh=0x0, nFileSizeLow=0x1466b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GnnPd4nKHncT614x7YWX.flv", cAlternateFileName="GNNPD4~1.FLV")) returned 1 [0103.123] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dea5100, ftCreationTime.dwHighDateTime=0x1d5ea29, ftLastAccessTime.dwLowDateTime=0xd8200420, ftLastAccessTime.dwHighDateTime=0x1d5e3aa, ftLastWriteTime.dwLowDateTime=0xd8200420, ftLastWriteTime.dwHighDateTime=0x1d5e3aa, nFileSizeHigh=0x0, nFileSizeLow=0x7129, dwReserved0=0x0, dwReserved1=0x0, cFileName="gsViRH3d.odt", cAlternateFileName="")) returned 1 [0103.123] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7b6dc0, ftCreationTime.dwHighDateTime=0x1d5ec1d, ftLastAccessTime.dwLowDateTime=0x4d6678b0, ftLastAccessTime.dwHighDateTime=0x1d5efe8, ftLastWriteTime.dwLowDateTime=0x4d6678b0, ftLastWriteTime.dwHighDateTime=0x1d5efe8, nFileSizeHigh=0x0, nFileSizeLow=0x16fd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="H0NQC_GJOYxHd7LAhuc.rtf", cAlternateFileName="H0NQC_~1.RTF")) returned 1 [0103.123] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb427d00, ftCreationTime.dwHighDateTime=0x1d5e424, ftLastAccessTime.dwLowDateTime=0xb0cfd0d0, ftLastAccessTime.dwHighDateTime=0x1d5ea8f, ftLastWriteTime.dwLowDateTime=0xb0cfd0d0, ftLastWriteTime.dwHighDateTime=0x1d5ea8f, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="i0Y3XU7Vh-UKMBjhV6M.xls", cAlternateFileName="I0Y3XU~1.XLS")) returned 1 [0103.123] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a92000, ftCreationTime.dwHighDateTime=0x1d5eb49, ftLastAccessTime.dwLowDateTime=0x85114fc0, ftLastAccessTime.dwHighDateTime=0x1d5e3f3, ftLastWriteTime.dwLowDateTime=0x85114fc0, ftLastWriteTime.dwHighDateTime=0x1d5e3f3, nFileSizeHigh=0x0, nFileSizeLow=0x51d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="jcdiSJQPBvqUBx8 r.flv", cAlternateFileName="JCDISJ~1.FLV")) returned 1 [0103.124] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f242340, ftCreationTime.dwHighDateTime=0x1d5e8c0, ftLastAccessTime.dwLowDateTime=0xb1754bc0, ftLastAccessTime.dwHighDateTime=0x1d5e501, ftLastWriteTime.dwLowDateTime=0xb1754bc0, ftLastWriteTime.dwHighDateTime=0x1d5e501, nFileSizeHigh=0x0, nFileSizeLow=0x17a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="kSyeUF82R.wav", cAlternateFileName="KSYEUF~1.WAV")) returned 1 [0103.124] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1936030, ftCreationTime.dwHighDateTime=0x1d5ed2d, ftLastAccessTime.dwLowDateTime=0xb2b6a720, ftLastAccessTime.dwHighDateTime=0x1d5ef4e, ftLastWriteTime.dwLowDateTime=0xb2b6a720, ftLastWriteTime.dwHighDateTime=0x1d5ef4e, nFileSizeHigh=0x0, nFileSizeLow=0xe9cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="kxwl2Nyo9U0OcTApBggA.mkv", cAlternateFileName="KXWL2N~1.MKV")) returned 1 [0103.124] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1f6020, ftCreationTime.dwHighDateTime=0x1d5ebf6, ftLastAccessTime.dwLowDateTime=0xdb47f960, ftLastAccessTime.dwHighDateTime=0x1d5e23c, ftLastWriteTime.dwLowDateTime=0xdb47f960, ftLastWriteTime.dwHighDateTime=0x1d5e23c, nFileSizeHigh=0x0, nFileSizeLow=0x1887e, dwReserved0=0x0, dwReserved1=0x0, cFileName="L7l-rJ5_O.m4a", cAlternateFileName="L7L-RJ~1.M4A")) returned 1 [0103.124] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1f7e330, ftCreationTime.dwHighDateTime=0x1d5e396, ftLastAccessTime.dwLowDateTime=0x4c1aa330, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0x4c1aa330, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x4c8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lv7kY3iq1NSBMygmLCxl.swf", cAlternateFileName="LV7KY3~1.SWF")) returned 1 [0103.124] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd7bcc40, ftCreationTime.dwHighDateTime=0x1d5e79a, ftLastAccessTime.dwLowDateTime=0x17bb2e20, ftLastAccessTime.dwHighDateTime=0x1d5e9f5, ftLastWriteTime.dwLowDateTime=0x17bb2e20, ftLastWriteTime.dwHighDateTime=0x1d5e9f5, nFileSizeHigh=0x0, nFileSizeLow=0x163f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="nkVUOj N7QkB5UTJAbnQ.bmp", cAlternateFileName="NKVUOJ~1.BMP")) returned 1 [0103.124] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881852e0, ftCreationTime.dwHighDateTime=0x1d5e2ae, ftLastAccessTime.dwLowDateTime=0x9f8f8d50, ftLastAccessTime.dwHighDateTime=0x1d5f076, ftLastWriteTime.dwLowDateTime=0x9f8f8d50, ftLastWriteTime.dwHighDateTime=0x1d5f076, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nWZX.mp3", cAlternateFileName="")) returned 1 [0103.125] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc369730, ftCreationTime.dwHighDateTime=0x1d5e728, ftLastAccessTime.dwLowDateTime=0x8474e960, ftLastAccessTime.dwHighDateTime=0x1d5ea2d, ftLastWriteTime.dwLowDateTime=0x8474e960, ftLastWriteTime.dwHighDateTime=0x1d5ea2d, nFileSizeHigh=0x0, nFileSizeLow=0x11893, dwReserved0=0x0, dwReserved1=0x0, cFileName="nYZo51s.jpg", cAlternateFileName="")) returned 1 [0103.125] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128d8910, ftCreationTime.dwHighDateTime=0x1d5ecbc, ftLastAccessTime.dwLowDateTime=0x650854f0, ftLastAccessTime.dwHighDateTime=0x1d5eeaf, ftLastWriteTime.dwLowDateTime=0x650854f0, ftLastWriteTime.dwHighDateTime=0x1d5eeaf, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE5l_.m4a", cAlternateFileName="")) returned 1 [0103.125] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28e6e600, ftCreationTime.dwHighDateTime=0x1d5e5c0, ftLastAccessTime.dwLowDateTime=0xe01e1ec0, ftLastAccessTime.dwHighDateTime=0x1d5e119, ftLastWriteTime.dwLowDateTime=0xe01e1ec0, ftLastWriteTime.dwHighDateTime=0x1d5e119, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pfJ9-Grb4Gam66e", cAlternateFileName="PFJ9-G~1")) returned 1 [0103.125] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb46c0b0, ftCreationTime.dwHighDateTime=0x1d5ec29, ftLastAccessTime.dwLowDateTime=0xc6a5af80, ftLastAccessTime.dwHighDateTime=0x1d5ef10, ftLastWriteTime.dwLowDateTime=0xc6a5af80, ftLastWriteTime.dwHighDateTime=0x1d5ef10, nFileSizeHigh=0x0, nFileSizeLow=0xeb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGgcq.mp3", cAlternateFileName="")) returned 1 [0103.125] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a520b90, ftCreationTime.dwHighDateTime=0x1d5f091, ftLastAccessTime.dwLowDateTime=0x6a2e5630, ftLastAccessTime.dwHighDateTime=0x1d5e835, ftLastWriteTime.dwLowDateTime=0x6a2e5630, ftLastWriteTime.dwHighDateTime=0x1d5e835, nFileSizeHigh=0x0, nFileSizeLow=0x5b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="puBZjomV6GOHhpRB8lAc.wav", cAlternateFileName="PUBZJO~1.WAV")) returned 1 [0103.126] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734badc0, ftCreationTime.dwHighDateTime=0x1d5efbb, ftLastAccessTime.dwLowDateTime=0xce4929e0, ftLastAccessTime.dwHighDateTime=0x1d5f057, ftLastWriteTime.dwLowDateTime=0xce4929e0, ftLastWriteTime.dwHighDateTime=0x1d5f057, nFileSizeHigh=0x0, nFileSizeLow=0x686b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QgIoeiRRd.wav", cAlternateFileName="QGIOEI~1.WAV")) returned 1 [0103.126] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1a9810, ftCreationTime.dwHighDateTime=0x1d5e8e2, ftLastAccessTime.dwLowDateTime=0x75caf280, ftLastAccessTime.dwHighDateTime=0x1d5e850, ftLastWriteTime.dwLowDateTime=0x75caf280, ftLastWriteTime.dwHighDateTime=0x1d5e850, nFileSizeHigh=0x0, nFileSizeLow=0x104ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="rbgbzG.bmp", cAlternateFileName="")) returned 1 [0103.126] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8099830, ftCreationTime.dwHighDateTime=0x1d5ece0, ftLastAccessTime.dwLowDateTime=0xb1aecc0, ftLastAccessTime.dwHighDateTime=0x1d5ecb4, ftLastWriteTime.dwLowDateTime=0xb1aecc0, ftLastWriteTime.dwHighDateTime=0x1d5ecb4, nFileSizeHigh=0x0, nFileSizeLow=0x8ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sz7SJzZ.mp3", cAlternateFileName="")) returned 1 [0103.126] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5d80, ftCreationTime.dwHighDateTime=0x1d5ec28, ftLastAccessTime.dwLowDateTime=0x4cb926b0, ftLastAccessTime.dwHighDateTime=0x1d5e10b, ftLastWriteTime.dwLowDateTime=0x4cb926b0, ftLastWriteTime.dwHighDateTime=0x1d5e10b, nFileSizeHigh=0x0, nFileSizeLow=0x159ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="T2QbMoIKvY4rR-.rtf", cAlternateFileName="T2QBMO~1.RTF")) returned 1 [0103.126] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7863d1e0, ftCreationTime.dwHighDateTime=0x1d5e226, ftLastAccessTime.dwLowDateTime=0xfc38ed60, ftLastAccessTime.dwHighDateTime=0x1d5e0fb, ftLastWriteTime.dwLowDateTime=0xfc38ed60, ftLastWriteTime.dwHighDateTime=0x1d5e0fb, nFileSizeHigh=0x0, nFileSizeLow=0x25e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tsj_CuF98dlIN3cxv0.swf", cAlternateFileName="TSJ_CU~1.SWF")) returned 1 [0103.127] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450d3da0, ftCreationTime.dwHighDateTime=0x1d5e5b3, ftLastAccessTime.dwLowDateTime=0xb965c020, ftLastAccessTime.dwHighDateTime=0x1d5e1d3, ftLastWriteTime.dwLowDateTime=0xb965c020, ftLastWriteTime.dwHighDateTime=0x1d5e1d3, nFileSizeHigh=0x0, nFileSizeLow=0xbd39, dwReserved0=0x0, dwReserved1=0x0, cFileName="vgVoYDiPiQ8ZW6le.flv", cAlternateFileName="VGVOYD~1.FLV")) returned 1 [0103.127] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd561b4c0, ftCreationTime.dwHighDateTime=0x1d5e90b, ftLastAccessTime.dwLowDateTime=0x7d155730, ftLastAccessTime.dwHighDateTime=0x1d5f078, ftLastWriteTime.dwLowDateTime=0x7d155730, ftLastWriteTime.dwHighDateTime=0x1d5f078, nFileSizeHigh=0x0, nFileSizeLow=0x34fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSkkEoNsyYPDMZ--.wav", cAlternateFileName="VSKKEO~1.WAV")) returned 1 [0103.127] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a597f0, ftCreationTime.dwHighDateTime=0x1d5e34a, ftLastAccessTime.dwLowDateTime=0x608dda80, ftLastAccessTime.dwHighDateTime=0x1d5eba8, ftLastWriteTime.dwLowDateTime=0x608dda80, ftLastWriteTime.dwHighDateTime=0x1d5eba8, nFileSizeHigh=0x0, nFileSizeLow=0x14d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="wPhLVG.avi", cAlternateFileName="")) returned 1 [0103.127] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fadf2b0, ftCreationTime.dwHighDateTime=0x1d5f0bb, ftLastAccessTime.dwLowDateTime=0xaa3b45c0, ftLastAccessTime.dwHighDateTime=0x1d5e895, ftLastWriteTime.dwLowDateTime=0xaa3b45c0, ftLastWriteTime.dwHighDateTime=0x1d5e895, nFileSizeHigh=0x0, nFileSizeLow=0xcc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZyjTEjw7C_25gW1D21.bmp", cAlternateFileName="ZYJTEJ~1.BMP")) returned 1 [0103.127] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.127] FindClose (in: hFindFile=0x13fd918 | out: hFindFile=0x13fd918) returned 1 [0103.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0103.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0103.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x614ef9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0103.135] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Desktop.txt", nBufferLength=0x105, lpBuffer=0x614ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Desktop.txt", lpFilePart=0x0) returned 0x75 [0103.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f39c) returned 1 [0103.135] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Desktop.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\dirs\\desktop.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x568 [0103.136] GetFileType (hFile=0x568) returned 0x1 [0103.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f398) returned 1 [0103.136] GetFileType (hFile=0x568) returned 0x1 [0103.138] WriteFile (in: hFile=0x568, lpBuffer=0x3028f20*, nNumberOfBytesToWrite=0x403, lpNumberOfBytesWritten=0x614f418, lpOverlapped=0x0 | out: lpBuffer=0x3028f20*, lpNumberOfBytesWritten=0x614f418*=0x403, lpOverlapped=0x0) returned 1 [0103.140] CloseHandle (hObject=0x568) returned 1 [0103.143] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x614ef60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0103.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f410) returned 1 [0103.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents" (normalized: "c:\\users\\fd1hvy\\documents"), fInfoLevelId=0x0, lpFileInformation=0x614f48c | out: lpFileInformation=0x614f48c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6ae37c8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6ae37c8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0103.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f40c) returned 1 [0103.143] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x614ef68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0103.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0103.144] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0103.144] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6ae37c8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6ae37c8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd918 [0103.144] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6ae37c8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6ae37c8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.144] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce73290, ftCreationTime.dwHighDateTime=0x1d5b1d2, ftLastAccessTime.dwLowDateTime=0x94aa7750, ftLastAccessTime.dwHighDateTime=0x1d5704d, ftLastWriteTime.dwLowDateTime=0x94aa7750, ftLastWriteTime.dwHighDateTime=0x1d5704d, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="0 OfC-.xlsx", cAlternateFileName="0OFC-~1.XLS")) returned 1 [0103.145] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d49e80, ftCreationTime.dwHighDateTime=0x1d5d584, ftLastAccessTime.dwLowDateTime=0xd1e5fab0, ftLastAccessTime.dwHighDateTime=0x1d5c70d, ftLastWriteTime.dwLowDateTime=0xd1e5fab0, ftLastWriteTime.dwHighDateTime=0x1d5c70d, nFileSizeHigh=0x0, nFileSizeLow=0x8262, dwReserved0=0x0, dwReserved1=0x0, cFileName="31Yv.docx", cAlternateFileName="31YV~1.DOC")) returned 1 [0103.145] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ba4a010, ftCreationTime.dwHighDateTime=0x1d5eb0f, ftLastAccessTime.dwLowDateTime=0xe27c3eb0, ftLastAccessTime.dwHighDateTime=0x1d5e469, ftLastWriteTime.dwLowDateTime=0xe27c3eb0, ftLastWriteTime.dwHighDateTime=0x1d5e469, nFileSizeHigh=0x0, nFileSizeLow=0x18caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="5N9Mxc0QLtZgYNRZ_6.odp", cAlternateFileName="5N9MXC~1.ODP")) returned 1 [0103.145] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b21dd90, ftCreationTime.dwHighDateTime=0x1d594c2, ftLastAccessTime.dwLowDateTime=0xb3ad04e0, ftLastAccessTime.dwHighDateTime=0x1d5ab7d, ftLastWriteTime.dwLowDateTime=0xb3ad04e0, ftLastWriteTime.dwHighDateTime=0x1d5ab7d, nFileSizeHigh=0x0, nFileSizeLow=0xfaf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="5TfVoGm.xlsx", cAlternateFileName="5TFVOG~1.XLS")) returned 1 [0103.145] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6681bec0, ftCreationTime.dwHighDateTime=0x1d59f40, ftLastAccessTime.dwLowDateTime=0xaf5bed30, ftLastAccessTime.dwHighDateTime=0x1d5c058, ftLastWriteTime.dwLowDateTime=0xaf5bed30, ftLastWriteTime.dwHighDateTime=0x1d5c058, nFileSizeHigh=0x0, nFileSizeLow=0x9194, dwReserved0=0x0, dwReserved1=0x0, cFileName="bi_ZofT43rZix.pptx", cAlternateFileName="BI_ZOF~1.PPT")) returned 1 [0103.145] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0103.146] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0103.146] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3df80, ftCreationTime.dwHighDateTime=0x1d5afa5, ftLastAccessTime.dwLowDateTime=0x91855780, ftLastAccessTime.dwHighDateTime=0x1d5bd86, ftLastWriteTime.dwLowDateTime=0x91855780, ftLastWriteTime.dwHighDateTime=0x1d5bd86, nFileSizeHigh=0x0, nFileSizeLow=0x14ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dz7NjZDelD7pGdYK.docx", cAlternateFileName="DZ7NJZ~1.DOC")) returned 1 [0103.146] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ecc540, ftCreationTime.dwHighDateTime=0x1d5db1b, ftLastAccessTime.dwLowDateTime=0x9c8df910, ftLastAccessTime.dwHighDateTime=0x1d592df, ftLastWriteTime.dwLowDateTime=0x9c8df910, ftLastWriteTime.dwHighDateTime=0x1d592df, nFileSizeHigh=0x0, nFileSizeLow=0x10ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAizo747lI9UoNOSu.pptx", cAlternateFileName="EAIZO7~1.PPT")) returned 1 [0103.146] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafb39c80, ftCreationTime.dwHighDateTime=0x1d5ed2e, ftLastAccessTime.dwLowDateTime=0xd0b2cae0, ftLastAccessTime.dwHighDateTime=0x1d5e988, ftLastWriteTime.dwLowDateTime=0xd0b2cae0, ftLastWriteTime.dwHighDateTime=0x1d5e988, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FtJmRiFEkGQl", cAlternateFileName="FTJMRI~1")) returned 1 [0103.147] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f41630, ftCreationTime.dwHighDateTime=0x1d5d9d2, ftLastAccessTime.dwLowDateTime=0xb878f660, ftLastAccessTime.dwHighDateTime=0x1d5d994, ftLastWriteTime.dwLowDateTime=0xb878f660, ftLastWriteTime.dwHighDateTime=0x1d5d994, nFileSizeHigh=0x0, nFileSizeLow=0xc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITXfD3-mmNBXv9-.docx", cAlternateFileName="ITXFD3~1.DOC")) returned 1 [0103.147] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5afdbf0, ftCreationTime.dwHighDateTime=0x1d5d0c7, ftLastAccessTime.dwLowDateTime=0xc194afc0, ftLastAccessTime.dwHighDateTime=0x1d5d091, ftLastWriteTime.dwLowDateTime=0xc194afc0, ftLastWriteTime.dwHighDateTime=0x1d5d091, nFileSizeHigh=0x0, nFileSizeLow=0x1d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="jzo42Gku-b.pptx", cAlternateFileName="JZO42G~1.PPT")) returned 1 [0103.147] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0103.147] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0103.147] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0103.148] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0103.148] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd7528a0, ftCreationTime.dwHighDateTime=0x1d5ca3f, ftLastAccessTime.dwLowDateTime=0x51928a30, ftLastAccessTime.dwHighDateTime=0x1d5c47a, ftLastWriteTime.dwLowDateTime=0x51928a30, ftLastWriteTime.dwHighDateTime=0x1d5c47a, nFileSizeHigh=0x0, nFileSizeLow=0x8bf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="N6PpHYWf.docx", cAlternateFileName="N6PPHY~1.DOC")) returned 1 [0103.148] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7351690, ftCreationTime.dwHighDateTime=0x1d5b67b, ftLastAccessTime.dwLowDateTime=0xcc88d80, ftLastAccessTime.dwHighDateTime=0x1d59fd8, ftLastWriteTime.dwLowDateTime=0xcc88d80, ftLastWriteTime.dwHighDateTime=0x1d59fd8, nFileSizeHigh=0x0, nFileSizeLow=0xe2b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nc2WPLC4zn4D.pptx", cAlternateFileName="NC2WPL~1.PPT")) returned 1 [0103.148] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa233ea20, ftCreationTime.dwHighDateTime=0x1d5d1fd, ftLastAccessTime.dwLowDateTime=0x553605d0, ftLastAccessTime.dwHighDateTime=0x1d5d317, ftLastWriteTime.dwLowDateTime=0x553605d0, ftLastWriteTime.dwHighDateTime=0x1d5d317, nFileSizeHigh=0x0, nFileSizeLow=0xbe93, dwReserved0=0x0, dwReserved1=0x0, cFileName="oDVsaJrnoT9mWE09SE.xlsx", cAlternateFileName="ODVSAJ~1.XLS")) returned 1 [0103.149] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc823d520, ftCreationTime.dwHighDateTime=0x1d5eccd, ftLastAccessTime.dwLowDateTime=0xee29ac80, ftLastAccessTime.dwHighDateTime=0x1d5e3d7, ftLastWriteTime.dwLowDateTime=0xee29ac80, ftLastWriteTime.dwHighDateTime=0x1d5e3d7, nFileSizeHigh=0x0, nFileSizeLow=0x15a1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OF2JNjHkcnvg VIKrxm.pdf", cAlternateFileName="OF2JNJ~1.PDF")) returned 1 [0103.149] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5ee892ad, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0103.149] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6845fe0, ftCreationTime.dwHighDateTime=0x1d57c87, ftLastAccessTime.dwLowDateTime=0xa21bbdb0, ftLastAccessTime.dwHighDateTime=0x1d5cd5c, ftLastWriteTime.dwLowDateTime=0xa21bbdb0, ftLastWriteTime.dwHighDateTime=0x1d5cd5c, nFileSizeHigh=0x0, nFileSizeLow=0x13be, dwReserved0=0x0, dwReserved1=0x0, cFileName="pu-kzY_rIfgFT0Mteuo.xlsx", cAlternateFileName="PU-KZY~1.XLS")) returned 1 [0103.149] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x127662e0, ftCreationTime.dwHighDateTime=0x1d59a4f, ftLastAccessTime.dwLowDateTime=0x6d0a1810, ftLastAccessTime.dwHighDateTime=0x1d5dd83, ftLastWriteTime.dwLowDateTime=0x6d0a1810, ftLastWriteTime.dwHighDateTime=0x1d5dd83, nFileSizeHigh=0x0, nFileSizeLow=0x10472, dwReserved0=0x0, dwReserved1=0x0, cFileName="s9COU02KekciXUkK7.pptx", cAlternateFileName="S9COU0~1.PPT")) returned 1 [0103.149] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51694fa0, ftCreationTime.dwHighDateTime=0x1d5ea7f, ftLastAccessTime.dwLowDateTime=0xa2645b90, ftLastAccessTime.dwHighDateTime=0x1d5ebbd, ftLastWriteTime.dwLowDateTime=0xa2645b90, ftLastWriteTime.dwHighDateTime=0x1d5ebbd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="T infAuNyPv7fNplLc1", cAlternateFileName="TINFAU~1")) returned 1 [0103.150] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b326fd0, ftCreationTime.dwHighDateTime=0x1d5e896, ftLastAccessTime.dwLowDateTime=0xb59516b0, ftLastAccessTime.dwHighDateTime=0x1d5ed24, ftLastWriteTime.dwLowDateTime=0xb59516b0, ftLastWriteTime.dwHighDateTime=0x1d5ed24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uKdYVQpd", cAlternateFileName="")) returned 1 [0103.150] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7aa930, ftCreationTime.dwHighDateTime=0x1d5c4f6, ftLastAccessTime.dwLowDateTime=0x12f243d0, ftLastAccessTime.dwHighDateTime=0x1d590f2, ftLastWriteTime.dwLowDateTime=0x12f243d0, ftLastWriteTime.dwHighDateTime=0x1d590f2, nFileSizeHigh=0x0, nFileSizeLow=0x6e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZtOSRCjWb fj4I6a5Q.xlsx", cAlternateFileName="ZTOSRC~1.XLS")) returned 1 [0103.150] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22ac3220, ftCreationTime.dwHighDateTime=0x1d59b35, ftLastAccessTime.dwLowDateTime=0xd8e007c0, ftLastAccessTime.dwHighDateTime=0x1d568f3, ftLastWriteTime.dwLowDateTime=0xd8e007c0, ftLastWriteTime.dwHighDateTime=0x1d568f3, nFileSizeHigh=0x0, nFileSizeLow=0x15bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZxkmDw7Tq87.docx", cAlternateFileName="ZXKMDW~1.DOC")) returned 1 [0103.150] FindNextFileW (in: hFindFile=0x13fd918, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22ac3220, ftCreationTime.dwHighDateTime=0x1d59b35, ftLastAccessTime.dwLowDateTime=0xd8e007c0, ftLastAccessTime.dwHighDateTime=0x1d568f3, ftLastWriteTime.dwLowDateTime=0xd8e007c0, ftLastWriteTime.dwHighDateTime=0x1d568f3, nFileSizeHigh=0x0, nFileSizeLow=0x15bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZxkmDw7Tq87.docx", cAlternateFileName="ZXKMDW~1.DOC")) returned 0 [0103.150] FindClose (in: hFindFile=0x13fd918 | out: hFindFile=0x13fd918) returned 1 [0103.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0103.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0103.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\FtJmRiFEkGQl", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\FtJmRiFEkGQl", lpFilePart=0x0) returned 0x26 [0103.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0103.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\FtJmRiFEkGQl" (normalized: "c:\\users\\fd1hvy\\documents\\ftjmrifekgql"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafb39c80, ftCreationTime.dwHighDateTime=0x1d5ed2e, ftLastAccessTime.dwLowDateTime=0xd0b2cae0, ftLastAccessTime.dwHighDateTime=0x1d5e988, ftLastWriteTime.dwLowDateTime=0xd0b2cae0, ftLastWriteTime.dwHighDateTime=0x1d5e988, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0103.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0103.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\FtJmRiFEkGQl", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\FtJmRiFEkGQl", lpFilePart=0x0) returned 0x26 [0103.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0103.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\FtJmRiFEkGQl", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\FtJmRiFEkGQl", lpFilePart=0x0) returned 0x26 [0103.151] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\FtJmRiFEkGQl\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafb39c80, ftCreationTime.dwHighDateTime=0x1d5ed2e, ftLastAccessTime.dwLowDateTime=0xd0b2cae0, ftLastAccessTime.dwHighDateTime=0x1d5e988, ftLastWriteTime.dwLowDateTime=0xd0b2cae0, ftLastWriteTime.dwHighDateTime=0x1d5e988, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd398 [0103.152] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafb39c80, ftCreationTime.dwHighDateTime=0x1d5ed2e, ftLastAccessTime.dwLowDateTime=0xd0b2cae0, ftLastAccessTime.dwHighDateTime=0x1d5e988, ftLastWriteTime.dwLowDateTime=0xd0b2cae0, ftLastWriteTime.dwHighDateTime=0x1d5e988, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.152] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4584e3d0, ftCreationTime.dwHighDateTime=0x1d5e812, ftLastAccessTime.dwLowDateTime=0x77e73470, ftLastAccessTime.dwHighDateTime=0x1d5e62f, ftLastWriteTime.dwLowDateTime=0x77e73470, ftLastWriteTime.dwHighDateTime=0x1d5e62f, nFileSizeHigh=0x0, nFileSizeLow=0xc67a, dwReserved0=0x0, dwReserved1=0x0, cFileName="03mvxgggiNAxCuQM.ots", cAlternateFileName="03MVXG~1.OTS")) returned 1 [0103.152] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f67c70, ftCreationTime.dwHighDateTime=0x1d5e558, ftLastAccessTime.dwLowDateTime=0xdda9bef0, ftLastAccessTime.dwHighDateTime=0x1d5f065, ftLastWriteTime.dwLowDateTime=0xdda9bef0, ftLastWriteTime.dwHighDateTime=0x1d5f065, nFileSizeHigh=0x0, nFileSizeLow=0xad62, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Gochhm SH0bpsTN.xlsx", cAlternateFileName="1GOCHH~1.XLS")) returned 1 [0103.152] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc46dc030, ftCreationTime.dwHighDateTime=0x1d5e665, ftLastAccessTime.dwLowDateTime=0x86b08bb0, ftLastAccessTime.dwHighDateTime=0x1d5e9e4, ftLastWriteTime.dwLowDateTime=0x86b08bb0, ftLastWriteTime.dwHighDateTime=0x1d5e9e4, nFileSizeHigh=0x0, nFileSizeLow=0x20a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="cyxqdVmptHWANIw.pdf", cAlternateFileName="CYXQDV~1.PDF")) returned 1 [0103.529] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdc3fb0, ftCreationTime.dwHighDateTime=0x1d5e4ad, ftLastAccessTime.dwLowDateTime=0x5bb7fe50, ftLastAccessTime.dwHighDateTime=0x1d5eeaf, ftLastWriteTime.dwLowDateTime=0x5bb7fe50, ftLastWriteTime.dwHighDateTime=0x1d5eeaf, nFileSizeHigh=0x0, nFileSizeLow=0xd8dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="EcylWo37HP-Xxia-HVWg.docx", cAlternateFileName="ECYLWO~1.DOC")) returned 1 [0103.838] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0092830, ftCreationTime.dwHighDateTime=0x1d5efc8, ftLastAccessTime.dwLowDateTime=0x17b987b0, ftLastAccessTime.dwHighDateTime=0x1d5e909, ftLastWriteTime.dwLowDateTime=0x17b987b0, ftLastWriteTime.dwHighDateTime=0x1d5e909, nFileSizeHigh=0x0, nFileSizeLow=0x5c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FaCw.pptx", cAlternateFileName="FACW~1.PPT")) returned 1 [0103.838] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a0c5b0, ftCreationTime.dwHighDateTime=0x1d5eeea, ftLastAccessTime.dwLowDateTime=0x428c92c0, ftLastAccessTime.dwHighDateTime=0x1d5e32d, ftLastWriteTime.dwLowDateTime=0x428c92c0, ftLastWriteTime.dwHighDateTime=0x1d5e32d, nFileSizeHigh=0x0, nFileSizeLow=0x31d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2dfy-O32eB3dk.odt", cAlternateFileName="L2DFY-~1.ODT")) returned 1 [0103.838] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9181f5d0, ftCreationTime.dwHighDateTime=0x1d5eb1d, ftLastAccessTime.dwLowDateTime=0xc6f56db0, ftLastAccessTime.dwHighDateTime=0x1d5e24d, ftLastWriteTime.dwLowDateTime=0xc6f56db0, ftLastWriteTime.dwHighDateTime=0x1d5e24d, nFileSizeHigh=0x0, nFileSizeLow=0xb745, dwReserved0=0x0, dwReserved1=0x0, cFileName="o2-UR.doc", cAlternateFileName="")) returned 1 [0103.838] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fcf310, ftCreationTime.dwHighDateTime=0x1d5e8af, ftLastAccessTime.dwLowDateTime=0x5ab4a0a0, ftLastAccessTime.dwHighDateTime=0x1d5e773, ftLastWriteTime.dwLowDateTime=0x5ab4a0a0, ftLastWriteTime.dwHighDateTime=0x1d5e773, nFileSizeHigh=0x0, nFileSizeLow=0x5967, dwReserved0=0x0, dwReserved1=0x0, cFileName="oaTcVbwoqFY F.odp", cAlternateFileName="OATCVB~1.ODP")) returned 1 [0103.839] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27904270, ftCreationTime.dwHighDateTime=0x1d5e4ca, ftLastAccessTime.dwLowDateTime=0x7a62f980, ftLastAccessTime.dwHighDateTime=0x1d5eb77, ftLastWriteTime.dwLowDateTime=0x7a62f980, ftLastWriteTime.dwHighDateTime=0x1d5eb77, nFileSizeHigh=0x0, nFileSizeLow=0x8a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="R2Nmqzq.ppt", cAlternateFileName="")) returned 1 [0103.839] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x291ab980, ftCreationTime.dwHighDateTime=0x1d5e5bb, ftLastAccessTime.dwLowDateTime=0xaa251e20, ftLastAccessTime.dwHighDateTime=0x1d5e120, ftLastWriteTime.dwLowDateTime=0xaa251e20, ftLastWriteTime.dwHighDateTime=0x1d5e120, nFileSizeHigh=0x0, nFileSizeLow=0xfa0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RLrtu_jFaDH2U1.ppt", cAlternateFileName="RLRTU_~1.PPT")) returned 1 [0103.839] FindNextFileW (in: hFindFile=0x13fd398, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x291ab980, ftCreationTime.dwHighDateTime=0x1d5e5bb, ftLastAccessTime.dwLowDateTime=0xaa251e20, ftLastAccessTime.dwHighDateTime=0x1d5e120, ftLastWriteTime.dwLowDateTime=0xaa251e20, ftLastWriteTime.dwHighDateTime=0x1d5e120, nFileSizeHigh=0x0, nFileSizeLow=0xfa0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RLrtu_jFaDH2U1.ppt", cAlternateFileName="RLRTU_~1.PPT")) returned 0 [0103.839] FindClose (in: hFindFile=0x13fd398 | out: hFindFile=0x13fd398) returned 1 [0103.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0103.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0103.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0103.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\FtJmRiFEkGQl", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\FtJmRiFEkGQl", lpFilePart=0x0) returned 0x26 [0103.840] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\FtJmRiFEkGQl\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafb39c80, ftCreationTime.dwHighDateTime=0x1d5ed2e, ftLastAccessTime.dwLowDateTime=0xd0b2cae0, ftLastAccessTime.dwHighDateTime=0x1d5e988, ftLastWriteTime.dwLowDateTime=0xd0b2cae0, ftLastWriteTime.dwHighDateTime=0x1d5e988, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd218 [0103.840] FindNextFileW (in: hFindFile=0x13fd218, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafb39c80, ftCreationTime.dwHighDateTime=0x1d5ed2e, ftLastAccessTime.dwLowDateTime=0xd0b2cae0, ftLastAccessTime.dwHighDateTime=0x1d5e988, ftLastWriteTime.dwLowDateTime=0xd0b2cae0, ftLastWriteTime.dwHighDateTime=0x1d5e988, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.840] FindNextFileW (in: hFindFile=0x13fd218, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4584e3d0, ftCreationTime.dwHighDateTime=0x1d5e812, ftLastAccessTime.dwLowDateTime=0x77e73470, ftLastAccessTime.dwHighDateTime=0x1d5e62f, ftLastWriteTime.dwLowDateTime=0x77e73470, ftLastWriteTime.dwHighDateTime=0x1d5e62f, nFileSizeHigh=0x0, nFileSizeLow=0xc67a, dwReserved0=0x0, dwReserved1=0x0, cFileName="03mvxgggiNAxCuQM.ots", cAlternateFileName="03MVXG~1.OTS")) returned 1 [0103.840] FindNextFileW (in: hFindFile=0x13fd218, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f67c70, ftCreationTime.dwHighDateTime=0x1d5e558, ftLastAccessTime.dwLowDateTime=0xdda9bef0, ftLastAccessTime.dwHighDateTime=0x1d5f065, ftLastWriteTime.dwLowDateTime=0xdda9bef0, ftLastWriteTime.dwHighDateTime=0x1d5f065, nFileSizeHigh=0x0, nFileSizeLow=0xad62, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Gochhm SH0bpsTN.xlsx", cAlternateFileName="1GOCHH~1.XLS")) returned 1 [0103.840] FindNextFileW (in: hFindFile=0x13fd218, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc46dc030, ftCreationTime.dwHighDateTime=0x1d5e665, ftLastAccessTime.dwLowDateTime=0x86b08bb0, ftLastAccessTime.dwHighDateTime=0x1d5e9e4, ftLastWriteTime.dwLowDateTime=0x86b08bb0, ftLastWriteTime.dwHighDateTime=0x1d5e9e4, nFileSizeHigh=0x0, nFileSizeLow=0x20a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="cyxqdVmptHWANIw.pdf", cAlternateFileName="CYXQDV~1.PDF")) returned 1 [0103.840] FindNextFileW (in: hFindFile=0x13fd218, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdc3fb0, ftCreationTime.dwHighDateTime=0x1d5e4ad, ftLastAccessTime.dwLowDateTime=0x5bb7fe50, ftLastAccessTime.dwHighDateTime=0x1d5eeaf, ftLastWriteTime.dwLowDateTime=0x5bb7fe50, ftLastWriteTime.dwHighDateTime=0x1d5eeaf, nFileSizeHigh=0x0, nFileSizeLow=0xd8dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="EcylWo37HP-Xxia-HVWg.docx", cAlternateFileName="ECYLWO~1.DOC")) returned 1 [0103.841] FindNextFileW (in: hFindFile=0x13fd218, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0092830, ftCreationTime.dwHighDateTime=0x1d5efc8, ftLastAccessTime.dwLowDateTime=0x17b987b0, ftLastAccessTime.dwHighDateTime=0x1d5e909, ftLastWriteTime.dwLowDateTime=0x17b987b0, ftLastWriteTime.dwHighDateTime=0x1d5e909, nFileSizeHigh=0x0, nFileSizeLow=0x5c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FaCw.pptx", cAlternateFileName="FACW~1.PPT")) returned 1 [0103.841] FindNextFileW (in: hFindFile=0x13fd218, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a0c5b0, ftCreationTime.dwHighDateTime=0x1d5eeea, ftLastAccessTime.dwLowDateTime=0x428c92c0, ftLastAccessTime.dwHighDateTime=0x1d5e32d, ftLastWriteTime.dwLowDateTime=0x428c92c0, ftLastWriteTime.dwHighDateTime=0x1d5e32d, nFileSizeHigh=0x0, nFileSizeLow=0x31d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2dfy-O32eB3dk.odt", cAlternateFileName="L2DFY-~1.ODT")) returned 1 [0103.841] FindNextFileW (in: hFindFile=0x13fd218, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9181f5d0, ftCreationTime.dwHighDateTime=0x1d5eb1d, ftLastAccessTime.dwLowDateTime=0xc6f56db0, ftLastAccessTime.dwHighDateTime=0x1d5e24d, ftLastWriteTime.dwLowDateTime=0xc6f56db0, ftLastWriteTime.dwHighDateTime=0x1d5e24d, nFileSizeHigh=0x0, nFileSizeLow=0xb745, dwReserved0=0x0, dwReserved1=0x0, cFileName="o2-UR.doc", cAlternateFileName="")) returned 1 [0103.841] FindNextFileW (in: hFindFile=0x13fd218, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fcf310, ftCreationTime.dwHighDateTime=0x1d5e8af, ftLastAccessTime.dwLowDateTime=0x5ab4a0a0, ftLastAccessTime.dwHighDateTime=0x1d5e773, ftLastWriteTime.dwLowDateTime=0x5ab4a0a0, ftLastWriteTime.dwHighDateTime=0x1d5e773, nFileSizeHigh=0x0, nFileSizeLow=0x5967, dwReserved0=0x0, dwReserved1=0x0, cFileName="oaTcVbwoqFY F.odp", cAlternateFileName="OATCVB~1.ODP")) returned 1 [0103.841] FindNextFileW (in: hFindFile=0x13fd218, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27904270, ftCreationTime.dwHighDateTime=0x1d5e4ca, ftLastAccessTime.dwLowDateTime=0x7a62f980, ftLastAccessTime.dwHighDateTime=0x1d5eb77, ftLastWriteTime.dwLowDateTime=0x7a62f980, ftLastWriteTime.dwHighDateTime=0x1d5eb77, nFileSizeHigh=0x0, nFileSizeLow=0x8a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="R2Nmqzq.ppt", cAlternateFileName="")) returned 1 [0103.841] FindNextFileW (in: hFindFile=0x13fd218, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x291ab980, ftCreationTime.dwHighDateTime=0x1d5e5bb, ftLastAccessTime.dwLowDateTime=0xaa251e20, ftLastAccessTime.dwHighDateTime=0x1d5e120, ftLastWriteTime.dwLowDateTime=0xaa251e20, ftLastWriteTime.dwHighDateTime=0x1d5e120, nFileSizeHigh=0x0, nFileSizeLow=0xfa0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RLrtu_jFaDH2U1.ppt", cAlternateFileName="RLRTU_~1.PPT")) returned 1 [0103.841] FindNextFileW (in: hFindFile=0x13fd218, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.841] FindClose (in: hFindFile=0x13fd218 | out: hFindFile=0x13fd218) returned 1 [0103.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0103.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0103.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0103.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0103.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music" (normalized: "c:\\users\\fd1hvy\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0103.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0103.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0103.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0103.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0103.842] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0103.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f400) returned 1 [0105.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0105.766] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0105.766] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0105.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f400) returned 1 [0105.768] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0105.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0105.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures" (normalized: "c:\\users\\fd1hvy\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0105.768] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0105.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0105.769] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0105.769] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0105.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f400) returned 1 [0105.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0105.770] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0105.770] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0105.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f400) returned 1 [0105.772] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23 [0105.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0105.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0105.773] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23 [0105.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0105.773] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23 [0105.773] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd618 [0105.773] FindNextFileW (in: hFindFile=0x13fd618, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.774] FindNextFileW (in: hFindFile=0x13fd618, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0105.774] FindNextFileW (in: hFindFile=0x13fd618, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vssx", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0105.774] FindNextFileW (in: hFindFile=0x13fd618, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0105.774] FindNextFileW (in: hFindFile=0x13fd618, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.774] FindClose (in: hFindFile=0x13fd618 | out: hFindFile=0x13fd618) returned 1 [0105.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0105.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0105.774] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x614eed8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c [0105.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0105.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x614f404 | out: lpFileInformation=0x614f404*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f384) returned 1 [0105.775] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c [0105.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0105.775] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c [0105.775] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd618 [0105.776] FindNextFileW (in: hFindFile=0x13fd618, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.776] FindNextFileW (in: hFindFile=0x13fd618, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0105.776] FindNextFileW (in: hFindFile=0x13fd618, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0105.776] FindClose (in: hFindFile=0x13fd618 | out: hFindFile=0x13fd618) returned 1 [0105.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0105.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0105.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0105.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c [0105.776] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd198 [0105.777] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.777] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0105.777] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.777] FindClose (in: hFindFile=0x13fd198 | out: hFindFile=0x13fd198) returned 1 [0105.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0105.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0105.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0105.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23 [0105.777] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd558 [0105.777] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.778] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0105.778] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vssx", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0105.778] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0105.778] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0105.778] FindClose (in: hFindFile=0x13fd558 | out: hFindFile=0x13fd558) returned 1 [0105.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0105.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0105.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0105.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0105.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos" (normalized: "c:\\users\\fd1hvy\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0105.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0105.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0105.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0105.779] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0105.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f400) returned 1 [0105.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0105.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0105.781] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0105.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f400) returned 1 [0105.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27 [0105.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0105.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x67d00605, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0105.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0105.783] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27 [0105.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0105.783] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27 [0105.783] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd198 [0105.783] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.783] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 1 [0105.784] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 0 [0105.784] FindClose (in: hFindFile=0x13fd198 | out: hFindFile=0x13fd198) returned 1 [0105.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0105.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0105.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0105.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27 [0105.784] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd558 [0105.784] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.785] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 1 [0105.785] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.785] FindClose (in: hFindFile=0x13fd558 | out: hFindFile=0x13fd558) returned 1 [0105.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0105.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0105.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T infAuNyPv7fNplLc1", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T infAuNyPv7fNplLc1", lpFilePart=0x0) returned 0x2d [0105.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0105.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T infAuNyPv7fNplLc1" (normalized: "c:\\users\\fd1hvy\\documents\\t infaunypv7fnpllc1"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51694fa0, ftCreationTime.dwHighDateTime=0x1d5ea7f, ftLastAccessTime.dwLowDateTime=0xa2645b90, ftLastAccessTime.dwHighDateTime=0x1d5ebbd, ftLastWriteTime.dwLowDateTime=0xa2645b90, ftLastWriteTime.dwHighDateTime=0x1d5ebbd, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0105.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T infAuNyPv7fNplLc1", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T infAuNyPv7fNplLc1", lpFilePart=0x0) returned 0x2d [0105.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0105.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T infAuNyPv7fNplLc1", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T infAuNyPv7fNplLc1", lpFilePart=0x0) returned 0x2d [0105.786] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T infAuNyPv7fNplLc1\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51694fa0, ftCreationTime.dwHighDateTime=0x1d5ea7f, ftLastAccessTime.dwLowDateTime=0xa2645b90, ftLastAccessTime.dwHighDateTime=0x1d5ebbd, ftLastWriteTime.dwLowDateTime=0xa2645b90, ftLastWriteTime.dwHighDateTime=0x1d5ebbd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd198 [0105.786] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51694fa0, ftCreationTime.dwHighDateTime=0x1d5ea7f, ftLastAccessTime.dwLowDateTime=0xa2645b90, ftLastAccessTime.dwHighDateTime=0x1d5ebbd, ftLastWriteTime.dwLowDateTime=0xa2645b90, ftLastWriteTime.dwHighDateTime=0x1d5ebbd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.786] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824bfa10, ftCreationTime.dwHighDateTime=0x1d5e286, ftLastAccessTime.dwLowDateTime=0x4d426980, ftLastAccessTime.dwHighDateTime=0x1d5e240, ftLastWriteTime.dwLowDateTime=0x4d426980, ftLastWriteTime.dwHighDateTime=0x1d5e240, nFileSizeHigh=0x0, nFileSizeLow=0x8ef7, dwReserved0=0x0, dwReserved1=0x0, cFileName="-MbWaKA.doc", cAlternateFileName="")) returned 1 [0105.786] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d169cb0, ftCreationTime.dwHighDateTime=0x1d5ed9f, ftLastAccessTime.dwLowDateTime=0x6881e4d0, ftLastAccessTime.dwHighDateTime=0x1d5e3fa, ftLastWriteTime.dwLowDateTime=0x6881e4d0, ftLastWriteTime.dwHighDateTime=0x1d5e3fa, nFileSizeHigh=0x0, nFileSizeLow=0xdb1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="40fBEjUj8w.pptx", cAlternateFileName="40FBEJ~1.PPT")) returned 1 [0105.786] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b5dcc10, ftCreationTime.dwHighDateTime=0x1d5ee42, ftLastAccessTime.dwLowDateTime=0x3374fd00, ftLastAccessTime.dwHighDateTime=0x1d5ee35, ftLastWriteTime.dwLowDateTime=0x3374fd00, ftLastWriteTime.dwHighDateTime=0x1d5ee35, nFileSizeHigh=0x0, nFileSizeLow=0x6e75, dwReserved0=0x0, dwReserved1=0x0, cFileName="CB08Bc17fU0sz.csv", cAlternateFileName="CB08BC~1.CSV")) returned 1 [0105.786] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2225e470, ftCreationTime.dwHighDateTime=0x1d5ed21, ftLastAccessTime.dwLowDateTime=0x54a76780, ftLastAccessTime.dwHighDateTime=0x1d5f0bd, ftLastWriteTime.dwLowDateTime=0x54a76780, ftLastWriteTime.dwHighDateTime=0x1d5f0bd, nFileSizeHigh=0x0, nFileSizeLow=0x11590, dwReserved0=0x0, dwReserved1=0x0, cFileName="gJ2qDC3HY4flZ.pdf", cAlternateFileName="GJ2QDC~1.PDF")) returned 1 [0105.787] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25515c20, ftCreationTime.dwHighDateTime=0x1d5e942, ftLastAccessTime.dwLowDateTime=0x44a3e8e0, ftLastAccessTime.dwHighDateTime=0x1d5eb63, ftLastWriteTime.dwLowDateTime=0x44a3e8e0, ftLastWriteTime.dwHighDateTime=0x1d5eb63, nFileSizeHigh=0x0, nFileSizeLow=0xde82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hj_lL_HraS.odt", cAlternateFileName="HJ_LL_~1.ODT")) returned 1 [0105.787] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31ad1c0, ftCreationTime.dwHighDateTime=0x1d5ea20, ftLastAccessTime.dwLowDateTime=0xed846b90, ftLastAccessTime.dwHighDateTime=0x1d5f0ab, ftLastWriteTime.dwLowDateTime=0xed846b90, ftLastWriteTime.dwHighDateTime=0x1d5f0ab, nFileSizeHigh=0x0, nFileSizeLow=0x8d6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LxO9YMgR3-U6j_5DaOFV.pps", cAlternateFileName="LXO9YM~1.PPS")) returned 1 [0105.787] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34948de0, ftCreationTime.dwHighDateTime=0x1d5e6ce, ftLastAccessTime.dwLowDateTime=0x4b3c5b40, ftLastAccessTime.dwHighDateTime=0x1d5ef70, ftLastWriteTime.dwLowDateTime=0x4b3c5b40, ftLastWriteTime.dwHighDateTime=0x1d5ef70, nFileSizeHigh=0x0, nFileSizeLow=0xdeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="s_IyqX0ELBK3qUN8ccE.doc", cAlternateFileName="S_IYQX~1.DOC")) returned 1 [0105.787] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd499520, ftCreationTime.dwHighDateTime=0x1d5f110, ftLastAccessTime.dwLowDateTime=0x16ddd7d0, ftLastAccessTime.dwHighDateTime=0x1d5e713, ftLastWriteTime.dwLowDateTime=0x16ddd7d0, ftLastWriteTime.dwHighDateTime=0x1d5e713, nFileSizeHigh=0x0, nFileSizeLow=0xc39a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UQU5-L qJ64Q2Z.docx", cAlternateFileName="UQU5-L~1.DOC")) returned 1 [0105.787] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e252010, ftCreationTime.dwHighDateTime=0x1d5e979, ftLastAccessTime.dwLowDateTime=0x3fd4f290, ftLastAccessTime.dwHighDateTime=0x1d5e119, ftLastWriteTime.dwLowDateTime=0x3fd4f290, ftLastWriteTime.dwHighDateTime=0x1d5e119, nFileSizeHigh=0x0, nFileSizeLow=0x12c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVowEgM_7BFA.ppt", cAlternateFileName="YVOWEG~1.PPT")) returned 1 [0105.788] FindNextFileW (in: hFindFile=0x13fd198, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e252010, ftCreationTime.dwHighDateTime=0x1d5e979, ftLastAccessTime.dwLowDateTime=0x3fd4f290, ftLastAccessTime.dwHighDateTime=0x1d5e119, ftLastWriteTime.dwLowDateTime=0x3fd4f290, ftLastWriteTime.dwHighDateTime=0x1d5e119, nFileSizeHigh=0x0, nFileSizeLow=0x12c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVowEgM_7BFA.ppt", cAlternateFileName="YVOWEG~1.PPT")) returned 0 [0105.788] FindClose (in: hFindFile=0x13fd198 | out: hFindFile=0x13fd198) returned 1 [0105.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0105.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0105.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0105.788] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T infAuNyPv7fNplLc1", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T infAuNyPv7fNplLc1", lpFilePart=0x0) returned 0x2d [0105.788] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T infAuNyPv7fNplLc1\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51694fa0, ftCreationTime.dwHighDateTime=0x1d5ea7f, ftLastAccessTime.dwLowDateTime=0xa2645b90, ftLastAccessTime.dwHighDateTime=0x1d5ebbd, ftLastWriteTime.dwLowDateTime=0xa2645b90, ftLastWriteTime.dwHighDateTime=0x1d5ebbd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd258 [0105.788] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51694fa0, ftCreationTime.dwHighDateTime=0x1d5ea7f, ftLastAccessTime.dwLowDateTime=0xa2645b90, ftLastAccessTime.dwHighDateTime=0x1d5ebbd, ftLastWriteTime.dwLowDateTime=0xa2645b90, ftLastWriteTime.dwHighDateTime=0x1d5ebbd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.788] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824bfa10, ftCreationTime.dwHighDateTime=0x1d5e286, ftLastAccessTime.dwLowDateTime=0x4d426980, ftLastAccessTime.dwHighDateTime=0x1d5e240, ftLastWriteTime.dwLowDateTime=0x4d426980, ftLastWriteTime.dwHighDateTime=0x1d5e240, nFileSizeHigh=0x0, nFileSizeLow=0x8ef7, dwReserved0=0x0, dwReserved1=0x0, cFileName="-MbWaKA.doc", cAlternateFileName="")) returned 1 [0105.789] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d169cb0, ftCreationTime.dwHighDateTime=0x1d5ed9f, ftLastAccessTime.dwLowDateTime=0x6881e4d0, ftLastAccessTime.dwHighDateTime=0x1d5e3fa, ftLastWriteTime.dwLowDateTime=0x6881e4d0, ftLastWriteTime.dwHighDateTime=0x1d5e3fa, nFileSizeHigh=0x0, nFileSizeLow=0xdb1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="40fBEjUj8w.pptx", cAlternateFileName="40FBEJ~1.PPT")) returned 1 [0105.789] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b5dcc10, ftCreationTime.dwHighDateTime=0x1d5ee42, ftLastAccessTime.dwLowDateTime=0x3374fd00, ftLastAccessTime.dwHighDateTime=0x1d5ee35, ftLastWriteTime.dwLowDateTime=0x3374fd00, ftLastWriteTime.dwHighDateTime=0x1d5ee35, nFileSizeHigh=0x0, nFileSizeLow=0x6e75, dwReserved0=0x0, dwReserved1=0x0, cFileName="CB08Bc17fU0sz.csv", cAlternateFileName="CB08BC~1.CSV")) returned 1 [0105.789] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2225e470, ftCreationTime.dwHighDateTime=0x1d5ed21, ftLastAccessTime.dwLowDateTime=0x54a76780, ftLastAccessTime.dwHighDateTime=0x1d5f0bd, ftLastWriteTime.dwLowDateTime=0x54a76780, ftLastWriteTime.dwHighDateTime=0x1d5f0bd, nFileSizeHigh=0x0, nFileSizeLow=0x11590, dwReserved0=0x0, dwReserved1=0x0, cFileName="gJ2qDC3HY4flZ.pdf", cAlternateFileName="GJ2QDC~1.PDF")) returned 1 [0105.789] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25515c20, ftCreationTime.dwHighDateTime=0x1d5e942, ftLastAccessTime.dwLowDateTime=0x44a3e8e0, ftLastAccessTime.dwHighDateTime=0x1d5eb63, ftLastWriteTime.dwLowDateTime=0x44a3e8e0, ftLastWriteTime.dwHighDateTime=0x1d5eb63, nFileSizeHigh=0x0, nFileSizeLow=0xde82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hj_lL_HraS.odt", cAlternateFileName="HJ_LL_~1.ODT")) returned 1 [0105.789] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31ad1c0, ftCreationTime.dwHighDateTime=0x1d5ea20, ftLastAccessTime.dwLowDateTime=0xed846b90, ftLastAccessTime.dwHighDateTime=0x1d5f0ab, ftLastWriteTime.dwLowDateTime=0xed846b90, ftLastWriteTime.dwHighDateTime=0x1d5f0ab, nFileSizeHigh=0x0, nFileSizeLow=0x8d6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LxO9YMgR3-U6j_5DaOFV.pps", cAlternateFileName="LXO9YM~1.PPS")) returned 1 [0105.789] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34948de0, ftCreationTime.dwHighDateTime=0x1d5e6ce, ftLastAccessTime.dwLowDateTime=0x4b3c5b40, ftLastAccessTime.dwHighDateTime=0x1d5ef70, ftLastWriteTime.dwLowDateTime=0x4b3c5b40, ftLastWriteTime.dwHighDateTime=0x1d5ef70, nFileSizeHigh=0x0, nFileSizeLow=0xdeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="s_IyqX0ELBK3qUN8ccE.doc", cAlternateFileName="S_IYQX~1.DOC")) returned 1 [0105.790] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd499520, ftCreationTime.dwHighDateTime=0x1d5f110, ftLastAccessTime.dwLowDateTime=0x16ddd7d0, ftLastAccessTime.dwHighDateTime=0x1d5e713, ftLastWriteTime.dwLowDateTime=0x16ddd7d0, ftLastWriteTime.dwHighDateTime=0x1d5e713, nFileSizeHigh=0x0, nFileSizeLow=0xc39a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UQU5-L qJ64Q2Z.docx", cAlternateFileName="UQU5-L~1.DOC")) returned 1 [0105.790] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e252010, ftCreationTime.dwHighDateTime=0x1d5e979, ftLastAccessTime.dwLowDateTime=0x3fd4f290, ftLastAccessTime.dwHighDateTime=0x1d5e119, ftLastWriteTime.dwLowDateTime=0x3fd4f290, ftLastWriteTime.dwHighDateTime=0x1d5e119, nFileSizeHigh=0x0, nFileSizeLow=0x12c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVowEgM_7BFA.ppt", cAlternateFileName="YVOWEG~1.PPT")) returned 1 [0105.790] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.790] FindClose (in: hFindFile=0x13fd258 | out: hFindFile=0x13fd258) returned 1 [0105.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0105.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0105.790] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd", lpFilePart=0x0) returned 0x22 [0105.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0105.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd" (normalized: "c:\\users\\fd1hvy\\documents\\ukdyvqpd"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b326fd0, ftCreationTime.dwHighDateTime=0x1d5e896, ftLastAccessTime.dwLowDateTime=0xb59516b0, ftLastAccessTime.dwHighDateTime=0x1d5ed24, ftLastWriteTime.dwLowDateTime=0xb59516b0, ftLastWriteTime.dwHighDateTime=0x1d5ed24, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0105.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd", lpFilePart=0x0) returned 0x22 [0105.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0105.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd", lpFilePart=0x0) returned 0x22 [0105.791] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b326fd0, ftCreationTime.dwHighDateTime=0x1d5e896, ftLastAccessTime.dwLowDateTime=0xb59516b0, ftLastAccessTime.dwHighDateTime=0x1d5ed24, ftLastWriteTime.dwLowDateTime=0xb59516b0, ftLastWriteTime.dwHighDateTime=0x1d5ed24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd558 [0105.791] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b326fd0, ftCreationTime.dwHighDateTime=0x1d5e896, ftLastAccessTime.dwLowDateTime=0xb59516b0, ftLastAccessTime.dwHighDateTime=0x1d5ed24, ftLastWriteTime.dwLowDateTime=0xb59516b0, ftLastWriteTime.dwHighDateTime=0x1d5ed24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.791] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34504e10, ftCreationTime.dwHighDateTime=0x1d5e5bf, ftLastAccessTime.dwLowDateTime=0x102c56a0, ftLastAccessTime.dwHighDateTime=0x1d5e560, ftLastWriteTime.dwLowDateTime=0x102c56a0, ftLastWriteTime.dwHighDateTime=0x1d5e560, nFileSizeHigh=0x0, nFileSizeLow=0x18638, dwReserved0=0x0, dwReserved1=0x0, cFileName="1vCXq.rtf", cAlternateFileName="")) returned 1 [0105.791] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61202030, ftCreationTime.dwHighDateTime=0x1d5ea7b, ftLastAccessTime.dwLowDateTime=0x60d397e0, ftLastAccessTime.dwHighDateTime=0x1d5e68b, ftLastWriteTime.dwLowDateTime=0x60d397e0, ftLastWriteTime.dwHighDateTime=0x1d5e68b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="78RvfEYHP", cAlternateFileName="78RVFE~1")) returned 1 [0105.792] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0b7a40, ftCreationTime.dwHighDateTime=0x1d5e9e9, ftLastAccessTime.dwLowDateTime=0xb329cf40, ftLastAccessTime.dwHighDateTime=0x1d5e6d2, ftLastWriteTime.dwLowDateTime=0xb329cf40, ftLastWriteTime.dwHighDateTime=0x1d5e6d2, nFileSizeHigh=0x0, nFileSizeLow=0x16cb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9kjK.ods", cAlternateFileName="")) returned 1 [0105.792] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c48ca0, ftCreationTime.dwHighDateTime=0x1d5edcb, ftLastAccessTime.dwLowDateTime=0x6db06d10, ftLastAccessTime.dwHighDateTime=0x1d5f001, ftLastWriteTime.dwLowDateTime=0x6db06d10, ftLastWriteTime.dwHighDateTime=0x1d5f001, nFileSizeHigh=0x0, nFileSizeLow=0x1792a, dwReserved0=0x0, dwReserved1=0x0, cFileName="aqncgu4Uz6O8.rtf", cAlternateFileName="AQNCGU~1.RTF")) returned 1 [0105.792] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x343ea350, ftCreationTime.dwHighDateTime=0x1d5e69a, ftLastAccessTime.dwLowDateTime=0xfa4ab4a0, ftLastAccessTime.dwHighDateTime=0x1d5e4ae, ftLastWriteTime.dwLowDateTime=0xfa4ab4a0, ftLastWriteTime.dwHighDateTime=0x1d5e4ae, nFileSizeHigh=0x0, nFileSizeLow=0x3118, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUJrbslH9na36qv7X.ots", cAlternateFileName="BUJRBS~1.OTS")) returned 1 [0105.792] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x240adb50, ftCreationTime.dwHighDateTime=0x1d5ec14, ftLastAccessTime.dwLowDateTime=0x4b355ae0, ftLastAccessTime.dwHighDateTime=0x1d5e924, ftLastWriteTime.dwLowDateTime=0x4b355ae0, ftLastWriteTime.dwHighDateTime=0x1d5e924, nFileSizeHigh=0x0, nFileSizeLow=0x16e9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CX4eZ9.xlsx", cAlternateFileName="CX4EZ9~1.XLS")) returned 1 [0105.792] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d026670, ftCreationTime.dwHighDateTime=0x1d5eb0a, ftLastAccessTime.dwLowDateTime=0x1f96f140, ftLastAccessTime.dwHighDateTime=0x1d5ef47, ftLastWriteTime.dwLowDateTime=0x1f96f140, ftLastWriteTime.dwHighDateTime=0x1d5ef47, nFileSizeHigh=0x0, nFileSizeLow=0x6da7, dwReserved0=0x0, dwReserved1=0x0, cFileName="hHeQJmg6r7BGY.csv", cAlternateFileName="HHEQJM~1.CSV")) returned 1 [0105.792] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe76331b0, ftCreationTime.dwHighDateTime=0x1d5e61f, ftLastAccessTime.dwLowDateTime=0x93c67ad0, ftLastAccessTime.dwHighDateTime=0x1d5f100, ftLastWriteTime.dwLowDateTime=0x93c67ad0, ftLastWriteTime.dwHighDateTime=0x1d5f100, nFileSizeHigh=0x0, nFileSizeLow=0x174a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="nYH6gt3.xls", cAlternateFileName="")) returned 1 [0105.793] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52589520, ftCreationTime.dwHighDateTime=0x1d5e43e, ftLastAccessTime.dwLowDateTime=0x624f3870, ftLastAccessTime.dwHighDateTime=0x1d5efac, ftLastWriteTime.dwLowDateTime=0x624f3870, ftLastWriteTime.dwHighDateTime=0x1d5efac, nFileSizeHigh=0x0, nFileSizeLow=0xe3aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="vqPk8fE1dCsR9rgptD1b.odt", cAlternateFileName="VQPK8F~1.ODT")) returned 1 [0105.793] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b58d0c0, ftCreationTime.dwHighDateTime=0x1d5eb3a, ftLastAccessTime.dwLowDateTime=0x42ef9f90, ftLastAccessTime.dwHighDateTime=0x1d5f0fd, ftLastWriteTime.dwLowDateTime=0x42ef9f90, ftLastWriteTime.dwHighDateTime=0x1d5f0fd, nFileSizeHigh=0x0, nFileSizeLow=0xca2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="XzJc9UyNjCU3X.doc", cAlternateFileName="XZJC9U~1.DOC")) returned 1 [0105.793] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65a8490, ftCreationTime.dwHighDateTime=0x1d5e126, ftLastAccessTime.dwLowDateTime=0x6c4aee70, ftLastAccessTime.dwHighDateTime=0x1d5e370, ftLastWriteTime.dwLowDateTime=0x6c4aee70, ftLastWriteTime.dwHighDateTime=0x1d5e370, nFileSizeHigh=0x0, nFileSizeLow=0x1401a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YM1Z.ods", cAlternateFileName="")) returned 1 [0105.793] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65a8490, ftCreationTime.dwHighDateTime=0x1d5e126, ftLastAccessTime.dwLowDateTime=0x6c4aee70, ftLastAccessTime.dwHighDateTime=0x1d5e370, ftLastWriteTime.dwLowDateTime=0x6c4aee70, ftLastWriteTime.dwHighDateTime=0x1d5e370, nFileSizeHigh=0x0, nFileSizeLow=0x1401a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YM1Z.ods", cAlternateFileName="")) returned 0 [0105.793] FindClose (in: hFindFile=0x13fd558 | out: hFindFile=0x13fd558) returned 1 [0105.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0105.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0105.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd\\78RvfEYHP", nBufferLength=0x105, lpBuffer=0x614eed8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd\\78RvfEYHP", lpFilePart=0x0) returned 0x2c [0105.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0105.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd\\78RvfEYHP" (normalized: "c:\\users\\fd1hvy\\documents\\ukdyvqpd\\78rvfeyhp"), fInfoLevelId=0x0, lpFileInformation=0x614f404 | out: lpFileInformation=0x614f404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61202030, ftCreationTime.dwHighDateTime=0x1d5ea7b, ftLastAccessTime.dwLowDateTime=0x60d397e0, ftLastAccessTime.dwHighDateTime=0x1d5e68b, ftLastWriteTime.dwLowDateTime=0x60d397e0, ftLastWriteTime.dwHighDateTime=0x1d5e68b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0105.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f384) returned 1 [0105.795] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd\\78RvfEYHP", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd\\78RvfEYHP", lpFilePart=0x0) returned 0x2c [0105.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0105.795] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd\\78RvfEYHP", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd\\78RvfEYHP", lpFilePart=0x0) returned 0x2c [0105.795] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd\\78RvfEYHP\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61202030, ftCreationTime.dwHighDateTime=0x1d5ea7b, ftLastAccessTime.dwLowDateTime=0x60d397e0, ftLastAccessTime.dwHighDateTime=0x1d5e68b, ftLastWriteTime.dwLowDateTime=0x60d397e0, ftLastWriteTime.dwHighDateTime=0x1d5e68b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd558 [0105.796] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61202030, ftCreationTime.dwHighDateTime=0x1d5ea7b, ftLastAccessTime.dwLowDateTime=0x60d397e0, ftLastAccessTime.dwHighDateTime=0x1d5e68b, ftLastWriteTime.dwLowDateTime=0x60d397e0, ftLastWriteTime.dwHighDateTime=0x1d5e68b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.796] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73ba2590, ftCreationTime.dwHighDateTime=0x1d5e40b, ftLastAccessTime.dwLowDateTime=0x6fde36e0, ftLastAccessTime.dwHighDateTime=0x1d5e33a, ftLastWriteTime.dwLowDateTime=0x6fde36e0, ftLastWriteTime.dwHighDateTime=0x1d5e33a, nFileSizeHigh=0x0, nFileSizeLow=0x2486, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSMy.csv", cAlternateFileName="")) returned 1 [0105.797] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75b7ac0, ftCreationTime.dwHighDateTime=0x1d5e6e8, ftLastAccessTime.dwLowDateTime=0x6cc04380, ftLastAccessTime.dwHighDateTime=0x1d5e5f7, ftLastWriteTime.dwLowDateTime=0x6cc04380, ftLastWriteTime.dwHighDateTime=0x1d5e5f7, nFileSizeHigh=0x0, nFileSizeLow=0xe404, dwReserved0=0x0, dwReserved1=0x0, cFileName="JHdLVx3Ee-cNuSg.pps", cAlternateFileName="JHDLVX~1.PPS")) returned 1 [0105.797] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41e51490, ftCreationTime.dwHighDateTime=0x1d5e22f, ftLastAccessTime.dwLowDateTime=0x5c1e3580, ftLastAccessTime.dwHighDateTime=0x1d5e630, ftLastWriteTime.dwLowDateTime=0x5c1e3580, ftLastWriteTime.dwHighDateTime=0x1d5e630, nFileSizeHigh=0x0, nFileSizeLow=0x12bed, dwReserved0=0x0, dwReserved1=0x0, cFileName="JM8BgGDvcQCqgFxeAAd0.ods", cAlternateFileName="JM8BGG~1.ODS")) returned 1 [0105.797] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59b8dc0, ftCreationTime.dwHighDateTime=0x1d5e755, ftLastAccessTime.dwLowDateTime=0x7ecc0720, ftLastAccessTime.dwHighDateTime=0x1d5efe4, ftLastWriteTime.dwLowDateTime=0x7ecc0720, ftLastWriteTime.dwHighDateTime=0x1d5efe4, nFileSizeHigh=0x0, nFileSizeLow=0x7a1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sWV6o.doc", cAlternateFileName="")) returned 1 [0105.798] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca1e1d00, ftCreationTime.dwHighDateTime=0x1d5e934, ftLastAccessTime.dwLowDateTime=0xdb1ebb10, ftLastAccessTime.dwHighDateTime=0x1d5ea82, ftLastWriteTime.dwLowDateTime=0xdb1ebb10, ftLastWriteTime.dwHighDateTime=0x1d5ea82, nFileSizeHigh=0x0, nFileSizeLow=0xea30, dwReserved0=0x0, dwReserved1=0x0, cFileName="YCqg2OR9X8UuVborq.ods", cAlternateFileName="YCQG2O~1.ODS")) returned 1 [0105.798] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca1e1d00, ftCreationTime.dwHighDateTime=0x1d5e934, ftLastAccessTime.dwLowDateTime=0xdb1ebb10, ftLastAccessTime.dwHighDateTime=0x1d5ea82, ftLastWriteTime.dwLowDateTime=0xdb1ebb10, ftLastWriteTime.dwHighDateTime=0x1d5ea82, nFileSizeHigh=0x0, nFileSizeLow=0xea30, dwReserved0=0x0, dwReserved1=0x0, cFileName="YCqg2OR9X8UuVborq.ods", cAlternateFileName="YCQG2O~1.ODS")) returned 0 [0105.798] FindClose (in: hFindFile=0x13fd558 | out: hFindFile=0x13fd558) returned 1 [0105.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0105.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0105.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0105.799] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd\\78RvfEYHP", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd\\78RvfEYHP", lpFilePart=0x0) returned 0x2c [0105.799] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd\\78RvfEYHP\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61202030, ftCreationTime.dwHighDateTime=0x1d5ea7b, ftLastAccessTime.dwLowDateTime=0x60d397e0, ftLastAccessTime.dwHighDateTime=0x1d5e68b, ftLastWriteTime.dwLowDateTime=0x60d397e0, ftLastWriteTime.dwHighDateTime=0x1d5e68b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd598 [0105.799] FindNextFileW (in: hFindFile=0x13fd598, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61202030, ftCreationTime.dwHighDateTime=0x1d5ea7b, ftLastAccessTime.dwLowDateTime=0x60d397e0, ftLastAccessTime.dwHighDateTime=0x1d5e68b, ftLastWriteTime.dwLowDateTime=0x60d397e0, ftLastWriteTime.dwHighDateTime=0x1d5e68b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.799] FindNextFileW (in: hFindFile=0x13fd598, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73ba2590, ftCreationTime.dwHighDateTime=0x1d5e40b, ftLastAccessTime.dwLowDateTime=0x6fde36e0, ftLastAccessTime.dwHighDateTime=0x1d5e33a, ftLastWriteTime.dwLowDateTime=0x6fde36e0, ftLastWriteTime.dwHighDateTime=0x1d5e33a, nFileSizeHigh=0x0, nFileSizeLow=0x2486, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSMy.csv", cAlternateFileName="")) returned 1 [0105.799] FindNextFileW (in: hFindFile=0x13fd598, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75b7ac0, ftCreationTime.dwHighDateTime=0x1d5e6e8, ftLastAccessTime.dwLowDateTime=0x6cc04380, ftLastAccessTime.dwHighDateTime=0x1d5e5f7, ftLastWriteTime.dwLowDateTime=0x6cc04380, ftLastWriteTime.dwHighDateTime=0x1d5e5f7, nFileSizeHigh=0x0, nFileSizeLow=0xe404, dwReserved0=0x0, dwReserved1=0x0, cFileName="JHdLVx3Ee-cNuSg.pps", cAlternateFileName="JHDLVX~1.PPS")) returned 1 [0105.800] FindNextFileW (in: hFindFile=0x13fd598, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41e51490, ftCreationTime.dwHighDateTime=0x1d5e22f, ftLastAccessTime.dwLowDateTime=0x5c1e3580, ftLastAccessTime.dwHighDateTime=0x1d5e630, ftLastWriteTime.dwLowDateTime=0x5c1e3580, ftLastWriteTime.dwHighDateTime=0x1d5e630, nFileSizeHigh=0x0, nFileSizeLow=0x12bed, dwReserved0=0x0, dwReserved1=0x0, cFileName="JM8BgGDvcQCqgFxeAAd0.ods", cAlternateFileName="JM8BGG~1.ODS")) returned 1 [0105.800] FindNextFileW (in: hFindFile=0x13fd598, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59b8dc0, ftCreationTime.dwHighDateTime=0x1d5e755, ftLastAccessTime.dwLowDateTime=0x7ecc0720, ftLastAccessTime.dwHighDateTime=0x1d5efe4, ftLastWriteTime.dwLowDateTime=0x7ecc0720, ftLastWriteTime.dwHighDateTime=0x1d5efe4, nFileSizeHigh=0x0, nFileSizeLow=0x7a1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sWV6o.doc", cAlternateFileName="")) returned 1 [0105.800] FindNextFileW (in: hFindFile=0x13fd598, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca1e1d00, ftCreationTime.dwHighDateTime=0x1d5e934, ftLastAccessTime.dwLowDateTime=0xdb1ebb10, ftLastAccessTime.dwHighDateTime=0x1d5ea82, ftLastWriteTime.dwLowDateTime=0xdb1ebb10, ftLastWriteTime.dwHighDateTime=0x1d5ea82, nFileSizeHigh=0x0, nFileSizeLow=0xea30, dwReserved0=0x0, dwReserved1=0x0, cFileName="YCqg2OR9X8UuVborq.ods", cAlternateFileName="YCQG2O~1.ODS")) returned 1 [0105.801] FindNextFileW (in: hFindFile=0x13fd598, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.801] FindClose (in: hFindFile=0x13fd598 | out: hFindFile=0x13fd598) returned 1 [0105.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0105.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0105.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0105.801] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd", lpFilePart=0x0) returned 0x22 [0105.801] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uKdYVQpd\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b326fd0, ftCreationTime.dwHighDateTime=0x1d5e896, ftLastAccessTime.dwLowDateTime=0xb59516b0, ftLastAccessTime.dwHighDateTime=0x1d5ed24, ftLastWriteTime.dwLowDateTime=0xb59516b0, ftLastWriteTime.dwHighDateTime=0x1d5ed24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd558 [0105.801] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b326fd0, ftCreationTime.dwHighDateTime=0x1d5e896, ftLastAccessTime.dwLowDateTime=0xb59516b0, ftLastAccessTime.dwHighDateTime=0x1d5ed24, ftLastWriteTime.dwLowDateTime=0xb59516b0, ftLastWriteTime.dwHighDateTime=0x1d5ed24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.802] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34504e10, ftCreationTime.dwHighDateTime=0x1d5e5bf, ftLastAccessTime.dwLowDateTime=0x102c56a0, ftLastAccessTime.dwHighDateTime=0x1d5e560, ftLastWriteTime.dwLowDateTime=0x102c56a0, ftLastWriteTime.dwHighDateTime=0x1d5e560, nFileSizeHigh=0x0, nFileSizeLow=0x18638, dwReserved0=0x0, dwReserved1=0x0, cFileName="1vCXq.rtf", cAlternateFileName="")) returned 1 [0105.802] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61202030, ftCreationTime.dwHighDateTime=0x1d5ea7b, ftLastAccessTime.dwLowDateTime=0x60d397e0, ftLastAccessTime.dwHighDateTime=0x1d5e68b, ftLastWriteTime.dwLowDateTime=0x60d397e0, ftLastWriteTime.dwHighDateTime=0x1d5e68b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="78RvfEYHP", cAlternateFileName="78RVFE~1")) returned 1 [0105.802] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0b7a40, ftCreationTime.dwHighDateTime=0x1d5e9e9, ftLastAccessTime.dwLowDateTime=0xb329cf40, ftLastAccessTime.dwHighDateTime=0x1d5e6d2, ftLastWriteTime.dwLowDateTime=0xb329cf40, ftLastWriteTime.dwHighDateTime=0x1d5e6d2, nFileSizeHigh=0x0, nFileSizeLow=0x16cb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9kjK.ods", cAlternateFileName="")) returned 1 [0105.802] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c48ca0, ftCreationTime.dwHighDateTime=0x1d5edcb, ftLastAccessTime.dwLowDateTime=0x6db06d10, ftLastAccessTime.dwHighDateTime=0x1d5f001, ftLastWriteTime.dwLowDateTime=0x6db06d10, ftLastWriteTime.dwHighDateTime=0x1d5f001, nFileSizeHigh=0x0, nFileSizeLow=0x1792a, dwReserved0=0x0, dwReserved1=0x0, cFileName="aqncgu4Uz6O8.rtf", cAlternateFileName="AQNCGU~1.RTF")) returned 1 [0105.802] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x343ea350, ftCreationTime.dwHighDateTime=0x1d5e69a, ftLastAccessTime.dwLowDateTime=0xfa4ab4a0, ftLastAccessTime.dwHighDateTime=0x1d5e4ae, ftLastWriteTime.dwLowDateTime=0xfa4ab4a0, ftLastWriteTime.dwHighDateTime=0x1d5e4ae, nFileSizeHigh=0x0, nFileSizeLow=0x3118, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUJrbslH9na36qv7X.ots", cAlternateFileName="BUJRBS~1.OTS")) returned 1 [0105.803] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x240adb50, ftCreationTime.dwHighDateTime=0x1d5ec14, ftLastAccessTime.dwLowDateTime=0x4b355ae0, ftLastAccessTime.dwHighDateTime=0x1d5e924, ftLastWriteTime.dwLowDateTime=0x4b355ae0, ftLastWriteTime.dwHighDateTime=0x1d5e924, nFileSizeHigh=0x0, nFileSizeLow=0x16e9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CX4eZ9.xlsx", cAlternateFileName="CX4EZ9~1.XLS")) returned 1 [0105.803] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d026670, ftCreationTime.dwHighDateTime=0x1d5eb0a, ftLastAccessTime.dwLowDateTime=0x1f96f140, ftLastAccessTime.dwHighDateTime=0x1d5ef47, ftLastWriteTime.dwLowDateTime=0x1f96f140, ftLastWriteTime.dwHighDateTime=0x1d5ef47, nFileSizeHigh=0x0, nFileSizeLow=0x6da7, dwReserved0=0x0, dwReserved1=0x0, cFileName="hHeQJmg6r7BGY.csv", cAlternateFileName="HHEQJM~1.CSV")) returned 1 [0105.803] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe76331b0, ftCreationTime.dwHighDateTime=0x1d5e61f, ftLastAccessTime.dwLowDateTime=0x93c67ad0, ftLastAccessTime.dwHighDateTime=0x1d5f100, ftLastWriteTime.dwLowDateTime=0x93c67ad0, ftLastWriteTime.dwHighDateTime=0x1d5f100, nFileSizeHigh=0x0, nFileSizeLow=0x174a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="nYH6gt3.xls", cAlternateFileName="")) returned 1 [0105.803] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52589520, ftCreationTime.dwHighDateTime=0x1d5e43e, ftLastAccessTime.dwLowDateTime=0x624f3870, ftLastAccessTime.dwHighDateTime=0x1d5efac, ftLastWriteTime.dwLowDateTime=0x624f3870, ftLastWriteTime.dwHighDateTime=0x1d5efac, nFileSizeHigh=0x0, nFileSizeLow=0xe3aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="vqPk8fE1dCsR9rgptD1b.odt", cAlternateFileName="VQPK8F~1.ODT")) returned 1 [0105.803] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b58d0c0, ftCreationTime.dwHighDateTime=0x1d5eb3a, ftLastAccessTime.dwLowDateTime=0x42ef9f90, ftLastAccessTime.dwHighDateTime=0x1d5f0fd, ftLastWriteTime.dwLowDateTime=0x42ef9f90, ftLastWriteTime.dwHighDateTime=0x1d5f0fd, nFileSizeHigh=0x0, nFileSizeLow=0xca2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="XzJc9UyNjCU3X.doc", cAlternateFileName="XZJC9U~1.DOC")) returned 1 [0105.804] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65a8490, ftCreationTime.dwHighDateTime=0x1d5e126, ftLastAccessTime.dwLowDateTime=0x6c4aee70, ftLastAccessTime.dwHighDateTime=0x1d5e370, ftLastWriteTime.dwLowDateTime=0x6c4aee70, ftLastWriteTime.dwHighDateTime=0x1d5e370, nFileSizeHigh=0x0, nFileSizeLow=0x1401a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YM1Z.ods", cAlternateFileName="")) returned 1 [0105.804] FindNextFileW (in: hFindFile=0x13fd558, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.804] FindClose (in: hFindFile=0x13fd558 | out: hFindFile=0x13fd558) returned 1 [0105.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0105.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0105.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0105.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0105.804] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6ae37c8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6ae37c8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fd258 [0105.805] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6ae37c8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6ae37c8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.805] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce73290, ftCreationTime.dwHighDateTime=0x1d5b1d2, ftLastAccessTime.dwLowDateTime=0x94aa7750, ftLastAccessTime.dwHighDateTime=0x1d5704d, ftLastWriteTime.dwLowDateTime=0x94aa7750, ftLastWriteTime.dwHighDateTime=0x1d5704d, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="0 OfC-.xlsx", cAlternateFileName="0OFC-~1.XLS")) returned 1 [0105.805] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d49e80, ftCreationTime.dwHighDateTime=0x1d5d584, ftLastAccessTime.dwLowDateTime=0xd1e5fab0, ftLastAccessTime.dwHighDateTime=0x1d5c70d, ftLastWriteTime.dwLowDateTime=0xd1e5fab0, ftLastWriteTime.dwHighDateTime=0x1d5c70d, nFileSizeHigh=0x0, nFileSizeLow=0x8262, dwReserved0=0x0, dwReserved1=0x0, cFileName="31Yv.docx", cAlternateFileName="31YV~1.DOC")) returned 1 [0105.805] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ba4a010, ftCreationTime.dwHighDateTime=0x1d5eb0f, ftLastAccessTime.dwLowDateTime=0xe27c3eb0, ftLastAccessTime.dwHighDateTime=0x1d5e469, ftLastWriteTime.dwLowDateTime=0xe27c3eb0, ftLastWriteTime.dwHighDateTime=0x1d5e469, nFileSizeHigh=0x0, nFileSizeLow=0x18caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="5N9Mxc0QLtZgYNRZ_6.odp", cAlternateFileName="5N9MXC~1.ODP")) returned 1 [0105.805] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b21dd90, ftCreationTime.dwHighDateTime=0x1d594c2, ftLastAccessTime.dwLowDateTime=0xb3ad04e0, ftLastAccessTime.dwHighDateTime=0x1d5ab7d, ftLastWriteTime.dwLowDateTime=0xb3ad04e0, ftLastWriteTime.dwHighDateTime=0x1d5ab7d, nFileSizeHigh=0x0, nFileSizeLow=0xfaf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="5TfVoGm.xlsx", cAlternateFileName="5TFVOG~1.XLS")) returned 1 [0105.805] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6681bec0, ftCreationTime.dwHighDateTime=0x1d59f40, ftLastAccessTime.dwLowDateTime=0xaf5bed30, ftLastAccessTime.dwHighDateTime=0x1d5c058, ftLastWriteTime.dwLowDateTime=0xaf5bed30, ftLastWriteTime.dwHighDateTime=0x1d5c058, nFileSizeHigh=0x0, nFileSizeLow=0x9194, dwReserved0=0x0, dwReserved1=0x0, cFileName="bi_ZofT43rZix.pptx", cAlternateFileName="BI_ZOF~1.PPT")) returned 1 [0105.806] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0105.806] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0105.806] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3df80, ftCreationTime.dwHighDateTime=0x1d5afa5, ftLastAccessTime.dwLowDateTime=0x91855780, ftLastAccessTime.dwHighDateTime=0x1d5bd86, ftLastWriteTime.dwLowDateTime=0x91855780, ftLastWriteTime.dwHighDateTime=0x1d5bd86, nFileSizeHigh=0x0, nFileSizeLow=0x14ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dz7NjZDelD7pGdYK.docx", cAlternateFileName="DZ7NJZ~1.DOC")) returned 1 [0105.806] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ecc540, ftCreationTime.dwHighDateTime=0x1d5db1b, ftLastAccessTime.dwLowDateTime=0x9c8df910, ftLastAccessTime.dwHighDateTime=0x1d592df, ftLastWriteTime.dwLowDateTime=0x9c8df910, ftLastWriteTime.dwHighDateTime=0x1d592df, nFileSizeHigh=0x0, nFileSizeLow=0x10ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAizo747lI9UoNOSu.pptx", cAlternateFileName="EAIZO7~1.PPT")) returned 1 [0105.806] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafb39c80, ftCreationTime.dwHighDateTime=0x1d5ed2e, ftLastAccessTime.dwLowDateTime=0xd0b2cae0, ftLastAccessTime.dwHighDateTime=0x1d5e988, ftLastWriteTime.dwLowDateTime=0xd0b2cae0, ftLastWriteTime.dwHighDateTime=0x1d5e988, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FtJmRiFEkGQl", cAlternateFileName="FTJMRI~1")) returned 1 [0105.806] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f41630, ftCreationTime.dwHighDateTime=0x1d5d9d2, ftLastAccessTime.dwLowDateTime=0xb878f660, ftLastAccessTime.dwHighDateTime=0x1d5d994, ftLastWriteTime.dwLowDateTime=0xb878f660, ftLastWriteTime.dwHighDateTime=0x1d5d994, nFileSizeHigh=0x0, nFileSizeLow=0xc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITXfD3-mmNBXv9-.docx", cAlternateFileName="ITXFD3~1.DOC")) returned 1 [0105.807] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5afdbf0, ftCreationTime.dwHighDateTime=0x1d5d0c7, ftLastAccessTime.dwLowDateTime=0xc194afc0, ftLastAccessTime.dwHighDateTime=0x1d5d091, ftLastWriteTime.dwLowDateTime=0xc194afc0, ftLastWriteTime.dwHighDateTime=0x1d5d091, nFileSizeHigh=0x0, nFileSizeLow=0x1d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="jzo42Gku-b.pptx", cAlternateFileName="JZO42G~1.PPT")) returned 1 [0105.807] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0105.807] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0105.807] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0105.807] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0105.808] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd7528a0, ftCreationTime.dwHighDateTime=0x1d5ca3f, ftLastAccessTime.dwLowDateTime=0x51928a30, ftLastAccessTime.dwHighDateTime=0x1d5c47a, ftLastWriteTime.dwLowDateTime=0x51928a30, ftLastWriteTime.dwHighDateTime=0x1d5c47a, nFileSizeHigh=0x0, nFileSizeLow=0x8bf9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="N6PpHYWf.docx", cAlternateFileName="N6PPHY~1.DOC")) returned 1 [0105.808] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7351690, ftCreationTime.dwHighDateTime=0x1d5b67b, ftLastAccessTime.dwLowDateTime=0xcc88d80, ftLastAccessTime.dwHighDateTime=0x1d59fd8, ftLastWriteTime.dwLowDateTime=0xcc88d80, ftLastWriteTime.dwHighDateTime=0x1d59fd8, nFileSizeHigh=0x0, nFileSizeLow=0xe2b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nc2WPLC4zn4D.pptx", cAlternateFileName="NC2WPL~1.PPT")) returned 1 [0105.808] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa233ea20, ftCreationTime.dwHighDateTime=0x1d5d1fd, ftLastAccessTime.dwLowDateTime=0x553605d0, ftLastAccessTime.dwHighDateTime=0x1d5d317, ftLastWriteTime.dwLowDateTime=0x553605d0, ftLastWriteTime.dwHighDateTime=0x1d5d317, nFileSizeHigh=0x0, nFileSizeLow=0xbe93, dwReserved0=0x0, dwReserved1=0x0, cFileName="oDVsaJrnoT9mWE09SE.xlsx", cAlternateFileName="ODVSAJ~1.XLS")) returned 1 [0105.808] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc823d520, ftCreationTime.dwHighDateTime=0x1d5eccd, ftLastAccessTime.dwLowDateTime=0xee29ac80, ftLastAccessTime.dwHighDateTime=0x1d5e3d7, ftLastWriteTime.dwLowDateTime=0xee29ac80, ftLastWriteTime.dwHighDateTime=0x1d5e3d7, nFileSizeHigh=0x0, nFileSizeLow=0x15a1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OF2JNjHkcnvg VIKrxm.pdf", cAlternateFileName="OF2JNJ~1.PDF")) returned 1 [0105.808] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0105.809] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6845fe0, ftCreationTime.dwHighDateTime=0x1d57c87, ftLastAccessTime.dwLowDateTime=0xa21bbdb0, ftLastAccessTime.dwHighDateTime=0x1d5cd5c, ftLastWriteTime.dwLowDateTime=0xa21bbdb0, ftLastWriteTime.dwHighDateTime=0x1d5cd5c, nFileSizeHigh=0x0, nFileSizeLow=0x13be, dwReserved0=0x0, dwReserved1=0x0, cFileName="pu-kzY_rIfgFT0Mteuo.xlsx", cAlternateFileName="PU-KZY~1.XLS")) returned 1 [0105.809] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x127662e0, ftCreationTime.dwHighDateTime=0x1d59a4f, ftLastAccessTime.dwLowDateTime=0x6d0a1810, ftLastAccessTime.dwHighDateTime=0x1d5dd83, ftLastWriteTime.dwLowDateTime=0x6d0a1810, ftLastWriteTime.dwHighDateTime=0x1d5dd83, nFileSizeHigh=0x0, nFileSizeLow=0x10472, dwReserved0=0x0, dwReserved1=0x0, cFileName="s9COU02KekciXUkK7.pptx", cAlternateFileName="S9COU0~1.PPT")) returned 1 [0105.809] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51694fa0, ftCreationTime.dwHighDateTime=0x1d5ea7f, ftLastAccessTime.dwLowDateTime=0xa2645b90, ftLastAccessTime.dwHighDateTime=0x1d5ebbd, ftLastWriteTime.dwLowDateTime=0xa2645b90, ftLastWriteTime.dwHighDateTime=0x1d5ebbd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="T infAuNyPv7fNplLc1", cAlternateFileName="TINFAU~1")) returned 1 [0105.809] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b326fd0, ftCreationTime.dwHighDateTime=0x1d5e896, ftLastAccessTime.dwLowDateTime=0xb59516b0, ftLastAccessTime.dwHighDateTime=0x1d5ed24, ftLastWriteTime.dwLowDateTime=0xb59516b0, ftLastWriteTime.dwHighDateTime=0x1d5ed24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uKdYVQpd", cAlternateFileName="")) returned 1 [0106.003] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7aa930, ftCreationTime.dwHighDateTime=0x1d5c4f6, ftLastAccessTime.dwLowDateTime=0x12f243d0, ftLastAccessTime.dwHighDateTime=0x1d590f2, ftLastWriteTime.dwLowDateTime=0x12f243d0, ftLastWriteTime.dwHighDateTime=0x1d590f2, nFileSizeHigh=0x0, nFileSizeLow=0x6e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZtOSRCjWb fj4I6a5Q.xlsx", cAlternateFileName="ZTOSRC~1.XLS")) returned 1 [0106.004] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22ac3220, ftCreationTime.dwHighDateTime=0x1d59b35, ftLastAccessTime.dwLowDateTime=0xd8e007c0, ftLastAccessTime.dwHighDateTime=0x1d568f3, ftLastWriteTime.dwLowDateTime=0xd8e007c0, ftLastWriteTime.dwHighDateTime=0x1d568f3, nFileSizeHigh=0x0, nFileSizeLow=0x15bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZxkmDw7Tq87.docx", cAlternateFileName="ZXKMDW~1.DOC")) returned 1 [0106.004] FindNextFileW (in: hFindFile=0x13fd258, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0106.004] FindClose (in: hFindFile=0x13fd258 | out: hFindFile=0x13fd258) returned 1 [0106.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0106.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0106.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x614ef9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0106.005] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Documents.txt", nBufferLength=0x105, lpBuffer=0x614ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Documents.txt", lpFilePart=0x0) returned 0x77 [0106.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f39c) returned 1 [0106.005] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Documents.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\dirs\\documents.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x5b0 [0106.005] GetFileType (hFile=0x5b0) returned 0x1 [0106.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f398) returned 1 [0106.005] GetFileType (hFile=0x5b0) returned 0x1 [0106.006] WriteFile (in: hFile=0x5b0, lpBuffer=0x304ae24*, nNumberOfBytesToWrite=0x51d, lpNumberOfBytesWritten=0x614f418, lpOverlapped=0x0 | out: lpBuffer=0x304ae24*, lpNumberOfBytesWritten=0x614f418*=0x51d, lpOverlapped=0x0) returned 1 [0106.007] CloseHandle (hObject=0x5b0) returned 1 [0106.008] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0x614ef60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0106.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f410) returned 1 [0106.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures" (normalized: "c:\\users\\fd1hvy\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x614f48c | out: lpFileInformation=0x614f48c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7ec2bba, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7ec2bba, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0106.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f40c) returned 1 [0106.009] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0x614ef68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0106.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0106.009] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0106.009] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7ec2bba, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7ec2bba, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14377b8 [0106.009] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7ec2bba, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7ec2bba, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.010] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f392070, ftCreationTime.dwHighDateTime=0x1d5e365, ftLastAccessTime.dwLowDateTime=0x38a41c90, ftLastAccessTime.dwHighDateTime=0x1d5efeb, ftLastWriteTime.dwLowDateTime=0x38a41c90, ftLastWriteTime.dwHighDateTime=0x1d5efeb, nFileSizeHigh=0x0, nFileSizeLow=0x9aab, dwReserved0=0x0, dwReserved1=0x0, cFileName="8P27W27PWVN4c4ZzN.png", cAlternateFileName="8P27W2~1.PNG")) returned 1 [0106.010] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9445f0, ftCreationTime.dwHighDateTime=0x1d5ee3e, ftLastAccessTime.dwLowDateTime=0xfa2a0f0, ftLastAccessTime.dwHighDateTime=0x1d5e2b2, ftLastWriteTime.dwLowDateTime=0xfa2a0f0, ftLastWriteTime.dwHighDateTime=0x1d5e2b2, nFileSizeHigh=0x0, nFileSizeLow=0x12e42, dwReserved0=0x0, dwReserved1=0x0, cFileName="9b68kaR30V.gif", cAlternateFileName="9B68KA~1.GIF")) returned 1 [0106.010] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x425e4b90, ftCreationTime.dwHighDateTime=0x1d5e927, ftLastAccessTime.dwLowDateTime=0x2a351480, ftLastAccessTime.dwHighDateTime=0x1d5e54a, ftLastWriteTime.dwLowDateTime=0x2a351480, ftLastWriteTime.dwHighDateTime=0x1d5e54a, nFileSizeHigh=0x0, nFileSizeLow=0xb9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9e0 IHsdVYgUxglD3vK.gif", cAlternateFileName="9E0IHS~1.GIF")) returned 1 [0106.010] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bc73a0, ftCreationTime.dwHighDateTime=0x1d5e6ce, ftLastAccessTime.dwLowDateTime=0x91aa61d0, ftLastAccessTime.dwHighDateTime=0x1d5eacf, ftLastWriteTime.dwLowDateTime=0x91aa61d0, ftLastWriteTime.dwHighDateTime=0x1d5eacf, nFileSizeHigh=0x0, nFileSizeLow=0xa945, dwReserved0=0x0, dwReserved1=0x0, cFileName="9w8LO8pgNbQhaTGmtC.gif", cAlternateFileName="9W8LO8~1.GIF")) returned 1 [0106.011] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c4cef0, ftCreationTime.dwHighDateTime=0x1d5e386, ftLastAccessTime.dwLowDateTime=0xe21bc910, ftLastAccessTime.dwHighDateTime=0x1d5eff7, ftLastWriteTime.dwLowDateTime=0xe21bc910, ftLastWriteTime.dwHighDateTime=0x1d5eff7, nFileSizeHigh=0x0, nFileSizeLow=0x2774, dwReserved0=0x0, dwReserved1=0x0, cFileName="aSFhPcda.gif", cAlternateFileName="")) returned 1 [0106.011] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547bde00, ftCreationTime.dwHighDateTime=0x1d5e3b4, ftLastAccessTime.dwLowDateTime=0xf2888a80, ftLastAccessTime.dwHighDateTime=0x1d5efa3, ftLastWriteTime.dwLowDateTime=0xf2888a80, ftLastWriteTime.dwHighDateTime=0x1d5efa3, nFileSizeHigh=0x0, nFileSizeLow=0x17a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brw4L-hWz.gif", cAlternateFileName="BRW4L-~1.GIF")) returned 1 [0106.011] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0106.011] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0106.011] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fa73be0, ftCreationTime.dwHighDateTime=0x1d5ea53, ftLastAccessTime.dwLowDateTime=0xbafd8860, ftLastAccessTime.dwHighDateTime=0x1d5e7cc, ftLastWriteTime.dwLowDateTime=0xbafd8860, ftLastWriteTime.dwHighDateTime=0x1d5e7cc, nFileSizeHigh=0x0, nFileSizeLow=0xd3e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="dm2CQIW_j2yY.gif", cAlternateFileName="DM2CQI~1.GIF")) returned 1 [0106.012] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5125c580, ftCreationTime.dwHighDateTime=0x1d5e301, ftLastAccessTime.dwLowDateTime=0xd1a10930, ftLastAccessTime.dwHighDateTime=0x1d5e23a, ftLastWriteTime.dwLowDateTime=0xd1a10930, ftLastWriteTime.dwHighDateTime=0x1d5e23a, nFileSizeHigh=0x0, nFileSizeLow=0x8d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fq90QIURXf9DB4.png", cAlternateFileName="FQ90QI~1.PNG")) returned 1 [0106.012] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x208b4870, ftCreationTime.dwHighDateTime=0x1d5ed3b, ftLastAccessTime.dwLowDateTime=0x1ad2f9a0, ftLastAccessTime.dwHighDateTime=0x1d5e50c, ftLastWriteTime.dwLowDateTime=0x1ad2f9a0, ftLastWriteTime.dwHighDateTime=0x1d5e50c, nFileSizeHigh=0x0, nFileSizeLow=0x18bdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="gQAox-VFo.jpg", cAlternateFileName="GQAOX-~1.JPG")) returned 1 [0106.012] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c80ac0, ftCreationTime.dwHighDateTime=0x1d5ea67, ftLastAccessTime.dwLowDateTime=0x929ff550, ftLastAccessTime.dwHighDateTime=0x1d5e872, ftLastWriteTime.dwLowDateTime=0x929ff550, ftLastWriteTime.dwHighDateTime=0x1d5e872, nFileSizeHigh=0x0, nFileSizeLow=0x93eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="h7Qd4 sgc_smS.png", cAlternateFileName="H7QD4S~1.PNG")) returned 1 [0106.012] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2ccae30, ftCreationTime.dwHighDateTime=0x1d5e935, ftLastAccessTime.dwLowDateTime=0x3df411a0, ftLastAccessTime.dwHighDateTime=0x1d5e45b, ftLastWriteTime.dwLowDateTime=0x3df411a0, ftLastWriteTime.dwHighDateTime=0x1d5e45b, nFileSizeHigh=0x0, nFileSizeLow=0x90b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MxNp3 cj3i.bmp", cAlternateFileName="MXNP3C~1.BMP")) returned 1 [0106.012] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46dd7d40, ftCreationTime.dwHighDateTime=0x1d5eaf7, ftLastAccessTime.dwLowDateTime=0xe8837f70, ftLastAccessTime.dwHighDateTime=0x1d5e938, ftLastWriteTime.dwLowDateTime=0xe8837f70, ftLastWriteTime.dwHighDateTime=0x1d5e938, nFileSizeHigh=0x0, nFileSizeLow=0x22e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="n9n7kE43w7YzXA7Ae.bmp", cAlternateFileName="N9N7KE~1.BMP")) returned 1 [0106.013] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1757ad0, ftCreationTime.dwHighDateTime=0x1d5e4f7, ftLastAccessTime.dwLowDateTime=0x357e5930, ftLastAccessTime.dwHighDateTime=0x1d5e6f0, ftLastWriteTime.dwLowDateTime=0x357e5930, ftLastWriteTime.dwHighDateTime=0x1d5e6f0, nFileSizeHigh=0x0, nFileSizeLow=0x80eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="o7jVN9NgUrNT-.gif", cAlternateFileName="O7JVN9~1.GIF")) returned 1 [0106.013] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7821330, ftCreationTime.dwHighDateTime=0x1d5e973, ftLastAccessTime.dwLowDateTime=0xf14a58b0, ftLastAccessTime.dwHighDateTime=0x1d5ec83, ftLastWriteTime.dwLowDateTime=0xf14a58b0, ftLastWriteTime.dwHighDateTime=0x1d5ec83, nFileSizeHigh=0x0, nFileSizeLow=0x15b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="OHjnWM1Nq54.gif", cAlternateFileName="OHJNWM~1.GIF")) returned 1 [0106.013] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf70b9dc0, ftCreationTime.dwHighDateTime=0x1d5e6f4, ftLastAccessTime.dwLowDateTime=0x2d8b75b0, ftLastAccessTime.dwHighDateTime=0x1d5e91f, ftLastWriteTime.dwLowDateTime=0x2d8b75b0, ftLastWriteTime.dwHighDateTime=0x1d5e91f, nFileSizeHigh=0x0, nFileSizeLow=0x9afb, dwReserved0=0x0, dwReserved1=0x0, cFileName="P9_ fW.png", cAlternateFileName="P9_FW~1.PNG")) returned 1 [0106.013] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1188dde0, ftCreationTime.dwHighDateTime=0x1d5e667, ftLastAccessTime.dwLowDateTime=0xc0405870, ftLastAccessTime.dwHighDateTime=0x1d5e68c, ftLastWriteTime.dwLowDateTime=0xc0405870, ftLastWriteTime.dwHighDateTime=0x1d5e68c, nFileSizeHigh=0x0, nFileSizeLow=0x169fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeM8y_xdRjg.jpg", cAlternateFileName="PEM8Y_~1.JPG")) returned 1 [0106.014] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdadf740, ftCreationTime.dwHighDateTime=0x1d5e5af, ftLastAccessTime.dwLowDateTime=0x8e0827d0, ftLastAccessTime.dwHighDateTime=0x1d5eb5e, ftLastWriteTime.dwLowDateTime=0x8e0827d0, ftLastWriteTime.dwHighDateTime=0x1d5eb5e, nFileSizeHigh=0x0, nFileSizeLow=0x185c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qaOBRhGpETwivd.gif", cAlternateFileName="QAOBRH~1.GIF")) returned 1 [0106.014] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf81ec150, ftCreationTime.dwHighDateTime=0x1d5eaab, ftLastAccessTime.dwLowDateTime=0xfbd01030, ftLastAccessTime.dwHighDateTime=0x1d5e6df, ftLastWriteTime.dwLowDateTime=0xfbd01030, ftLastWriteTime.dwHighDateTime=0x1d5e6df, nFileSizeHigh=0x0, nFileSizeLow=0x10977, dwReserved0=0x0, dwReserved1=0x0, cFileName="qf3h5CKtDuoSTi-ICs.gif", cAlternateFileName="QF3H5C~1.GIF")) returned 1 [0106.014] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a3a53b0, ftCreationTime.dwHighDateTime=0x1d5eda5, ftLastAccessTime.dwLowDateTime=0xf3c01df0, ftLastAccessTime.dwHighDateTime=0x1d5ed23, ftLastWriteTime.dwLowDateTime=0xf3c01df0, ftLastWriteTime.dwHighDateTime=0x1d5ed23, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qk6e6Q_OjoceC", cAlternateFileName="QK6E6Q~1")) returned 1 [0106.014] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4425e290, ftCreationTime.dwHighDateTime=0x1d5ec50, ftLastAccessTime.dwLowDateTime=0xe80ac690, ftLastAccessTime.dwHighDateTime=0x1d5e783, ftLastWriteTime.dwLowDateTime=0xe80ac690, ftLastWriteTime.dwHighDateTime=0x1d5e783, nFileSizeHigh=0x0, nFileSizeLow=0xb5e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="QvWh9MK4M.jpg", cAlternateFileName="QVWH9M~1.JPG")) returned 1 [0106.014] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x648e04f0, ftCreationTime.dwHighDateTime=0x1d5ea06, ftLastAccessTime.dwLowDateTime=0xba6599f0, ftLastAccessTime.dwHighDateTime=0x1d5e241, ftLastWriteTime.dwLowDateTime=0xba6599f0, ftLastWriteTime.dwHighDateTime=0x1d5e241, nFileSizeHigh=0x0, nFileSizeLow=0x8891, dwReserved0=0x0, dwReserved1=0x0, cFileName="RzLvi2x7Jt2GwrU.bmp", cAlternateFileName="RZLVI2~1.BMP")) returned 1 [0106.015] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0106.015] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad2f990, ftCreationTime.dwHighDateTime=0x1d5e5d0, ftLastAccessTime.dwLowDateTime=0x3c482a80, ftLastAccessTime.dwHighDateTime=0x1d5ed1b, ftLastWriteTime.dwLowDateTime=0x3c482a80, ftLastWriteTime.dwHighDateTime=0x1d5ed1b, nFileSizeHigh=0x0, nFileSizeLow=0x4ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SxV5oMRvT.bmp", cAlternateFileName="SXV5OM~1.BMP")) returned 1 [0106.015] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd431b30, ftCreationTime.dwHighDateTime=0x1d5e4fd, ftLastAccessTime.dwLowDateTime=0x2c8b8420, ftLastAccessTime.dwHighDateTime=0x1d5f06d, ftLastWriteTime.dwLowDateTime=0x2c8b8420, ftLastWriteTime.dwHighDateTime=0x1d5f06d, nFileSizeHigh=0x0, nFileSizeLow=0x4f3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyhtPobHw.bmp", cAlternateFileName="SYHTPO~1.BMP")) returned 1 [0106.015] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef500b50, ftCreationTime.dwHighDateTime=0x1d5e55c, ftLastAccessTime.dwLowDateTime=0x8bb0c5a0, ftLastAccessTime.dwHighDateTime=0x1d5e550, ftLastWriteTime.dwLowDateTime=0x8bb0c5a0, ftLastWriteTime.dwHighDateTime=0x1d5e550, nFileSizeHigh=0x0, nFileSizeLow=0xa323, dwReserved0=0x0, dwReserved1=0x0, cFileName="w0vuEm1DZbaikQCnPJD.png", cAlternateFileName="W0VUEM~1.PNG")) returned 1 [0106.016] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e9cf7a0, ftCreationTime.dwHighDateTime=0x1d5e1a3, ftLastAccessTime.dwLowDateTime=0x78df99f0, ftLastAccessTime.dwHighDateTime=0x1d5e218, ftLastWriteTime.dwLowDateTime=0x78df99f0, ftLastWriteTime.dwHighDateTime=0x1d5e218, nFileSizeHigh=0x0, nFileSizeLow=0x18847, dwReserved0=0x0, dwReserved1=0x0, cFileName="yD_UI5za.gif", cAlternateFileName="")) returned 1 [0106.016] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434b2c20, ftCreationTime.dwHighDateTime=0x1d5e19e, ftLastAccessTime.dwLowDateTime=0xb4bbd070, ftLastAccessTime.dwHighDateTime=0x1d5f013, ftLastWriteTime.dwLowDateTime=0xb4bbd070, ftLastWriteTime.dwHighDateTime=0x1d5f013, nFileSizeHigh=0x0, nFileSizeLow=0x324c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ymH30tOC.jpg", cAlternateFileName="")) returned 1 [0106.016] FindNextFileW (in: hFindFile=0x14377b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434b2c20, ftCreationTime.dwHighDateTime=0x1d5e19e, ftLastAccessTime.dwLowDateTime=0xb4bbd070, ftLastAccessTime.dwHighDateTime=0x1d5f013, ftLastWriteTime.dwLowDateTime=0xb4bbd070, ftLastWriteTime.dwHighDateTime=0x1d5f013, nFileSizeHigh=0x0, nFileSizeLow=0x324c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ymH30tOC.jpg", cAlternateFileName="")) returned 0 [0106.016] FindClose (in: hFindFile=0x14377b8 | out: hFindFile=0x14377b8) returned 1 [0106.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0106.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0106.017] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x24 [0106.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0106.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll" (normalized: "c:\\users\\fd1hvy\\pictures\\camera roll"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0106.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x24 [0106.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0106.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x24 [0106.018] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14377f8 [0106.019] FindNextFileW (in: hFindFile=0x14377f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.020] FindNextFileW (in: hFindFile=0x14377f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0106.020] FindNextFileW (in: hFindFile=0x14377f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0106.020] FindClose (in: hFindFile=0x14377f8 | out: hFindFile=0x14377f8) returned 1 [0106.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0106.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0106.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0106.020] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x24 [0106.020] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437c78 [0106.021] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.021] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0106.021] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0106.021] FindClose (in: hFindFile=0x1437c78 | out: hFindFile=0x1437c78) returned 1 [0106.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0106.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0106.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\qk6e6Q_OjoceC", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\qk6e6Q_OjoceC", lpFilePart=0x0) returned 0x26 [0106.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0106.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\qk6e6Q_OjoceC" (normalized: "c:\\users\\fd1hvy\\pictures\\qk6e6q_ojocec"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a3a53b0, ftCreationTime.dwHighDateTime=0x1d5eda5, ftLastAccessTime.dwLowDateTime=0xf3c01df0, ftLastAccessTime.dwHighDateTime=0x1d5ed23, ftLastWriteTime.dwLowDateTime=0xf3c01df0, ftLastWriteTime.dwHighDateTime=0x1d5ed23, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0106.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0106.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\qk6e6Q_OjoceC", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\qk6e6Q_OjoceC", lpFilePart=0x0) returned 0x26 [0106.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0106.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\qk6e6Q_OjoceC", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\qk6e6Q_OjoceC", lpFilePart=0x0) returned 0x26 [0106.022] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\qk6e6Q_OjoceC\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a3a53b0, ftCreationTime.dwHighDateTime=0x1d5eda5, ftLastAccessTime.dwLowDateTime=0xf3c01df0, ftLastAccessTime.dwHighDateTime=0x1d5ed23, ftLastWriteTime.dwLowDateTime=0xf3c01df0, ftLastWriteTime.dwHighDateTime=0x1d5ed23, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437d78 [0106.023] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a3a53b0, ftCreationTime.dwHighDateTime=0x1d5eda5, ftLastAccessTime.dwLowDateTime=0xf3c01df0, ftLastAccessTime.dwHighDateTime=0x1d5ed23, ftLastWriteTime.dwLowDateTime=0xf3c01df0, ftLastWriteTime.dwHighDateTime=0x1d5ed23, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.023] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4157e90, ftCreationTime.dwHighDateTime=0x1d5e38d, ftLastAccessTime.dwLowDateTime=0xd8add970, ftLastAccessTime.dwHighDateTime=0x1d5f0d5, ftLastWriteTime.dwLowDateTime=0xd8add970, ftLastWriteTime.dwHighDateTime=0x1d5f0d5, nFileSizeHigh=0x0, nFileSizeLow=0x4273, dwReserved0=0x0, dwReserved1=0x0, cFileName="2igeQR5.png", cAlternateFileName="")) returned 1 [0106.023] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc562fbc0, ftCreationTime.dwHighDateTime=0x1d5e97d, ftLastAccessTime.dwLowDateTime=0x4f9c03c0, ftLastAccessTime.dwHighDateTime=0x1d5eedf, ftLastWriteTime.dwLowDateTime=0x4f9c03c0, ftLastWriteTime.dwHighDateTime=0x1d5eedf, nFileSizeHigh=0x0, nFileSizeLow=0xf31c, dwReserved0=0x0, dwReserved1=0x0, cFileName="D77PMCR.jpg", cAlternateFileName="")) returned 1 [0106.023] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec28b6e0, ftCreationTime.dwHighDateTime=0x1d5e70d, ftLastAccessTime.dwLowDateTime=0x8b144520, ftLastAccessTime.dwHighDateTime=0x1d5f0a1, ftLastWriteTime.dwLowDateTime=0x8b144520, ftLastWriteTime.dwHighDateTime=0x1d5f0a1, nFileSizeHigh=0x0, nFileSizeLow=0xb1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hp8hKl.png", cAlternateFileName="")) returned 1 [0106.024] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe990cf10, ftCreationTime.dwHighDateTime=0x1d5e309, ftLastAccessTime.dwLowDateTime=0x32791ac0, ftLastAccessTime.dwHighDateTime=0x1d5ee8b, ftLastWriteTime.dwLowDateTime=0x32791ac0, ftLastWriteTime.dwHighDateTime=0x1d5ee8b, nFileSizeHigh=0x0, nFileSizeLow=0x7164, dwReserved0=0x0, dwReserved1=0x0, cFileName="kYIWoORMp2Z-Gr0Car.gif", cAlternateFileName="KYIWOO~1.GIF")) returned 1 [0106.024] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a342b0, ftCreationTime.dwHighDateTime=0x1d5ea6c, ftLastAccessTime.dwLowDateTime=0xcfb41a40, ftLastAccessTime.dwHighDateTime=0x1d5f004, ftLastWriteTime.dwLowDateTime=0xcfb41a40, ftLastWriteTime.dwHighDateTime=0x1d5f004, nFileSizeHigh=0x0, nFileSizeLow=0x16e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="l-FykgCx.bmp", cAlternateFileName="")) returned 1 [0106.024] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27af39c0, ftCreationTime.dwHighDateTime=0x1d5ebe9, ftLastAccessTime.dwLowDateTime=0x19296590, ftLastAccessTime.dwHighDateTime=0x1d5e6ff, ftLastWriteTime.dwLowDateTime=0x19296590, ftLastWriteTime.dwHighDateTime=0x1d5e6ff, nFileSizeHigh=0x0, nFileSizeLow=0xddc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="LVe1kpEVa_mkxHKI5K7.jpg", cAlternateFileName="LVE1KP~1.JPG")) returned 1 [0106.024] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x894c45a0, ftCreationTime.dwHighDateTime=0x1d5e6f9, ftLastAccessTime.dwLowDateTime=0xe2ccf390, ftLastAccessTime.dwHighDateTime=0x1d5e465, ftLastWriteTime.dwLowDateTime=0xe2ccf390, ftLastWriteTime.dwHighDateTime=0x1d5e465, nFileSizeHigh=0x0, nFileSizeLow=0xc546, dwReserved0=0x0, dwReserved1=0x0, cFileName="l_QuIo34gMl.png", cAlternateFileName="L_QUIO~1.PNG")) returned 1 [0106.024] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x894c45a0, ftCreationTime.dwHighDateTime=0x1d5e6f9, ftLastAccessTime.dwLowDateTime=0xe2ccf390, ftLastAccessTime.dwHighDateTime=0x1d5e465, ftLastWriteTime.dwLowDateTime=0xe2ccf390, ftLastWriteTime.dwHighDateTime=0x1d5e465, nFileSizeHigh=0x0, nFileSizeLow=0xc546, dwReserved0=0x0, dwReserved1=0x0, cFileName="l_QuIo34gMl.png", cAlternateFileName="L_QUIO~1.PNG")) returned 0 [0106.025] FindClose (in: hFindFile=0x1437d78 | out: hFindFile=0x1437d78) returned 1 [0106.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0106.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0106.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0106.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\qk6e6Q_OjoceC", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\qk6e6Q_OjoceC", lpFilePart=0x0) returned 0x26 [0106.025] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\qk6e6Q_OjoceC\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a3a53b0, ftCreationTime.dwHighDateTime=0x1d5eda5, ftLastAccessTime.dwLowDateTime=0xf3c01df0, ftLastAccessTime.dwHighDateTime=0x1d5ed23, ftLastWriteTime.dwLowDateTime=0xf3c01df0, ftLastWriteTime.dwHighDateTime=0x1d5ed23, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437c78 [0106.025] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a3a53b0, ftCreationTime.dwHighDateTime=0x1d5eda5, ftLastAccessTime.dwLowDateTime=0xf3c01df0, ftLastAccessTime.dwHighDateTime=0x1d5ed23, ftLastWriteTime.dwLowDateTime=0xf3c01df0, ftLastWriteTime.dwHighDateTime=0x1d5ed23, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.026] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4157e90, ftCreationTime.dwHighDateTime=0x1d5e38d, ftLastAccessTime.dwLowDateTime=0xd8add970, ftLastAccessTime.dwHighDateTime=0x1d5f0d5, ftLastWriteTime.dwLowDateTime=0xd8add970, ftLastWriteTime.dwHighDateTime=0x1d5f0d5, nFileSizeHigh=0x0, nFileSizeLow=0x4273, dwReserved0=0x0, dwReserved1=0x0, cFileName="2igeQR5.png", cAlternateFileName="")) returned 1 [0106.026] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc562fbc0, ftCreationTime.dwHighDateTime=0x1d5e97d, ftLastAccessTime.dwLowDateTime=0x4f9c03c0, ftLastAccessTime.dwHighDateTime=0x1d5eedf, ftLastWriteTime.dwLowDateTime=0x4f9c03c0, ftLastWriteTime.dwHighDateTime=0x1d5eedf, nFileSizeHigh=0x0, nFileSizeLow=0xf31c, dwReserved0=0x0, dwReserved1=0x0, cFileName="D77PMCR.jpg", cAlternateFileName="")) returned 1 [0106.026] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec28b6e0, ftCreationTime.dwHighDateTime=0x1d5e70d, ftLastAccessTime.dwLowDateTime=0x8b144520, ftLastAccessTime.dwHighDateTime=0x1d5f0a1, ftLastWriteTime.dwLowDateTime=0x8b144520, ftLastWriteTime.dwHighDateTime=0x1d5f0a1, nFileSizeHigh=0x0, nFileSizeLow=0xb1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hp8hKl.png", cAlternateFileName="")) returned 1 [0106.026] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe990cf10, ftCreationTime.dwHighDateTime=0x1d5e309, ftLastAccessTime.dwLowDateTime=0x32791ac0, ftLastAccessTime.dwHighDateTime=0x1d5ee8b, ftLastWriteTime.dwLowDateTime=0x32791ac0, ftLastWriteTime.dwHighDateTime=0x1d5ee8b, nFileSizeHigh=0x0, nFileSizeLow=0x7164, dwReserved0=0x0, dwReserved1=0x0, cFileName="kYIWoORMp2Z-Gr0Car.gif", cAlternateFileName="KYIWOO~1.GIF")) returned 1 [0106.026] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a342b0, ftCreationTime.dwHighDateTime=0x1d5ea6c, ftLastAccessTime.dwLowDateTime=0xcfb41a40, ftLastAccessTime.dwHighDateTime=0x1d5f004, ftLastWriteTime.dwLowDateTime=0xcfb41a40, ftLastWriteTime.dwHighDateTime=0x1d5f004, nFileSizeHigh=0x0, nFileSizeLow=0x16e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="l-FykgCx.bmp", cAlternateFileName="")) returned 1 [0106.026] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27af39c0, ftCreationTime.dwHighDateTime=0x1d5ebe9, ftLastAccessTime.dwLowDateTime=0x19296590, ftLastAccessTime.dwHighDateTime=0x1d5e6ff, ftLastWriteTime.dwLowDateTime=0x19296590, ftLastWriteTime.dwHighDateTime=0x1d5e6ff, nFileSizeHigh=0x0, nFileSizeLow=0xddc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="LVe1kpEVa_mkxHKI5K7.jpg", cAlternateFileName="LVE1KP~1.JPG")) returned 1 [0106.027] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x894c45a0, ftCreationTime.dwHighDateTime=0x1d5e6f9, ftLastAccessTime.dwLowDateTime=0xe2ccf390, ftLastAccessTime.dwHighDateTime=0x1d5e465, ftLastWriteTime.dwLowDateTime=0xe2ccf390, ftLastWriteTime.dwHighDateTime=0x1d5e465, nFileSizeHigh=0x0, nFileSizeLow=0xc546, dwReserved0=0x0, dwReserved1=0x0, cFileName="l_QuIo34gMl.png", cAlternateFileName="L_QUIO~1.PNG")) returned 1 [0106.027] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0106.027] FindClose (in: hFindFile=0x1437c78 | out: hFindFile=0x1437c78) returned 1 [0106.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0106.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0106.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x27 [0106.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0106.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures" (normalized: "c:\\users\\fd1hvy\\pictures\\saved pictures"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0106.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x27 [0106.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0106.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x27 [0106.029] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437a78 [0106.029] FindNextFileW (in: hFindFile=0x1437a78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.029] FindNextFileW (in: hFindFile=0x1437a78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0106.029] FindNextFileW (in: hFindFile=0x1437a78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0106.030] FindClose (in: hFindFile=0x1437a78 | out: hFindFile=0x1437a78) returned 1 [0106.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0106.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0106.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0106.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x27 [0106.030] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14378b8 [0106.030] FindNextFileW (in: hFindFile=0x14378b8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.031] FindNextFileW (in: hFindFile=0x14378b8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0106.031] FindNextFileW (in: hFindFile=0x14378b8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0106.031] FindClose (in: hFindFile=0x14378b8 | out: hFindFile=0x14378b8) returned 1 [0106.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0106.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0106.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0106.031] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0106.031] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7ec2bba, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7ec2bba, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437ab8 [0106.032] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7ec2bba, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7ec2bba, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.032] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f392070, ftCreationTime.dwHighDateTime=0x1d5e365, ftLastAccessTime.dwLowDateTime=0x38a41c90, ftLastAccessTime.dwHighDateTime=0x1d5efeb, ftLastWriteTime.dwLowDateTime=0x38a41c90, ftLastWriteTime.dwHighDateTime=0x1d5efeb, nFileSizeHigh=0x0, nFileSizeLow=0x9aab, dwReserved0=0x0, dwReserved1=0x0, cFileName="8P27W27PWVN4c4ZzN.png", cAlternateFileName="8P27W2~1.PNG")) returned 1 [0106.032] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9445f0, ftCreationTime.dwHighDateTime=0x1d5ee3e, ftLastAccessTime.dwLowDateTime=0xfa2a0f0, ftLastAccessTime.dwHighDateTime=0x1d5e2b2, ftLastWriteTime.dwLowDateTime=0xfa2a0f0, ftLastWriteTime.dwHighDateTime=0x1d5e2b2, nFileSizeHigh=0x0, nFileSizeLow=0x12e42, dwReserved0=0x0, dwReserved1=0x0, cFileName="9b68kaR30V.gif", cAlternateFileName="9B68KA~1.GIF")) returned 1 [0106.032] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x425e4b90, ftCreationTime.dwHighDateTime=0x1d5e927, ftLastAccessTime.dwLowDateTime=0x2a351480, ftLastAccessTime.dwHighDateTime=0x1d5e54a, ftLastWriteTime.dwLowDateTime=0x2a351480, ftLastWriteTime.dwHighDateTime=0x1d5e54a, nFileSizeHigh=0x0, nFileSizeLow=0xb9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9e0 IHsdVYgUxglD3vK.gif", cAlternateFileName="9E0IHS~1.GIF")) returned 1 [0106.032] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bc73a0, ftCreationTime.dwHighDateTime=0x1d5e6ce, ftLastAccessTime.dwLowDateTime=0x91aa61d0, ftLastAccessTime.dwHighDateTime=0x1d5eacf, ftLastWriteTime.dwLowDateTime=0x91aa61d0, ftLastWriteTime.dwHighDateTime=0x1d5eacf, nFileSizeHigh=0x0, nFileSizeLow=0xa945, dwReserved0=0x0, dwReserved1=0x0, cFileName="9w8LO8pgNbQhaTGmtC.gif", cAlternateFileName="9W8LO8~1.GIF")) returned 1 [0106.033] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c4cef0, ftCreationTime.dwHighDateTime=0x1d5e386, ftLastAccessTime.dwLowDateTime=0xe21bc910, ftLastAccessTime.dwHighDateTime=0x1d5eff7, ftLastWriteTime.dwLowDateTime=0xe21bc910, ftLastWriteTime.dwHighDateTime=0x1d5eff7, nFileSizeHigh=0x0, nFileSizeLow=0x2774, dwReserved0=0x0, dwReserved1=0x0, cFileName="aSFhPcda.gif", cAlternateFileName="")) returned 1 [0106.033] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547bde00, ftCreationTime.dwHighDateTime=0x1d5e3b4, ftLastAccessTime.dwLowDateTime=0xf2888a80, ftLastAccessTime.dwHighDateTime=0x1d5efa3, ftLastWriteTime.dwLowDateTime=0xf2888a80, ftLastWriteTime.dwHighDateTime=0x1d5efa3, nFileSizeHigh=0x0, nFileSizeLow=0x17a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brw4L-hWz.gif", cAlternateFileName="BRW4L-~1.GIF")) returned 1 [0106.033] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0106.033] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0106.033] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fa73be0, ftCreationTime.dwHighDateTime=0x1d5ea53, ftLastAccessTime.dwLowDateTime=0xbafd8860, ftLastAccessTime.dwHighDateTime=0x1d5e7cc, ftLastWriteTime.dwLowDateTime=0xbafd8860, ftLastWriteTime.dwHighDateTime=0x1d5e7cc, nFileSizeHigh=0x0, nFileSizeLow=0xd3e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="dm2CQIW_j2yY.gif", cAlternateFileName="DM2CQI~1.GIF")) returned 1 [0106.034] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5125c580, ftCreationTime.dwHighDateTime=0x1d5e301, ftLastAccessTime.dwLowDateTime=0xd1a10930, ftLastAccessTime.dwHighDateTime=0x1d5e23a, ftLastWriteTime.dwLowDateTime=0xd1a10930, ftLastWriteTime.dwHighDateTime=0x1d5e23a, nFileSizeHigh=0x0, nFileSizeLow=0x8d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fq90QIURXf9DB4.png", cAlternateFileName="FQ90QI~1.PNG")) returned 1 [0106.034] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x208b4870, ftCreationTime.dwHighDateTime=0x1d5ed3b, ftLastAccessTime.dwLowDateTime=0x1ad2f9a0, ftLastAccessTime.dwHighDateTime=0x1d5e50c, ftLastWriteTime.dwLowDateTime=0x1ad2f9a0, ftLastWriteTime.dwHighDateTime=0x1d5e50c, nFileSizeHigh=0x0, nFileSizeLow=0x18bdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="gQAox-VFo.jpg", cAlternateFileName="GQAOX-~1.JPG")) returned 1 [0106.035] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c80ac0, ftCreationTime.dwHighDateTime=0x1d5ea67, ftLastAccessTime.dwLowDateTime=0x929ff550, ftLastAccessTime.dwHighDateTime=0x1d5e872, ftLastWriteTime.dwLowDateTime=0x929ff550, ftLastWriteTime.dwHighDateTime=0x1d5e872, nFileSizeHigh=0x0, nFileSizeLow=0x93eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="h7Qd4 sgc_smS.png", cAlternateFileName="H7QD4S~1.PNG")) returned 1 [0106.035] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2ccae30, ftCreationTime.dwHighDateTime=0x1d5e935, ftLastAccessTime.dwLowDateTime=0x3df411a0, ftLastAccessTime.dwHighDateTime=0x1d5e45b, ftLastWriteTime.dwLowDateTime=0x3df411a0, ftLastWriteTime.dwHighDateTime=0x1d5e45b, nFileSizeHigh=0x0, nFileSizeLow=0x90b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MxNp3 cj3i.bmp", cAlternateFileName="MXNP3C~1.BMP")) returned 1 [0106.036] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46dd7d40, ftCreationTime.dwHighDateTime=0x1d5eaf7, ftLastAccessTime.dwLowDateTime=0xe8837f70, ftLastAccessTime.dwHighDateTime=0x1d5e938, ftLastWriteTime.dwLowDateTime=0xe8837f70, ftLastWriteTime.dwHighDateTime=0x1d5e938, nFileSizeHigh=0x0, nFileSizeLow=0x22e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="n9n7kE43w7YzXA7Ae.bmp", cAlternateFileName="N9N7KE~1.BMP")) returned 1 [0106.036] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1757ad0, ftCreationTime.dwHighDateTime=0x1d5e4f7, ftLastAccessTime.dwLowDateTime=0x357e5930, ftLastAccessTime.dwHighDateTime=0x1d5e6f0, ftLastWriteTime.dwLowDateTime=0x357e5930, ftLastWriteTime.dwHighDateTime=0x1d5e6f0, nFileSizeHigh=0x0, nFileSizeLow=0x80eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="o7jVN9NgUrNT-.gif", cAlternateFileName="O7JVN9~1.GIF")) returned 1 [0106.036] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7821330, ftCreationTime.dwHighDateTime=0x1d5e973, ftLastAccessTime.dwLowDateTime=0xf14a58b0, ftLastAccessTime.dwHighDateTime=0x1d5ec83, ftLastWriteTime.dwLowDateTime=0xf14a58b0, ftLastWriteTime.dwHighDateTime=0x1d5ec83, nFileSizeHigh=0x0, nFileSizeLow=0x15b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="OHjnWM1Nq54.gif", cAlternateFileName="OHJNWM~1.GIF")) returned 1 [0106.036] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf70b9dc0, ftCreationTime.dwHighDateTime=0x1d5e6f4, ftLastAccessTime.dwLowDateTime=0x2d8b75b0, ftLastAccessTime.dwHighDateTime=0x1d5e91f, ftLastWriteTime.dwLowDateTime=0x2d8b75b0, ftLastWriteTime.dwHighDateTime=0x1d5e91f, nFileSizeHigh=0x0, nFileSizeLow=0x9afb, dwReserved0=0x0, dwReserved1=0x0, cFileName="P9_ fW.png", cAlternateFileName="P9_FW~1.PNG")) returned 1 [0106.036] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1188dde0, ftCreationTime.dwHighDateTime=0x1d5e667, ftLastAccessTime.dwLowDateTime=0xc0405870, ftLastAccessTime.dwHighDateTime=0x1d5e68c, ftLastWriteTime.dwLowDateTime=0xc0405870, ftLastWriteTime.dwHighDateTime=0x1d5e68c, nFileSizeHigh=0x0, nFileSizeLow=0x169fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeM8y_xdRjg.jpg", cAlternateFileName="PEM8Y_~1.JPG")) returned 1 [0106.037] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdadf740, ftCreationTime.dwHighDateTime=0x1d5e5af, ftLastAccessTime.dwLowDateTime=0x8e0827d0, ftLastAccessTime.dwHighDateTime=0x1d5eb5e, ftLastWriteTime.dwLowDateTime=0x8e0827d0, ftLastWriteTime.dwHighDateTime=0x1d5eb5e, nFileSizeHigh=0x0, nFileSizeLow=0x185c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qaOBRhGpETwivd.gif", cAlternateFileName="QAOBRH~1.GIF")) returned 1 [0106.037] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf81ec150, ftCreationTime.dwHighDateTime=0x1d5eaab, ftLastAccessTime.dwLowDateTime=0xfbd01030, ftLastAccessTime.dwHighDateTime=0x1d5e6df, ftLastWriteTime.dwLowDateTime=0xfbd01030, ftLastWriteTime.dwHighDateTime=0x1d5e6df, nFileSizeHigh=0x0, nFileSizeLow=0x10977, dwReserved0=0x0, dwReserved1=0x0, cFileName="qf3h5CKtDuoSTi-ICs.gif", cAlternateFileName="QF3H5C~1.GIF")) returned 1 [0106.037] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a3a53b0, ftCreationTime.dwHighDateTime=0x1d5eda5, ftLastAccessTime.dwLowDateTime=0xf3c01df0, ftLastAccessTime.dwHighDateTime=0x1d5ed23, ftLastWriteTime.dwLowDateTime=0xf3c01df0, ftLastWriteTime.dwHighDateTime=0x1d5ed23, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qk6e6Q_OjoceC", cAlternateFileName="QK6E6Q~1")) returned 1 [0106.037] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4425e290, ftCreationTime.dwHighDateTime=0x1d5ec50, ftLastAccessTime.dwLowDateTime=0xe80ac690, ftLastAccessTime.dwHighDateTime=0x1d5e783, ftLastWriteTime.dwLowDateTime=0xe80ac690, ftLastWriteTime.dwHighDateTime=0x1d5e783, nFileSizeHigh=0x0, nFileSizeLow=0xb5e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="QvWh9MK4M.jpg", cAlternateFileName="QVWH9M~1.JPG")) returned 1 [0106.037] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x648e04f0, ftCreationTime.dwHighDateTime=0x1d5ea06, ftLastAccessTime.dwLowDateTime=0xba6599f0, ftLastAccessTime.dwHighDateTime=0x1d5e241, ftLastWriteTime.dwLowDateTime=0xba6599f0, ftLastWriteTime.dwHighDateTime=0x1d5e241, nFileSizeHigh=0x0, nFileSizeLow=0x8891, dwReserved0=0x0, dwReserved1=0x0, cFileName="RzLvi2x7Jt2GwrU.bmp", cAlternateFileName="RZLVI2~1.BMP")) returned 1 [0106.038] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0106.038] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad2f990, ftCreationTime.dwHighDateTime=0x1d5e5d0, ftLastAccessTime.dwLowDateTime=0x3c482a80, ftLastAccessTime.dwHighDateTime=0x1d5ed1b, ftLastWriteTime.dwLowDateTime=0x3c482a80, ftLastWriteTime.dwHighDateTime=0x1d5ed1b, nFileSizeHigh=0x0, nFileSizeLow=0x4ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SxV5oMRvT.bmp", cAlternateFileName="SXV5OM~1.BMP")) returned 1 [0106.038] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd431b30, ftCreationTime.dwHighDateTime=0x1d5e4fd, ftLastAccessTime.dwLowDateTime=0x2c8b8420, ftLastAccessTime.dwHighDateTime=0x1d5f06d, ftLastWriteTime.dwLowDateTime=0x2c8b8420, ftLastWriteTime.dwHighDateTime=0x1d5f06d, nFileSizeHigh=0x0, nFileSizeLow=0x4f3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyhtPobHw.bmp", cAlternateFileName="SYHTPO~1.BMP")) returned 1 [0106.038] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef500b50, ftCreationTime.dwHighDateTime=0x1d5e55c, ftLastAccessTime.dwLowDateTime=0x8bb0c5a0, ftLastAccessTime.dwHighDateTime=0x1d5e550, ftLastWriteTime.dwLowDateTime=0x8bb0c5a0, ftLastWriteTime.dwHighDateTime=0x1d5e550, nFileSizeHigh=0x0, nFileSizeLow=0xa323, dwReserved0=0x0, dwReserved1=0x0, cFileName="w0vuEm1DZbaikQCnPJD.png", cAlternateFileName="W0VUEM~1.PNG")) returned 1 [0106.038] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e9cf7a0, ftCreationTime.dwHighDateTime=0x1d5e1a3, ftLastAccessTime.dwLowDateTime=0x78df99f0, ftLastAccessTime.dwHighDateTime=0x1d5e218, ftLastWriteTime.dwLowDateTime=0x78df99f0, ftLastWriteTime.dwHighDateTime=0x1d5e218, nFileSizeHigh=0x0, nFileSizeLow=0x18847, dwReserved0=0x0, dwReserved1=0x0, cFileName="yD_UI5za.gif", cAlternateFileName="")) returned 1 [0106.039] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434b2c20, ftCreationTime.dwHighDateTime=0x1d5e19e, ftLastAccessTime.dwLowDateTime=0xb4bbd070, ftLastAccessTime.dwHighDateTime=0x1d5f013, ftLastWriteTime.dwLowDateTime=0xb4bbd070, ftLastWriteTime.dwHighDateTime=0x1d5f013, nFileSizeHigh=0x0, nFileSizeLow=0x324c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ymH30tOC.jpg", cAlternateFileName="")) returned 1 [0106.039] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0106.039] FindClose (in: hFindFile=0x1437ab8 | out: hFindFile=0x1437ab8) returned 1 [0106.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0106.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0106.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0x614ef9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0106.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Pictures.txt", nBufferLength=0x105, lpBuffer=0x614ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Pictures.txt", lpFilePart=0x0) returned 0x76 [0106.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f39c) returned 1 [0106.040] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Pictures.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\dirs\\pictures.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x5b0 [0106.040] GetFileType (hFile=0x5b0) returned 0x1 [0106.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f398) returned 1 [0106.040] GetFileType (hFile=0x5b0) returned 0x1 [0106.040] WriteFile (in: hFile=0x5b0, lpBuffer=0x3059ea8*, nNumberOfBytesToWrite=0x2ce, lpNumberOfBytesWritten=0x614f418, lpOverlapped=0x0 | out: lpBuffer=0x3059ea8*, lpNumberOfBytesWritten=0x614f418*=0x2ce, lpOverlapped=0x0) returned 1 [0107.966] CloseHandle (hObject=0x5b0) returned 1 [0107.972] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0x614ef60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0107.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f410) returned 1 [0107.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos" (normalized: "c:\\users\\fd1hvy\\videos"), fInfoLevelId=0x0, lpFileInformation=0x614f48c | out: lpFileInformation=0x614f48c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7e040d2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7e040d2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0107.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f40c) returned 1 [0107.972] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0x614ef68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0107.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0107.973] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0107.973] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7e040d2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7e040d2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437ab8 [0107.973] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7e040d2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7e040d2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.974] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce5cc10, ftCreationTime.dwHighDateTime=0x1d5e8bf, ftLastAccessTime.dwLowDateTime=0x693a2f30, ftLastAccessTime.dwHighDateTime=0x1d5e103, ftLastWriteTime.dwLowDateTime=0x693a2f30, ftLastWriteTime.dwHighDateTime=0x1d5e103, nFileSizeHigh=0x0, nFileSizeLow=0x14ece, dwReserved0=0x0, dwReserved1=0x0, cFileName="6frDM4VKDoC3z.avi", cAlternateFileName="6FRDM4~1.AVI")) returned 1 [0107.975] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9febdb0, ftCreationTime.dwHighDateTime=0x1d5e1d2, ftLastAccessTime.dwLowDateTime=0x480d7fd0, ftLastAccessTime.dwHighDateTime=0x1d5e728, ftLastWriteTime.dwLowDateTime=0x480d7fd0, ftLastWriteTime.dwHighDateTime=0x1d5e728, nFileSizeHigh=0x0, nFileSizeLow=0x12fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="8-B02W4mOumqmlE1Nbh.mkv", cAlternateFileName="8-B02W~1.MKV")) returned 1 [0107.975] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0107.975] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12f21890, ftCreationTime.dwHighDateTime=0x1d5e8dd, ftLastAccessTime.dwLowDateTime=0xcff75630, ftLastAccessTime.dwHighDateTime=0x1d5ee82, ftLastWriteTime.dwLowDateTime=0xcff75630, ftLastWriteTime.dwHighDateTime=0x1d5ee82, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JpDgGgiLXKHKj Ww_", cAlternateFileName="JPDGGG~1")) returned 1 [0107.975] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52f58d0, ftCreationTime.dwHighDateTime=0x1d5e597, ftLastAccessTime.dwLowDateTime=0x84d3ecf0, ftLastAccessTime.dwHighDateTime=0x1d5ef49, ftLastWriteTime.dwLowDateTime=0x84d3ecf0, ftLastWriteTime.dwHighDateTime=0x1d5ef49, nFileSizeHigh=0x0, nFileSizeLow=0x12bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="olXvs.mkv", cAlternateFileName="")) returned 1 [0107.975] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x923b6e30, ftCreationTime.dwHighDateTime=0x1d5eeb4, ftLastAccessTime.dwLowDateTime=0xee4150f0, ftLastAccessTime.dwHighDateTime=0x1d5e48c, ftLastWriteTime.dwLowDateTime=0xee4150f0, ftLastWriteTime.dwHighDateTime=0x1d5e48c, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="orlUj4aYPw.mp4", cAlternateFileName="ORLUJ4~1.MP4")) returned 1 [0107.976] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58787b80, ftCreationTime.dwHighDateTime=0x1d5e14d, ftLastAccessTime.dwLowDateTime=0x6688e980, ftLastAccessTime.dwHighDateTime=0x1d5ead5, ftLastWriteTime.dwLowDateTime=0x6688e980, ftLastWriteTime.dwHighDateTime=0x1d5ead5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QOBwx1DhrflIEA8pB7n", cAlternateFileName="QOBWX1~1")) returned 1 [0107.976] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5feb35d0, ftCreationTime.dwHighDateTime=0x1d5e27c, ftLastAccessTime.dwLowDateTime=0x7cbf24c0, ftLastAccessTime.dwHighDateTime=0x1d5e32e, ftLastWriteTime.dwLowDateTime=0x7cbf24c0, ftLastWriteTime.dwHighDateTime=0x1d5e32e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SgHBc1dUnNt4uo", cAlternateFileName="SGHBC1~1")) returned 1 [0107.976] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.976] FindClose (in: hFindFile=0x1437ab8 | out: hFindFile=0x1437ab8) returned 1 [0107.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0107.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0107.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\JpDgGgiLXKHKj Ww_", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\JpDgGgiLXKHKj Ww_", lpFilePart=0x0) returned 0x28 [0107.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0107.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\JpDgGgiLXKHKj Ww_" (normalized: "c:\\users\\fd1hvy\\videos\\jpdgggilxkhkj ww_"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12f21890, ftCreationTime.dwHighDateTime=0x1d5e8dd, ftLastAccessTime.dwLowDateTime=0xcff75630, ftLastAccessTime.dwHighDateTime=0x1d5ee82, ftLastWriteTime.dwLowDateTime=0xcff75630, ftLastWriteTime.dwHighDateTime=0x1d5ee82, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0107.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0107.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\JpDgGgiLXKHKj Ww_", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\JpDgGgiLXKHKj Ww_", lpFilePart=0x0) returned 0x28 [0107.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0107.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\JpDgGgiLXKHKj Ww_", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\JpDgGgiLXKHKj Ww_", lpFilePart=0x0) returned 0x28 [0107.978] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\JpDgGgiLXKHKj Ww_\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12f21890, ftCreationTime.dwHighDateTime=0x1d5e8dd, ftLastAccessTime.dwLowDateTime=0xcff75630, ftLastAccessTime.dwHighDateTime=0x1d5ee82, ftLastWriteTime.dwLowDateTime=0xcff75630, ftLastWriteTime.dwHighDateTime=0x1d5ee82, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437c78 [0107.978] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12f21890, ftCreationTime.dwHighDateTime=0x1d5e8dd, ftLastAccessTime.dwLowDateTime=0xcff75630, ftLastAccessTime.dwHighDateTime=0x1d5ee82, ftLastWriteTime.dwLowDateTime=0xcff75630, ftLastWriteTime.dwHighDateTime=0x1d5ee82, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.979] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5174b190, ftCreationTime.dwHighDateTime=0x1d5e81f, ftLastAccessTime.dwLowDateTime=0xd0c85400, ftLastAccessTime.dwHighDateTime=0x1d5e7ee, ftLastWriteTime.dwLowDateTime=0xd0c85400, ftLastWriteTime.dwHighDateTime=0x1d5e7ee, nFileSizeHigh=0x0, nFileSizeLow=0x184de, dwReserved0=0x0, dwReserved1=0x0, cFileName="EYUz003C.swf", cAlternateFileName="")) returned 1 [0107.979] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe582290, ftCreationTime.dwHighDateTime=0x1d5ec2d, ftLastAccessTime.dwLowDateTime=0x8ee7f8d0, ftLastAccessTime.dwHighDateTime=0x1d5e300, ftLastWriteTime.dwLowDateTime=0x8ee7f8d0, ftLastWriteTime.dwHighDateTime=0x1d5e300, nFileSizeHigh=0x0, nFileSizeLow=0x9df5, dwReserved0=0x0, dwReserved1=0x0, cFileName="O6QMQRqxYimUg8.flv", cAlternateFileName="O6QMQR~1.FLV")) returned 1 [0107.980] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ccf8d0, ftCreationTime.dwHighDateTime=0x1d5e8bd, ftLastAccessTime.dwLowDateTime=0xaf99ccf0, ftLastAccessTime.dwHighDateTime=0x1d5e88e, ftLastWriteTime.dwLowDateTime=0xaf99ccf0, ftLastWriteTime.dwHighDateTime=0x1d5e88e, nFileSizeHigh=0x0, nFileSizeLow=0xd403, dwReserved0=0x0, dwReserved1=0x0, cFileName="OQGKUdbLoLyq0if.avi", cAlternateFileName="OQGKUD~1.AVI")) returned 1 [0107.980] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30ba2480, ftCreationTime.dwHighDateTime=0x1d5e76b, ftLastAccessTime.dwLowDateTime=0xfac62820, ftLastAccessTime.dwHighDateTime=0x1d5ea3e, ftLastWriteTime.dwLowDateTime=0xfac62820, ftLastWriteTime.dwHighDateTime=0x1d5ea3e, nFileSizeHigh=0x0, nFileSizeLow=0x14e9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYrA qF9H.swf", cAlternateFileName="PYRAQF~1.SWF")) returned 1 [0107.981] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad96050, ftCreationTime.dwHighDateTime=0x1d5e792, ftLastAccessTime.dwLowDateTime=0xbe30fab0, ftLastAccessTime.dwHighDateTime=0x1d5e8a0, ftLastWriteTime.dwLowDateTime=0xbe30fab0, ftLastWriteTime.dwHighDateTime=0x1d5e8a0, nFileSizeHigh=0x0, nFileSizeLow=0xf5f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q3Itg90KpQ4PlmSO Z.mp4", cAlternateFileName="Q3ITG9~1.MP4")) returned 1 [0107.981] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80afeb30, ftCreationTime.dwHighDateTime=0x1d5f109, ftLastAccessTime.dwLowDateTime=0xeb5ab510, ftLastAccessTime.dwHighDateTime=0x1d5ea19, ftLastWriteTime.dwLowDateTime=0xeb5ab510, ftLastWriteTime.dwHighDateTime=0x1d5ea19, nFileSizeHigh=0x0, nFileSizeLow=0x6216, dwReserved0=0x0, dwReserved1=0x0, cFileName="t6A0JPoqhW2.flv", cAlternateFileName="T6A0JP~1.FLV")) returned 1 [0107.982] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ff0110, ftCreationTime.dwHighDateTime=0x1d5e0ff, ftLastAccessTime.dwLowDateTime=0xd55a1c60, ftLastAccessTime.dwHighDateTime=0x1d5e947, ftLastWriteTime.dwLowDateTime=0xd55a1c60, ftLastWriteTime.dwHighDateTime=0x1d5e947, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="UQhFnFG7yhf3XDmPn.flv", cAlternateFileName="UQHFNF~1.FLV")) returned 1 [0107.983] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5bd6c0, ftCreationTime.dwHighDateTime=0x1d5e609, ftLastAccessTime.dwLowDateTime=0xe3d3ba20, ftLastAccessTime.dwHighDateTime=0x1d5e9d4, ftLastWriteTime.dwLowDateTime=0xe3d3ba20, ftLastWriteTime.dwHighDateTime=0x1d5e9d4, nFileSizeHigh=0x0, nFileSizeLow=0x14490, dwReserved0=0x0, dwReserved1=0x0, cFileName="zebP7Nb OEBec1.mkv", cAlternateFileName="ZEBP7N~1.MKV")) returned 1 [0107.983] FindNextFileW (in: hFindFile=0x1437c78, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5bd6c0, ftCreationTime.dwHighDateTime=0x1d5e609, ftLastAccessTime.dwLowDateTime=0xe3d3ba20, ftLastAccessTime.dwHighDateTime=0x1d5e9d4, ftLastWriteTime.dwLowDateTime=0xe3d3ba20, ftLastWriteTime.dwHighDateTime=0x1d5e9d4, nFileSizeHigh=0x0, nFileSizeLow=0x14490, dwReserved0=0x0, dwReserved1=0x0, cFileName="zebP7Nb OEBec1.mkv", cAlternateFileName="ZEBP7N~1.MKV")) returned 0 [0107.983] FindClose (in: hFindFile=0x1437c78 | out: hFindFile=0x1437c78) returned 1 [0107.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0107.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0107.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0107.984] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\JpDgGgiLXKHKj Ww_", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\JpDgGgiLXKHKj Ww_", lpFilePart=0x0) returned 0x28 [0107.984] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\JpDgGgiLXKHKj Ww_\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12f21890, ftCreationTime.dwHighDateTime=0x1d5e8dd, ftLastAccessTime.dwLowDateTime=0xcff75630, ftLastAccessTime.dwHighDateTime=0x1d5ee82, ftLastWriteTime.dwLowDateTime=0xcff75630, ftLastWriteTime.dwHighDateTime=0x1d5ee82, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14379f8 [0107.985] FindNextFileW (in: hFindFile=0x14379f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12f21890, ftCreationTime.dwHighDateTime=0x1d5e8dd, ftLastAccessTime.dwLowDateTime=0xcff75630, ftLastAccessTime.dwHighDateTime=0x1d5ee82, ftLastWriteTime.dwLowDateTime=0xcff75630, ftLastWriteTime.dwHighDateTime=0x1d5ee82, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.985] FindNextFileW (in: hFindFile=0x14379f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5174b190, ftCreationTime.dwHighDateTime=0x1d5e81f, ftLastAccessTime.dwLowDateTime=0xd0c85400, ftLastAccessTime.dwHighDateTime=0x1d5e7ee, ftLastWriteTime.dwLowDateTime=0xd0c85400, ftLastWriteTime.dwHighDateTime=0x1d5e7ee, nFileSizeHigh=0x0, nFileSizeLow=0x184de, dwReserved0=0x0, dwReserved1=0x0, cFileName="EYUz003C.swf", cAlternateFileName="")) returned 1 [0107.986] FindNextFileW (in: hFindFile=0x14379f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe582290, ftCreationTime.dwHighDateTime=0x1d5ec2d, ftLastAccessTime.dwLowDateTime=0x8ee7f8d0, ftLastAccessTime.dwHighDateTime=0x1d5e300, ftLastWriteTime.dwLowDateTime=0x8ee7f8d0, ftLastWriteTime.dwHighDateTime=0x1d5e300, nFileSizeHigh=0x0, nFileSizeLow=0x9df5, dwReserved0=0x0, dwReserved1=0x0, cFileName="O6QMQRqxYimUg8.flv", cAlternateFileName="O6QMQR~1.FLV")) returned 1 [0107.986] FindNextFileW (in: hFindFile=0x14379f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ccf8d0, ftCreationTime.dwHighDateTime=0x1d5e8bd, ftLastAccessTime.dwLowDateTime=0xaf99ccf0, ftLastAccessTime.dwHighDateTime=0x1d5e88e, ftLastWriteTime.dwLowDateTime=0xaf99ccf0, ftLastWriteTime.dwHighDateTime=0x1d5e88e, nFileSizeHigh=0x0, nFileSizeLow=0xd403, dwReserved0=0x0, dwReserved1=0x0, cFileName="OQGKUdbLoLyq0if.avi", cAlternateFileName="OQGKUD~1.AVI")) returned 1 [0107.987] FindNextFileW (in: hFindFile=0x14379f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30ba2480, ftCreationTime.dwHighDateTime=0x1d5e76b, ftLastAccessTime.dwLowDateTime=0xfac62820, ftLastAccessTime.dwHighDateTime=0x1d5ea3e, ftLastWriteTime.dwLowDateTime=0xfac62820, ftLastWriteTime.dwHighDateTime=0x1d5ea3e, nFileSizeHigh=0x0, nFileSizeLow=0x14e9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYrA qF9H.swf", cAlternateFileName="PYRAQF~1.SWF")) returned 1 [0107.988] FindNextFileW (in: hFindFile=0x14379f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad96050, ftCreationTime.dwHighDateTime=0x1d5e792, ftLastAccessTime.dwLowDateTime=0xbe30fab0, ftLastAccessTime.dwHighDateTime=0x1d5e8a0, ftLastWriteTime.dwLowDateTime=0xbe30fab0, ftLastWriteTime.dwHighDateTime=0x1d5e8a0, nFileSizeHigh=0x0, nFileSizeLow=0xf5f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q3Itg90KpQ4PlmSO Z.mp4", cAlternateFileName="Q3ITG9~1.MP4")) returned 1 [0107.988] FindNextFileW (in: hFindFile=0x14379f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80afeb30, ftCreationTime.dwHighDateTime=0x1d5f109, ftLastAccessTime.dwLowDateTime=0xeb5ab510, ftLastAccessTime.dwHighDateTime=0x1d5ea19, ftLastWriteTime.dwLowDateTime=0xeb5ab510, ftLastWriteTime.dwHighDateTime=0x1d5ea19, nFileSizeHigh=0x0, nFileSizeLow=0x6216, dwReserved0=0x0, dwReserved1=0x0, cFileName="t6A0JPoqhW2.flv", cAlternateFileName="T6A0JP~1.FLV")) returned 1 [0107.988] FindNextFileW (in: hFindFile=0x14379f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ff0110, ftCreationTime.dwHighDateTime=0x1d5e0ff, ftLastAccessTime.dwLowDateTime=0xd55a1c60, ftLastAccessTime.dwHighDateTime=0x1d5e947, ftLastWriteTime.dwLowDateTime=0xd55a1c60, ftLastWriteTime.dwHighDateTime=0x1d5e947, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="UQhFnFG7yhf3XDmPn.flv", cAlternateFileName="UQHFNF~1.FLV")) returned 1 [0107.989] FindNextFileW (in: hFindFile=0x14379f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5bd6c0, ftCreationTime.dwHighDateTime=0x1d5e609, ftLastAccessTime.dwLowDateTime=0xe3d3ba20, ftLastAccessTime.dwHighDateTime=0x1d5e9d4, ftLastWriteTime.dwLowDateTime=0xe3d3ba20, ftLastWriteTime.dwHighDateTime=0x1d5e9d4, nFileSizeHigh=0x0, nFileSizeLow=0x14490, dwReserved0=0x0, dwReserved1=0x0, cFileName="zebP7Nb OEBec1.mkv", cAlternateFileName="ZEBP7N~1.MKV")) returned 1 [0107.989] FindNextFileW (in: hFindFile=0x14379f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.989] FindClose (in: hFindFile=0x14379f8 | out: hFindFile=0x14379f8) returned 1 [0107.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0107.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0107.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QOBwx1DhrflIEA8pB7n", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QOBwx1DhrflIEA8pB7n", lpFilePart=0x0) returned 0x2a [0107.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0107.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QOBwx1DhrflIEA8pB7n" (normalized: "c:\\users\\fd1hvy\\videos\\qobwx1dhrfliea8pb7n"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58787b80, ftCreationTime.dwHighDateTime=0x1d5e14d, ftLastAccessTime.dwLowDateTime=0x6688e980, ftLastAccessTime.dwHighDateTime=0x1d5ead5, ftLastWriteTime.dwLowDateTime=0x6688e980, ftLastWriteTime.dwHighDateTime=0x1d5ead5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0107.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0107.990] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QOBwx1DhrflIEA8pB7n", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QOBwx1DhrflIEA8pB7n", lpFilePart=0x0) returned 0x2a [0107.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0107.990] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QOBwx1DhrflIEA8pB7n", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QOBwx1DhrflIEA8pB7n", lpFilePart=0x0) returned 0x2a [0107.990] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QOBwx1DhrflIEA8pB7n\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58787b80, ftCreationTime.dwHighDateTime=0x1d5e14d, ftLastAccessTime.dwLowDateTime=0x6688e980, ftLastAccessTime.dwHighDateTime=0x1d5ead5, ftLastWriteTime.dwLowDateTime=0x6688e980, ftLastWriteTime.dwHighDateTime=0x1d5ead5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437df8 [0107.990] FindNextFileW (in: hFindFile=0x1437df8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58787b80, ftCreationTime.dwHighDateTime=0x1d5e14d, ftLastAccessTime.dwLowDateTime=0x6688e980, ftLastAccessTime.dwHighDateTime=0x1d5ead5, ftLastWriteTime.dwLowDateTime=0x6688e980, ftLastWriteTime.dwHighDateTime=0x1d5ead5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.990] FindNextFileW (in: hFindFile=0x1437df8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1648780, ftCreationTime.dwHighDateTime=0x1d5e9d7, ftLastAccessTime.dwLowDateTime=0xee365e60, ftLastAccessTime.dwHighDateTime=0x1d5eea6, ftLastWriteTime.dwLowDateTime=0xee365e60, ftLastWriteTime.dwHighDateTime=0x1d5eea6, nFileSizeHigh=0x0, nFileSizeLow=0x13123, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF6EmG tL3vc1q.avi", cAlternateFileName="ACF6EM~1.AVI")) returned 1 [0107.991] FindNextFileW (in: hFindFile=0x1437df8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0152f10, ftCreationTime.dwHighDateTime=0x1d5e9fb, ftLastAccessTime.dwLowDateTime=0x51881e10, ftLastAccessTime.dwHighDateTime=0x1d5e5a4, ftLastWriteTime.dwLowDateTime=0x51881e10, ftLastWriteTime.dwHighDateTime=0x1d5e5a4, nFileSizeHigh=0x0, nFileSizeLow=0x9ab7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ciIgoQKL46L1MtONMh.mkv", cAlternateFileName="CIIGOQ~1.MKV")) returned 1 [0107.991] FindNextFileW (in: hFindFile=0x1437df8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e9ee60, ftCreationTime.dwHighDateTime=0x1d5e471, ftLastAccessTime.dwLowDateTime=0x39a61b70, ftLastAccessTime.dwHighDateTime=0x1d5e433, ftLastWriteTime.dwLowDateTime=0x39a61b70, ftLastWriteTime.dwHighDateTime=0x1d5e433, nFileSizeHigh=0x0, nFileSizeLow=0xde37, dwReserved0=0x0, dwReserved1=0x0, cFileName="VmLdD8Y1-AcFqCe.mp4", cAlternateFileName="VMLDD8~1.MP4")) returned 1 [0107.991] FindNextFileW (in: hFindFile=0x1437df8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e9ee60, ftCreationTime.dwHighDateTime=0x1d5e471, ftLastAccessTime.dwLowDateTime=0x39a61b70, ftLastAccessTime.dwHighDateTime=0x1d5e433, ftLastWriteTime.dwLowDateTime=0x39a61b70, ftLastWriteTime.dwHighDateTime=0x1d5e433, nFileSizeHigh=0x0, nFileSizeLow=0xde37, dwReserved0=0x0, dwReserved1=0x0, cFileName="VmLdD8Y1-AcFqCe.mp4", cAlternateFileName="VMLDD8~1.MP4")) returned 0 [0107.992] FindClose (in: hFindFile=0x1437df8 | out: hFindFile=0x1437df8) returned 1 [0107.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0107.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0107.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0107.992] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QOBwx1DhrflIEA8pB7n", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QOBwx1DhrflIEA8pB7n", lpFilePart=0x0) returned 0x2a [0107.992] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QOBwx1DhrflIEA8pB7n\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58787b80, ftCreationTime.dwHighDateTime=0x1d5e14d, ftLastAccessTime.dwLowDateTime=0x6688e980, ftLastAccessTime.dwHighDateTime=0x1d5ead5, ftLastWriteTime.dwLowDateTime=0x6688e980, ftLastWriteTime.dwHighDateTime=0x1d5ead5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14379b8 [0107.992] FindNextFileW (in: hFindFile=0x14379b8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58787b80, ftCreationTime.dwHighDateTime=0x1d5e14d, ftLastAccessTime.dwLowDateTime=0x6688e980, ftLastAccessTime.dwHighDateTime=0x1d5ead5, ftLastWriteTime.dwLowDateTime=0x6688e980, ftLastWriteTime.dwHighDateTime=0x1d5ead5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.992] FindNextFileW (in: hFindFile=0x14379b8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1648780, ftCreationTime.dwHighDateTime=0x1d5e9d7, ftLastAccessTime.dwLowDateTime=0xee365e60, ftLastAccessTime.dwHighDateTime=0x1d5eea6, ftLastWriteTime.dwLowDateTime=0xee365e60, ftLastWriteTime.dwHighDateTime=0x1d5eea6, nFileSizeHigh=0x0, nFileSizeLow=0x13123, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF6EmG tL3vc1q.avi", cAlternateFileName="ACF6EM~1.AVI")) returned 1 [0107.993] FindNextFileW (in: hFindFile=0x14379b8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0152f10, ftCreationTime.dwHighDateTime=0x1d5e9fb, ftLastAccessTime.dwLowDateTime=0x51881e10, ftLastAccessTime.dwHighDateTime=0x1d5e5a4, ftLastWriteTime.dwLowDateTime=0x51881e10, ftLastWriteTime.dwHighDateTime=0x1d5e5a4, nFileSizeHigh=0x0, nFileSizeLow=0x9ab7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ciIgoQKL46L1MtONMh.mkv", cAlternateFileName="CIIGOQ~1.MKV")) returned 1 [0107.993] FindNextFileW (in: hFindFile=0x14379b8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e9ee60, ftCreationTime.dwHighDateTime=0x1d5e471, ftLastAccessTime.dwLowDateTime=0x39a61b70, ftLastAccessTime.dwHighDateTime=0x1d5e433, ftLastWriteTime.dwLowDateTime=0x39a61b70, ftLastWriteTime.dwHighDateTime=0x1d5e433, nFileSizeHigh=0x0, nFileSizeLow=0xde37, dwReserved0=0x0, dwReserved1=0x0, cFileName="VmLdD8Y1-AcFqCe.mp4", cAlternateFileName="VMLDD8~1.MP4")) returned 1 [0107.993] FindNextFileW (in: hFindFile=0x14379b8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.993] FindClose (in: hFindFile=0x14379b8 | out: hFindFile=0x14379b8) returned 1 [0107.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0107.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0107.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo", lpFilePart=0x0) returned 0x25 [0107.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0107.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo" (normalized: "c:\\users\\fd1hvy\\videos\\sghbc1dunnt4uo"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5feb35d0, ftCreationTime.dwHighDateTime=0x1d5e27c, ftLastAccessTime.dwLowDateTime=0x7cbf24c0, ftLastAccessTime.dwHighDateTime=0x1d5e32e, ftLastWriteTime.dwLowDateTime=0x7cbf24c0, ftLastWriteTime.dwHighDateTime=0x1d5e32e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0107.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0107.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo", lpFilePart=0x0) returned 0x25 [0107.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0107.994] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo", lpFilePart=0x0) returned 0x25 [0107.994] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5feb35d0, ftCreationTime.dwHighDateTime=0x1d5e27c, ftLastAccessTime.dwLowDateTime=0x7cbf24c0, ftLastAccessTime.dwHighDateTime=0x1d5e32e, ftLastWriteTime.dwLowDateTime=0x7cbf24c0, ftLastWriteTime.dwHighDateTime=0x1d5e32e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14377f8 [0107.994] FindNextFileW (in: hFindFile=0x14377f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5feb35d0, ftCreationTime.dwHighDateTime=0x1d5e27c, ftLastAccessTime.dwLowDateTime=0x7cbf24c0, ftLastAccessTime.dwHighDateTime=0x1d5e32e, ftLastWriteTime.dwLowDateTime=0x7cbf24c0, ftLastWriteTime.dwHighDateTime=0x1d5e32e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.994] FindNextFileW (in: hFindFile=0x14377f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba763e0, ftCreationTime.dwHighDateTime=0x1d5e732, ftLastAccessTime.dwLowDateTime=0xd66ee2c0, ftLastAccessTime.dwHighDateTime=0x1d5ee60, ftLastWriteTime.dwLowDateTime=0xd66ee2c0, ftLastWriteTime.dwHighDateTime=0x1d5ee60, nFileSizeHigh=0x0, nFileSizeLow=0x929e, dwReserved0=0x0, dwReserved1=0x0, cFileName="1GqygP.flv", cAlternateFileName="")) returned 1 [0107.994] FindNextFileW (in: hFindFile=0x14377f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4456cb0, ftCreationTime.dwHighDateTime=0x1d5e223, ftLastAccessTime.dwLowDateTime=0x51a67170, ftLastAccessTime.dwHighDateTime=0x1d5e6d6, ftLastWriteTime.dwLowDateTime=0x51a67170, ftLastWriteTime.dwHighDateTime=0x1d5e6d6, nFileSizeHigh=0x0, nFileSizeLow=0x15c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="1X1gfeYLzR0Y.mp4", cAlternateFileName="1X1GFE~1.MP4")) returned 1 [0107.995] FindNextFileW (in: hFindFile=0x14377f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24c04070, ftCreationTime.dwHighDateTime=0x1d5ec47, ftLastAccessTime.dwLowDateTime=0x914c4e30, ftLastAccessTime.dwHighDateTime=0x1d5ed3e, ftLastWriteTime.dwLowDateTime=0x914c4e30, ftLastWriteTime.dwHighDateTime=0x1d5ed3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLNC_yY", cAlternateFileName="")) returned 1 [0107.995] FindNextFileW (in: hFindFile=0x14377f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35a018a0, ftCreationTime.dwHighDateTime=0x1d5eb3b, ftLastAccessTime.dwLowDateTime=0x509320d0, ftLastAccessTime.dwHighDateTime=0x1d5ed25, ftLastWriteTime.dwLowDateTime=0x509320d0, ftLastWriteTime.dwHighDateTime=0x1d5ed25, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pFGY_XxkK", cAlternateFileName="PFGY_X~1")) returned 1 [0107.995] FindNextFileW (in: hFindFile=0x14377f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb507390, ftCreationTime.dwHighDateTime=0x1d5e963, ftLastAccessTime.dwLowDateTime=0x11f99330, ftLastAccessTime.dwHighDateTime=0x1d5ef3d, ftLastWriteTime.dwLowDateTime=0x11f99330, ftLastWriteTime.dwHighDateTime=0x1d5ef3d, nFileSizeHigh=0x0, nFileSizeLow=0xdb5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rlDAZ6DRs3EF.mp4", cAlternateFileName="RLDAZ6~1.MP4")) returned 1 [0107.995] FindNextFileW (in: hFindFile=0x14377f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3692b2c0, ftCreationTime.dwHighDateTime=0x1d5e98a, ftLastAccessTime.dwLowDateTime=0xad1e4b00, ftLastAccessTime.dwHighDateTime=0x1d5e14e, ftLastWriteTime.dwLowDateTime=0xad1e4b00, ftLastWriteTime.dwHighDateTime=0x1d5e14e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="txkgkMxHJwbr2ycQT", cAlternateFileName="TXKGKM~1")) returned 1 [0107.996] FindNextFileW (in: hFindFile=0x14377f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56189680, ftCreationTime.dwHighDateTime=0x1d5eae5, ftLastAccessTime.dwLowDateTime=0xf17d550, ftLastAccessTime.dwHighDateTime=0x1d5e650, ftLastWriteTime.dwLowDateTime=0xf17d550, ftLastWriteTime.dwHighDateTime=0x1d5e650, nFileSizeHigh=0x0, nFileSizeLow=0x12b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YhaCDpD.flv", cAlternateFileName="")) returned 1 [0107.996] FindNextFileW (in: hFindFile=0x14377f8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56189680, ftCreationTime.dwHighDateTime=0x1d5eae5, ftLastAccessTime.dwLowDateTime=0xf17d550, ftLastAccessTime.dwHighDateTime=0x1d5e650, ftLastWriteTime.dwLowDateTime=0xf17d550, ftLastWriteTime.dwHighDateTime=0x1d5e650, nFileSizeHigh=0x0, nFileSizeLow=0x12b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YhaCDpD.flv", cAlternateFileName="")) returned 0 [0107.996] FindClose (in: hFindFile=0x14377f8 | out: hFindFile=0x14377f8) returned 1 [0107.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0107.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0107.996] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY", nBufferLength=0x105, lpBuffer=0x614eed8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY", lpFilePart=0x0) returned 0x2d [0107.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0107.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY" (normalized: "c:\\users\\fd1hvy\\videos\\sghbc1dunnt4uo\\clnc_yy"), fInfoLevelId=0x0, lpFileInformation=0x614f404 | out: lpFileInformation=0x614f404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24c04070, ftCreationTime.dwHighDateTime=0x1d5ec47, ftLastAccessTime.dwLowDateTime=0x914c4e30, ftLastAccessTime.dwHighDateTime=0x1d5ed3e, ftLastWriteTime.dwLowDateTime=0x914c4e30, ftLastWriteTime.dwHighDateTime=0x1d5ed3e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0107.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f384) returned 1 [0107.997] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY", lpFilePart=0x0) returned 0x2d [0107.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0107.997] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY", lpFilePart=0x0) returned 0x2d [0107.997] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24c04070, ftCreationTime.dwHighDateTime=0x1d5ec47, ftLastAccessTime.dwLowDateTime=0x914c4e30, ftLastAccessTime.dwHighDateTime=0x1d5ed3e, ftLastWriteTime.dwLowDateTime=0x914c4e30, ftLastWriteTime.dwHighDateTime=0x1d5ed3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437b38 [0107.998] FindNextFileW (in: hFindFile=0x1437b38, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24c04070, ftCreationTime.dwHighDateTime=0x1d5ec47, ftLastAccessTime.dwLowDateTime=0x914c4e30, ftLastAccessTime.dwHighDateTime=0x1d5ed3e, ftLastWriteTime.dwLowDateTime=0x914c4e30, ftLastWriteTime.dwHighDateTime=0x1d5ed3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.998] FindNextFileW (in: hFindFile=0x1437b38, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f9dfc0, ftCreationTime.dwHighDateTime=0x1d5e2dc, ftLastAccessTime.dwLowDateTime=0xfcc98480, ftLastAccessTime.dwHighDateTime=0x1d5e0c2, ftLastWriteTime.dwLowDateTime=0xfcc98480, ftLastWriteTime.dwHighDateTime=0x1d5e0c2, nFileSizeHigh=0x0, nFileSizeLow=0x14f95, dwReserved0=0x0, dwReserved1=0x0, cFileName="dC14yp1TBtGmkJ2.mp4", cAlternateFileName="DC14YP~1.MP4")) returned 1 [0107.998] FindNextFileW (in: hFindFile=0x1437b38, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1ecbd0, ftCreationTime.dwHighDateTime=0x1d5e6ba, ftLastAccessTime.dwLowDateTime=0x64ae7810, ftLastAccessTime.dwHighDateTime=0x1d5e58e, ftLastWriteTime.dwLowDateTime=0x64ae7810, ftLastWriteTime.dwHighDateTime=0x1d5e58e, nFileSizeHigh=0x0, nFileSizeLow=0xd0fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="u9 JcmDmC9.flv", cAlternateFileName="U9JCMD~1.FLV")) returned 1 [0107.999] FindNextFileW (in: hFindFile=0x1437b38, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8deb2e0, ftCreationTime.dwHighDateTime=0x1d5e639, ftLastAccessTime.dwLowDateTime=0x49edf420, ftLastAccessTime.dwHighDateTime=0x1d5e3fd, ftLastWriteTime.dwLowDateTime=0x49edf420, ftLastWriteTime.dwHighDateTime=0x1d5e3fd, nFileSizeHigh=0x0, nFileSizeLow=0x4c55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y9d6vi.mkv", cAlternateFileName="")) returned 1 [0107.999] FindNextFileW (in: hFindFile=0x1437b38, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b672550, ftCreationTime.dwHighDateTime=0x1d5e5b9, ftLastAccessTime.dwLowDateTime=0xea06b930, ftLastAccessTime.dwHighDateTime=0x1d5ea9a, ftLastWriteTime.dwLowDateTime=0xea06b930, ftLastWriteTime.dwHighDateTime=0x1d5ea9a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zybx NCwe3GBiwj", cAlternateFileName="ZYBXNC~1")) returned 1 [0107.999] FindNextFileW (in: hFindFile=0x1437b38, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.999] FindClose (in: hFindFile=0x1437b38 | out: hFindFile=0x1437b38) returned 1 [0108.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0108.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0108.000] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY\\Zybx NCwe3GBiwj", nBufferLength=0x105, lpBuffer=0x614ee94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY\\Zybx NCwe3GBiwj", lpFilePart=0x0) returned 0x3d [0108.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f344) returned 1 [0108.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY\\Zybx NCwe3GBiwj" (normalized: "c:\\users\\fd1hvy\\videos\\sghbc1dunnt4uo\\clnc_yy\\zybx ncwe3gbiwj"), fInfoLevelId=0x0, lpFileInformation=0x614f3c0 | out: lpFileInformation=0x614f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b672550, ftCreationTime.dwHighDateTime=0x1d5e5b9, ftLastAccessTime.dwLowDateTime=0xea06b930, ftLastAccessTime.dwHighDateTime=0x1d5ea9a, ftLastWriteTime.dwLowDateTime=0xea06b930, ftLastWriteTime.dwHighDateTime=0x1d5ea9a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0108.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f340) returned 1 [0108.000] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY\\Zybx NCwe3GBiwj", nBufferLength=0x105, lpBuffer=0x614ee9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY\\Zybx NCwe3GBiwj", lpFilePart=0x0) returned 0x3d [0108.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3b4) returned 1 [0108.000] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY\\Zybx NCwe3GBiwj", nBufferLength=0x105, lpBuffer=0x614ee68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY\\Zybx NCwe3GBiwj", lpFilePart=0x0) returned 0x3d [0108.000] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY\\Zybx NCwe3GBiwj\\*", lpFindFileData=0x614f0dc | out: lpFindFileData=0x614f0dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b672550, ftCreationTime.dwHighDateTime=0x1d5e5b9, ftLastAccessTime.dwLowDateTime=0xea06b930, ftLastAccessTime.dwHighDateTime=0x1d5ea9a, ftLastWriteTime.dwLowDateTime=0xea06b930, ftLastWriteTime.dwHighDateTime=0x1d5ea9a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437b38 [0108.000] FindNextFileW (in: hFindFile=0x1437b38, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b672550, ftCreationTime.dwHighDateTime=0x1d5e5b9, ftLastAccessTime.dwLowDateTime=0xea06b930, ftLastAccessTime.dwHighDateTime=0x1d5ea9a, ftLastWriteTime.dwLowDateTime=0xea06b930, ftLastWriteTime.dwHighDateTime=0x1d5ea9a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.001] FindNextFileW (in: hFindFile=0x1437b38, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf25df60, ftCreationTime.dwHighDateTime=0x1d5e450, ftLastAccessTime.dwLowDateTime=0x32ffafe0, ftLastAccessTime.dwHighDateTime=0x1d5e9a9, ftLastWriteTime.dwLowDateTime=0x32ffafe0, ftLastWriteTime.dwHighDateTime=0x1d5e9a9, nFileSizeHigh=0x0, nFileSizeLow=0x106f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eh3EPW4zXZ4.mp4", cAlternateFileName="EH3EPW~1.MP4")) returned 1 [0108.001] FindNextFileW (in: hFindFile=0x1437b38, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa879a3d0, ftCreationTime.dwHighDateTime=0x1d5e50c, ftLastAccessTime.dwLowDateTime=0xe68650b0, ftLastAccessTime.dwHighDateTime=0x1d5edea, ftLastWriteTime.dwLowDateTime=0xe68650b0, ftLastWriteTime.dwHighDateTime=0x1d5edea, nFileSizeHigh=0x0, nFileSizeLow=0x11568, dwReserved0=0x0, dwReserved1=0x0, cFileName="m1U-U3YAV5w51Ae1x7.mp4", cAlternateFileName="M1U-U3~1.MP4")) returned 1 [0108.001] FindNextFileW (in: hFindFile=0x1437b38, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x233c1210, ftCreationTime.dwHighDateTime=0x1d5ebf2, ftLastAccessTime.dwLowDateTime=0xfd984df0, ftLastAccessTime.dwHighDateTime=0x1d5e109, ftLastWriteTime.dwLowDateTime=0xfd984df0, ftLastWriteTime.dwHighDateTime=0x1d5e109, nFileSizeHigh=0x0, nFileSizeLow=0xc4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="mYtLfUEn5hWqdW.mp4", cAlternateFileName="MYTLFU~1.MP4")) returned 1 [0108.001] FindNextFileW (in: hFindFile=0x1437b38, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80053ed0, ftCreationTime.dwHighDateTime=0x1d5e6ee, ftLastAccessTime.dwLowDateTime=0x52564e90, ftLastAccessTime.dwHighDateTime=0x1d5f09c, ftLastWriteTime.dwLowDateTime=0x52564e90, ftLastWriteTime.dwHighDateTime=0x1d5f09c, nFileSizeHigh=0x0, nFileSizeLow=0xec7, dwReserved0=0x0, dwReserved1=0x0, cFileName="p1CmZgrJFkQVnK-xSi.avi", cAlternateFileName="P1CMZG~1.AVI")) returned 1 [0108.001] FindNextFileW (in: hFindFile=0x1437b38, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1daef80, ftCreationTime.dwHighDateTime=0x1d5e34d, ftLastAccessTime.dwLowDateTime=0xe4913e0, ftLastAccessTime.dwHighDateTime=0x1d5e822, ftLastWriteTime.dwLowDateTime=0xe4913e0, ftLastWriteTime.dwHighDateTime=0x1d5e822, nFileSizeHigh=0x0, nFileSizeLow=0x12ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WiyGhHuXL1ynttiYw1.mp4", cAlternateFileName="WIYGHH~1.MP4")) returned 1 [0108.001] FindNextFileW (in: hFindFile=0x1437b38, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1daef80, ftCreationTime.dwHighDateTime=0x1d5e34d, ftLastAccessTime.dwLowDateTime=0xe4913e0, ftLastAccessTime.dwHighDateTime=0x1d5e822, ftLastWriteTime.dwLowDateTime=0xe4913e0, ftLastWriteTime.dwHighDateTime=0x1d5e822, nFileSizeHigh=0x0, nFileSizeLow=0x12ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WiyGhHuXL1ynttiYw1.mp4", cAlternateFileName="WIYGHH~1.MP4")) returned 0 [0108.002] FindClose (in: hFindFile=0x1437b38 | out: hFindFile=0x1437b38) returned 1 [0108.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f370) returned 1 [0108.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f37c) returned 1 [0108.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3b4) returned 1 [0108.002] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY\\Zybx NCwe3GBiwj", nBufferLength=0x105, lpBuffer=0x614ee68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY\\Zybx NCwe3GBiwj", lpFilePart=0x0) returned 0x3d [0108.002] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY\\Zybx NCwe3GBiwj\\*", lpFindFileData=0x614f0dc | out: lpFindFileData=0x614f0dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b672550, ftCreationTime.dwHighDateTime=0x1d5e5b9, ftLastAccessTime.dwLowDateTime=0xea06b930, ftLastAccessTime.dwHighDateTime=0x1d5ea9a, ftLastWriteTime.dwLowDateTime=0xea06b930, ftLastWriteTime.dwHighDateTime=0x1d5ea9a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437a78 [0108.002] FindNextFileW (in: hFindFile=0x1437a78, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b672550, ftCreationTime.dwHighDateTime=0x1d5e5b9, ftLastAccessTime.dwLowDateTime=0xea06b930, ftLastAccessTime.dwHighDateTime=0x1d5ea9a, ftLastWriteTime.dwLowDateTime=0xea06b930, ftLastWriteTime.dwHighDateTime=0x1d5ea9a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.002] FindNextFileW (in: hFindFile=0x1437a78, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf25df60, ftCreationTime.dwHighDateTime=0x1d5e450, ftLastAccessTime.dwLowDateTime=0x32ffafe0, ftLastAccessTime.dwHighDateTime=0x1d5e9a9, ftLastWriteTime.dwLowDateTime=0x32ffafe0, ftLastWriteTime.dwHighDateTime=0x1d5e9a9, nFileSizeHigh=0x0, nFileSizeLow=0x106f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eh3EPW4zXZ4.mp4", cAlternateFileName="EH3EPW~1.MP4")) returned 1 [0108.002] FindNextFileW (in: hFindFile=0x1437a78, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa879a3d0, ftCreationTime.dwHighDateTime=0x1d5e50c, ftLastAccessTime.dwLowDateTime=0xe68650b0, ftLastAccessTime.dwHighDateTime=0x1d5edea, ftLastWriteTime.dwLowDateTime=0xe68650b0, ftLastWriteTime.dwHighDateTime=0x1d5edea, nFileSizeHigh=0x0, nFileSizeLow=0x11568, dwReserved0=0x0, dwReserved1=0x0, cFileName="m1U-U3YAV5w51Ae1x7.mp4", cAlternateFileName="M1U-U3~1.MP4")) returned 1 [0108.135] FindNextFileW (in: hFindFile=0x1437a78, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x233c1210, ftCreationTime.dwHighDateTime=0x1d5ebf2, ftLastAccessTime.dwLowDateTime=0xfd984df0, ftLastAccessTime.dwHighDateTime=0x1d5e109, ftLastWriteTime.dwLowDateTime=0xfd984df0, ftLastWriteTime.dwHighDateTime=0x1d5e109, nFileSizeHigh=0x0, nFileSizeLow=0xc4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="mYtLfUEn5hWqdW.mp4", cAlternateFileName="MYTLFU~1.MP4")) returned 1 [0108.138] FindNextFileW (in: hFindFile=0x1437a78, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80053ed0, ftCreationTime.dwHighDateTime=0x1d5e6ee, ftLastAccessTime.dwLowDateTime=0x52564e90, ftLastAccessTime.dwHighDateTime=0x1d5f09c, ftLastWriteTime.dwLowDateTime=0x52564e90, ftLastWriteTime.dwHighDateTime=0x1d5f09c, nFileSizeHigh=0x0, nFileSizeLow=0xec7, dwReserved0=0x0, dwReserved1=0x0, cFileName="p1CmZgrJFkQVnK-xSi.avi", cAlternateFileName="P1CMZG~1.AVI")) returned 1 [0108.140] FindNextFileW (in: hFindFile=0x1437a78, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1daef80, ftCreationTime.dwHighDateTime=0x1d5e34d, ftLastAccessTime.dwLowDateTime=0xe4913e0, ftLastAccessTime.dwHighDateTime=0x1d5e822, ftLastWriteTime.dwLowDateTime=0xe4913e0, ftLastWriteTime.dwHighDateTime=0x1d5e822, nFileSizeHigh=0x0, nFileSizeLow=0x12ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WiyGhHuXL1ynttiYw1.mp4", cAlternateFileName="WIYGHH~1.MP4")) returned 1 [0108.142] FindNextFileW (in: hFindFile=0x1437a78, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.198] FindClose (in: hFindFile=0x1437a78 | out: hFindFile=0x1437a78) returned 1 [0108.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f370) returned 1 [0108.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f37c) returned 1 [0108.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0108.204] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY", lpFilePart=0x0) returned 0x2d [0108.205] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\CLNC_yY\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24c04070, ftCreationTime.dwHighDateTime=0x1d5ec47, ftLastAccessTime.dwLowDateTime=0x914c4e30, ftLastAccessTime.dwHighDateTime=0x1d5ed3e, ftLastWriteTime.dwLowDateTime=0x914c4e30, ftLastWriteTime.dwHighDateTime=0x1d5ed3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14378f8 [0108.207] FindNextFileW (in: hFindFile=0x14378f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24c04070, ftCreationTime.dwHighDateTime=0x1d5ec47, ftLastAccessTime.dwLowDateTime=0x914c4e30, ftLastAccessTime.dwHighDateTime=0x1d5ed3e, ftLastWriteTime.dwLowDateTime=0x914c4e30, ftLastWriteTime.dwHighDateTime=0x1d5ed3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.207] FindNextFileW (in: hFindFile=0x14378f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f9dfc0, ftCreationTime.dwHighDateTime=0x1d5e2dc, ftLastAccessTime.dwLowDateTime=0xfcc98480, ftLastAccessTime.dwHighDateTime=0x1d5e0c2, ftLastWriteTime.dwLowDateTime=0xfcc98480, ftLastWriteTime.dwHighDateTime=0x1d5e0c2, nFileSizeHigh=0x0, nFileSizeLow=0x14f95, dwReserved0=0x0, dwReserved1=0x0, cFileName="dC14yp1TBtGmkJ2.mp4", cAlternateFileName="DC14YP~1.MP4")) returned 1 [0108.208] FindNextFileW (in: hFindFile=0x14378f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1ecbd0, ftCreationTime.dwHighDateTime=0x1d5e6ba, ftLastAccessTime.dwLowDateTime=0x64ae7810, ftLastAccessTime.dwHighDateTime=0x1d5e58e, ftLastWriteTime.dwLowDateTime=0x64ae7810, ftLastWriteTime.dwHighDateTime=0x1d5e58e, nFileSizeHigh=0x0, nFileSizeLow=0xd0fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="u9 JcmDmC9.flv", cAlternateFileName="U9JCMD~1.FLV")) returned 1 [0108.208] FindNextFileW (in: hFindFile=0x14378f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8deb2e0, ftCreationTime.dwHighDateTime=0x1d5e639, ftLastAccessTime.dwLowDateTime=0x49edf420, ftLastAccessTime.dwHighDateTime=0x1d5e3fd, ftLastWriteTime.dwLowDateTime=0x49edf420, ftLastWriteTime.dwHighDateTime=0x1d5e3fd, nFileSizeHigh=0x0, nFileSizeLow=0x4c55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y9d6vi.mkv", cAlternateFileName="")) returned 1 [0108.208] FindNextFileW (in: hFindFile=0x14378f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b672550, ftCreationTime.dwHighDateTime=0x1d5e5b9, ftLastAccessTime.dwLowDateTime=0xea06b930, ftLastAccessTime.dwHighDateTime=0x1d5ea9a, ftLastWriteTime.dwLowDateTime=0xea06b930, ftLastWriteTime.dwHighDateTime=0x1d5ea9a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zybx NCwe3GBiwj", cAlternateFileName="ZYBXNC~1")) returned 1 [0108.208] FindNextFileW (in: hFindFile=0x14378f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b672550, ftCreationTime.dwHighDateTime=0x1d5e5b9, ftLastAccessTime.dwLowDateTime=0xea06b930, ftLastAccessTime.dwHighDateTime=0x1d5ea9a, ftLastWriteTime.dwLowDateTime=0xea06b930, ftLastWriteTime.dwHighDateTime=0x1d5ea9a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zybx NCwe3GBiwj", cAlternateFileName="ZYBXNC~1")) returned 0 [0108.208] FindClose (in: hFindFile=0x14378f8 | out: hFindFile=0x14378f8) returned 1 [0108.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0108.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0108.209] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\pFGY_XxkK", nBufferLength=0x105, lpBuffer=0x614eed8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\pFGY_XxkK", lpFilePart=0x0) returned 0x2f [0108.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0108.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\pFGY_XxkK" (normalized: "c:\\users\\fd1hvy\\videos\\sghbc1dunnt4uo\\pfgy_xxkk"), fInfoLevelId=0x0, lpFileInformation=0x614f404 | out: lpFileInformation=0x614f404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35a018a0, ftCreationTime.dwHighDateTime=0x1d5eb3b, ftLastAccessTime.dwLowDateTime=0x509320d0, ftLastAccessTime.dwHighDateTime=0x1d5ed25, ftLastWriteTime.dwLowDateTime=0x509320d0, ftLastWriteTime.dwHighDateTime=0x1d5ed25, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0108.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f384) returned 1 [0108.209] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\pFGY_XxkK", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\pFGY_XxkK", lpFilePart=0x0) returned 0x2f [0108.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0108.209] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\pFGY_XxkK", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\pFGY_XxkK", lpFilePart=0x0) returned 0x2f [0108.209] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\pFGY_XxkK\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35a018a0, ftCreationTime.dwHighDateTime=0x1d5eb3b, ftLastAccessTime.dwLowDateTime=0x509320d0, ftLastAccessTime.dwHighDateTime=0x1d5ed25, ftLastWriteTime.dwLowDateTime=0x509320d0, ftLastWriteTime.dwHighDateTime=0x1d5ed25, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437cb8 [0108.210] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35a018a0, ftCreationTime.dwHighDateTime=0x1d5eb3b, ftLastAccessTime.dwLowDateTime=0x509320d0, ftLastAccessTime.dwHighDateTime=0x1d5ed25, ftLastWriteTime.dwLowDateTime=0x509320d0, ftLastWriteTime.dwHighDateTime=0x1d5ed25, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.210] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1896550, ftCreationTime.dwHighDateTime=0x1d5e688, ftLastAccessTime.dwLowDateTime=0x94d17420, ftLastAccessTime.dwHighDateTime=0x1d5efed, ftLastWriteTime.dwLowDateTime=0x94d17420, ftLastWriteTime.dwHighDateTime=0x1d5efed, nFileSizeHigh=0x0, nFileSizeLow=0x15161, dwReserved0=0x0, dwReserved1=0x0, cFileName="BvAH009.avi", cAlternateFileName="")) returned 1 [0108.210] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd28c9f0, ftCreationTime.dwHighDateTime=0x1d5eb6e, ftLastAccessTime.dwLowDateTime=0x808706b0, ftLastAccessTime.dwHighDateTime=0x1d5eb88, ftLastWriteTime.dwLowDateTime=0x808706b0, ftLastWriteTime.dwHighDateTime=0x1d5eb88, nFileSizeHigh=0x0, nFileSizeLow=0x14772, dwReserved0=0x0, dwReserved1=0x0, cFileName="mRWFr1xuzy1lp9_IEQm1.avi", cAlternateFileName="MRWFR1~1.AVI")) returned 1 [0108.211] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc223e40, ftCreationTime.dwHighDateTime=0x1d5e59b, ftLastAccessTime.dwLowDateTime=0x7d528560, ftLastAccessTime.dwHighDateTime=0x1d5ef06, ftLastWriteTime.dwLowDateTime=0x7d528560, ftLastWriteTime.dwHighDateTime=0x1d5ef06, nFileSizeHigh=0x0, nFileSizeLow=0x7f6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="nzxdpYSzNTLhKKvmA 1.mp4", cAlternateFileName="NZXDPY~1.MP4")) returned 1 [0108.211] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd2df0, ftCreationTime.dwHighDateTime=0x1d5ea0e, ftLastAccessTime.dwLowDateTime=0x41ad5aa0, ftLastAccessTime.dwHighDateTime=0x1d5e19e, ftLastWriteTime.dwLowDateTime=0x41ad5aa0, ftLastWriteTime.dwHighDateTime=0x1d5e19e, nFileSizeHigh=0x0, nFileSizeLow=0xac53, dwReserved0=0x0, dwReserved1=0x0, cFileName="rvM _.mkv", cAlternateFileName="RVM_~1.MKV")) returned 1 [0108.211] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538c0230, ftCreationTime.dwHighDateTime=0x1d5e806, ftLastAccessTime.dwLowDateTime=0x2847e260, ftLastAccessTime.dwHighDateTime=0x1d5e4b9, ftLastWriteTime.dwLowDateTime=0x2847e260, ftLastWriteTime.dwHighDateTime=0x1d5e4b9, nFileSizeHigh=0x0, nFileSizeLow=0xae84, dwReserved0=0x0, dwReserved1=0x0, cFileName="wEFV3kuCfGq.swf", cAlternateFileName="WEFV3K~1.SWF")) returned 1 [0108.211] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa480570, ftCreationTime.dwHighDateTime=0x1d5e18e, ftLastAccessTime.dwLowDateTime=0xe03e1e80, ftLastAccessTime.dwHighDateTime=0x1d5ed7d, ftLastWriteTime.dwLowDateTime=0xe03e1e80, ftLastWriteTime.dwHighDateTime=0x1d5ed7d, nFileSizeHigh=0x0, nFileSizeLow=0x1294f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ym3VDFhsDzbh_.flv", cAlternateFileName="YM3VDF~1.FLV")) returned 1 [0108.211] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa480570, ftCreationTime.dwHighDateTime=0x1d5e18e, ftLastAccessTime.dwLowDateTime=0xe03e1e80, ftLastAccessTime.dwHighDateTime=0x1d5ed7d, ftLastWriteTime.dwLowDateTime=0xe03e1e80, ftLastWriteTime.dwHighDateTime=0x1d5ed7d, nFileSizeHigh=0x0, nFileSizeLow=0x1294f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ym3VDFhsDzbh_.flv", cAlternateFileName="YM3VDF~1.FLV")) returned 0 [0108.211] FindClose (in: hFindFile=0x1437cb8 | out: hFindFile=0x1437cb8) returned 1 [0108.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0108.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0108.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0108.212] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\pFGY_XxkK", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\pFGY_XxkK", lpFilePart=0x0) returned 0x2f [0108.212] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\pFGY_XxkK\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35a018a0, ftCreationTime.dwHighDateTime=0x1d5eb3b, ftLastAccessTime.dwLowDateTime=0x509320d0, ftLastAccessTime.dwHighDateTime=0x1d5ed25, ftLastWriteTime.dwLowDateTime=0x509320d0, ftLastWriteTime.dwHighDateTime=0x1d5ed25, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437cb8 [0108.212] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35a018a0, ftCreationTime.dwHighDateTime=0x1d5eb3b, ftLastAccessTime.dwLowDateTime=0x509320d0, ftLastAccessTime.dwHighDateTime=0x1d5ed25, ftLastWriteTime.dwLowDateTime=0x509320d0, ftLastWriteTime.dwHighDateTime=0x1d5ed25, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.212] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1896550, ftCreationTime.dwHighDateTime=0x1d5e688, ftLastAccessTime.dwLowDateTime=0x94d17420, ftLastAccessTime.dwHighDateTime=0x1d5efed, ftLastWriteTime.dwLowDateTime=0x94d17420, ftLastWriteTime.dwHighDateTime=0x1d5efed, nFileSizeHigh=0x0, nFileSizeLow=0x15161, dwReserved0=0x0, dwReserved1=0x0, cFileName="BvAH009.avi", cAlternateFileName="")) returned 1 [0108.213] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd28c9f0, ftCreationTime.dwHighDateTime=0x1d5eb6e, ftLastAccessTime.dwLowDateTime=0x808706b0, ftLastAccessTime.dwHighDateTime=0x1d5eb88, ftLastWriteTime.dwLowDateTime=0x808706b0, ftLastWriteTime.dwHighDateTime=0x1d5eb88, nFileSizeHigh=0x0, nFileSizeLow=0x14772, dwReserved0=0x0, dwReserved1=0x0, cFileName="mRWFr1xuzy1lp9_IEQm1.avi", cAlternateFileName="MRWFR1~1.AVI")) returned 1 [0108.213] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc223e40, ftCreationTime.dwHighDateTime=0x1d5e59b, ftLastAccessTime.dwLowDateTime=0x7d528560, ftLastAccessTime.dwHighDateTime=0x1d5ef06, ftLastWriteTime.dwLowDateTime=0x7d528560, ftLastWriteTime.dwHighDateTime=0x1d5ef06, nFileSizeHigh=0x0, nFileSizeLow=0x7f6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="nzxdpYSzNTLhKKvmA 1.mp4", cAlternateFileName="NZXDPY~1.MP4")) returned 1 [0108.213] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd2df0, ftCreationTime.dwHighDateTime=0x1d5ea0e, ftLastAccessTime.dwLowDateTime=0x41ad5aa0, ftLastAccessTime.dwHighDateTime=0x1d5e19e, ftLastWriteTime.dwLowDateTime=0x41ad5aa0, ftLastWriteTime.dwHighDateTime=0x1d5e19e, nFileSizeHigh=0x0, nFileSizeLow=0xac53, dwReserved0=0x0, dwReserved1=0x0, cFileName="rvM _.mkv", cAlternateFileName="RVM_~1.MKV")) returned 1 [0108.213] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538c0230, ftCreationTime.dwHighDateTime=0x1d5e806, ftLastAccessTime.dwLowDateTime=0x2847e260, ftLastAccessTime.dwHighDateTime=0x1d5e4b9, ftLastWriteTime.dwLowDateTime=0x2847e260, ftLastWriteTime.dwHighDateTime=0x1d5e4b9, nFileSizeHigh=0x0, nFileSizeLow=0xae84, dwReserved0=0x0, dwReserved1=0x0, cFileName="wEFV3kuCfGq.swf", cAlternateFileName="WEFV3K~1.SWF")) returned 1 [0108.213] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa480570, ftCreationTime.dwHighDateTime=0x1d5e18e, ftLastAccessTime.dwLowDateTime=0xe03e1e80, ftLastAccessTime.dwHighDateTime=0x1d5ed7d, ftLastWriteTime.dwLowDateTime=0xe03e1e80, ftLastWriteTime.dwHighDateTime=0x1d5ed7d, nFileSizeHigh=0x0, nFileSizeLow=0x1294f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ym3VDFhsDzbh_.flv", cAlternateFileName="YM3VDF~1.FLV")) returned 1 [0108.214] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.214] FindClose (in: hFindFile=0x1437cb8 | out: hFindFile=0x1437cb8) returned 1 [0108.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0108.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0108.214] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\txkgkMxHJwbr2ycQT", nBufferLength=0x105, lpBuffer=0x614eed8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\txkgkMxHJwbr2ycQT", lpFilePart=0x0) returned 0x37 [0108.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0108.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\txkgkMxHJwbr2ycQT" (normalized: "c:\\users\\fd1hvy\\videos\\sghbc1dunnt4uo\\txkgkmxhjwbr2ycqt"), fInfoLevelId=0x0, lpFileInformation=0x614f404 | out: lpFileInformation=0x614f404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3692b2c0, ftCreationTime.dwHighDateTime=0x1d5e98a, ftLastAccessTime.dwLowDateTime=0xad1e4b00, ftLastAccessTime.dwHighDateTime=0x1d5e14e, ftLastWriteTime.dwLowDateTime=0xad1e4b00, ftLastWriteTime.dwHighDateTime=0x1d5e14e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0108.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f384) returned 1 [0108.214] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\txkgkMxHJwbr2ycQT", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\txkgkMxHJwbr2ycQT", lpFilePart=0x0) returned 0x37 [0108.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0108.215] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\txkgkMxHJwbr2ycQT", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\txkgkMxHJwbr2ycQT", lpFilePart=0x0) returned 0x37 [0108.215] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\txkgkMxHJwbr2ycQT\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3692b2c0, ftCreationTime.dwHighDateTime=0x1d5e98a, ftLastAccessTime.dwLowDateTime=0xad1e4b00, ftLastAccessTime.dwHighDateTime=0x1d5e14e, ftLastWriteTime.dwLowDateTime=0xad1e4b00, ftLastWriteTime.dwHighDateTime=0x1d5e14e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437af8 [0108.215] FindNextFileW (in: hFindFile=0x1437af8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3692b2c0, ftCreationTime.dwHighDateTime=0x1d5e98a, ftLastAccessTime.dwLowDateTime=0xad1e4b00, ftLastAccessTime.dwHighDateTime=0x1d5e14e, ftLastWriteTime.dwLowDateTime=0xad1e4b00, ftLastWriteTime.dwHighDateTime=0x1d5e14e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.215] FindNextFileW (in: hFindFile=0x1437af8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4043650, ftCreationTime.dwHighDateTime=0x1d5e1db, ftLastAccessTime.dwLowDateTime=0xc882b5b0, ftLastAccessTime.dwHighDateTime=0x1d5e9a6, ftLastWriteTime.dwLowDateTime=0xc882b5b0, ftLastWriteTime.dwHighDateTime=0x1d5e9a6, nFileSizeHigh=0x0, nFileSizeLow=0x12b5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fVJLf.mkv", cAlternateFileName="")) returned 1 [0108.215] FindNextFileW (in: hFindFile=0x1437af8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ec2460, ftCreationTime.dwHighDateTime=0x1d5e194, ftLastAccessTime.dwLowDateTime=0xb607b820, ftLastAccessTime.dwHighDateTime=0x1d5eb83, ftLastWriteTime.dwLowDateTime=0xb607b820, ftLastWriteTime.dwHighDateTime=0x1d5eb83, nFileSizeHigh=0x0, nFileSizeLow=0x660e, dwReserved0=0x0, dwReserved1=0x0, cFileName="iWpHL38cVYJ6Xr.swf", cAlternateFileName="IWPHL3~1.SWF")) returned 1 [0108.216] FindNextFileW (in: hFindFile=0x1437af8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ec2460, ftCreationTime.dwHighDateTime=0x1d5e194, ftLastAccessTime.dwLowDateTime=0xb607b820, ftLastAccessTime.dwHighDateTime=0x1d5eb83, ftLastWriteTime.dwLowDateTime=0xb607b820, ftLastWriteTime.dwHighDateTime=0x1d5eb83, nFileSizeHigh=0x0, nFileSizeLow=0x660e, dwReserved0=0x0, dwReserved1=0x0, cFileName="iWpHL38cVYJ6Xr.swf", cAlternateFileName="IWPHL3~1.SWF")) returned 0 [0108.216] FindClose (in: hFindFile=0x1437af8 | out: hFindFile=0x1437af8) returned 1 [0108.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0108.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0108.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0108.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\txkgkMxHJwbr2ycQT", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\txkgkMxHJwbr2ycQT", lpFilePart=0x0) returned 0x37 [0108.216] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\txkgkMxHJwbr2ycQT\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3692b2c0, ftCreationTime.dwHighDateTime=0x1d5e98a, ftLastAccessTime.dwLowDateTime=0xad1e4b00, ftLastAccessTime.dwHighDateTime=0x1d5e14e, ftLastWriteTime.dwLowDateTime=0xad1e4b00, ftLastWriteTime.dwHighDateTime=0x1d5e14e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437878 [0108.217] FindNextFileW (in: hFindFile=0x1437878, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3692b2c0, ftCreationTime.dwHighDateTime=0x1d5e98a, ftLastAccessTime.dwLowDateTime=0xad1e4b00, ftLastAccessTime.dwHighDateTime=0x1d5e14e, ftLastWriteTime.dwLowDateTime=0xad1e4b00, ftLastWriteTime.dwHighDateTime=0x1d5e14e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.217] FindNextFileW (in: hFindFile=0x1437878, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4043650, ftCreationTime.dwHighDateTime=0x1d5e1db, ftLastAccessTime.dwLowDateTime=0xc882b5b0, ftLastAccessTime.dwHighDateTime=0x1d5e9a6, ftLastWriteTime.dwLowDateTime=0xc882b5b0, ftLastWriteTime.dwHighDateTime=0x1d5e9a6, nFileSizeHigh=0x0, nFileSizeLow=0x12b5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fVJLf.mkv", cAlternateFileName="")) returned 1 [0108.217] FindNextFileW (in: hFindFile=0x1437878, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ec2460, ftCreationTime.dwHighDateTime=0x1d5e194, ftLastAccessTime.dwLowDateTime=0xb607b820, ftLastAccessTime.dwHighDateTime=0x1d5eb83, ftLastWriteTime.dwLowDateTime=0xb607b820, ftLastWriteTime.dwHighDateTime=0x1d5eb83, nFileSizeHigh=0x0, nFileSizeLow=0x660e, dwReserved0=0x0, dwReserved1=0x0, cFileName="iWpHL38cVYJ6Xr.swf", cAlternateFileName="IWPHL3~1.SWF")) returned 1 [0108.217] FindNextFileW (in: hFindFile=0x1437878, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.217] FindClose (in: hFindFile=0x1437878 | out: hFindFile=0x1437878) returned 1 [0108.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0108.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0108.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0108.218] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo", lpFilePart=0x0) returned 0x25 [0108.218] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\SgHBc1dUnNt4uo\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5feb35d0, ftCreationTime.dwHighDateTime=0x1d5e27c, ftLastAccessTime.dwLowDateTime=0x7cbf24c0, ftLastAccessTime.dwHighDateTime=0x1d5e32e, ftLastWriteTime.dwLowDateTime=0x7cbf24c0, ftLastWriteTime.dwHighDateTime=0x1d5e32e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437938 [0108.218] FindNextFileW (in: hFindFile=0x1437938, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5feb35d0, ftCreationTime.dwHighDateTime=0x1d5e27c, ftLastAccessTime.dwLowDateTime=0x7cbf24c0, ftLastAccessTime.dwHighDateTime=0x1d5e32e, ftLastWriteTime.dwLowDateTime=0x7cbf24c0, ftLastWriteTime.dwHighDateTime=0x1d5e32e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.218] FindNextFileW (in: hFindFile=0x1437938, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba763e0, ftCreationTime.dwHighDateTime=0x1d5e732, ftLastAccessTime.dwLowDateTime=0xd66ee2c0, ftLastAccessTime.dwHighDateTime=0x1d5ee60, ftLastWriteTime.dwLowDateTime=0xd66ee2c0, ftLastWriteTime.dwHighDateTime=0x1d5ee60, nFileSizeHigh=0x0, nFileSizeLow=0x929e, dwReserved0=0x0, dwReserved1=0x0, cFileName="1GqygP.flv", cAlternateFileName="")) returned 1 [0108.218] FindNextFileW (in: hFindFile=0x1437938, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4456cb0, ftCreationTime.dwHighDateTime=0x1d5e223, ftLastAccessTime.dwLowDateTime=0x51a67170, ftLastAccessTime.dwHighDateTime=0x1d5e6d6, ftLastWriteTime.dwLowDateTime=0x51a67170, ftLastWriteTime.dwHighDateTime=0x1d5e6d6, nFileSizeHigh=0x0, nFileSizeLow=0x15c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="1X1gfeYLzR0Y.mp4", cAlternateFileName="1X1GFE~1.MP4")) returned 1 [0108.218] FindNextFileW (in: hFindFile=0x1437938, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24c04070, ftCreationTime.dwHighDateTime=0x1d5ec47, ftLastAccessTime.dwLowDateTime=0x914c4e30, ftLastAccessTime.dwHighDateTime=0x1d5ed3e, ftLastWriteTime.dwLowDateTime=0x914c4e30, ftLastWriteTime.dwHighDateTime=0x1d5ed3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLNC_yY", cAlternateFileName="")) returned 1 [0108.219] FindNextFileW (in: hFindFile=0x1437938, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35a018a0, ftCreationTime.dwHighDateTime=0x1d5eb3b, ftLastAccessTime.dwLowDateTime=0x509320d0, ftLastAccessTime.dwHighDateTime=0x1d5ed25, ftLastWriteTime.dwLowDateTime=0x509320d0, ftLastWriteTime.dwHighDateTime=0x1d5ed25, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pFGY_XxkK", cAlternateFileName="PFGY_X~1")) returned 1 [0108.219] FindNextFileW (in: hFindFile=0x1437938, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb507390, ftCreationTime.dwHighDateTime=0x1d5e963, ftLastAccessTime.dwLowDateTime=0x11f99330, ftLastAccessTime.dwHighDateTime=0x1d5ef3d, ftLastWriteTime.dwLowDateTime=0x11f99330, ftLastWriteTime.dwHighDateTime=0x1d5ef3d, nFileSizeHigh=0x0, nFileSizeLow=0xdb5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rlDAZ6DRs3EF.mp4", cAlternateFileName="RLDAZ6~1.MP4")) returned 1 [0108.219] FindNextFileW (in: hFindFile=0x1437938, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3692b2c0, ftCreationTime.dwHighDateTime=0x1d5e98a, ftLastAccessTime.dwLowDateTime=0xad1e4b00, ftLastAccessTime.dwHighDateTime=0x1d5e14e, ftLastWriteTime.dwLowDateTime=0xad1e4b00, ftLastWriteTime.dwHighDateTime=0x1d5e14e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="txkgkMxHJwbr2ycQT", cAlternateFileName="TXKGKM~1")) returned 1 [0108.219] FindNextFileW (in: hFindFile=0x1437938, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56189680, ftCreationTime.dwHighDateTime=0x1d5eae5, ftLastAccessTime.dwLowDateTime=0xf17d550, ftLastAccessTime.dwHighDateTime=0x1d5e650, ftLastWriteTime.dwLowDateTime=0xf17d550, ftLastWriteTime.dwHighDateTime=0x1d5e650, nFileSizeHigh=0x0, nFileSizeLow=0x12b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YhaCDpD.flv", cAlternateFileName="")) returned 1 [0108.219] FindNextFileW (in: hFindFile=0x1437938, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.219] FindClose (in: hFindFile=0x1437938 | out: hFindFile=0x1437938) returned 1 [0108.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0108.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0108.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0108.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0108.220] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7e040d2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7e040d2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437d78 [0108.220] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7e040d2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7e040d2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.220] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce5cc10, ftCreationTime.dwHighDateTime=0x1d5e8bf, ftLastAccessTime.dwLowDateTime=0x693a2f30, ftLastAccessTime.dwHighDateTime=0x1d5e103, ftLastWriteTime.dwLowDateTime=0x693a2f30, ftLastWriteTime.dwHighDateTime=0x1d5e103, nFileSizeHigh=0x0, nFileSizeLow=0x14ece, dwReserved0=0x0, dwReserved1=0x0, cFileName="6frDM4VKDoC3z.avi", cAlternateFileName="6FRDM4~1.AVI")) returned 1 [0108.220] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9febdb0, ftCreationTime.dwHighDateTime=0x1d5e1d2, ftLastAccessTime.dwLowDateTime=0x480d7fd0, ftLastAccessTime.dwHighDateTime=0x1d5e728, ftLastWriteTime.dwLowDateTime=0x480d7fd0, ftLastWriteTime.dwHighDateTime=0x1d5e728, nFileSizeHigh=0x0, nFileSizeLow=0x12fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="8-B02W4mOumqmlE1Nbh.mkv", cAlternateFileName="8-B02W~1.MKV")) returned 1 [0108.221] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0108.221] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12f21890, ftCreationTime.dwHighDateTime=0x1d5e8dd, ftLastAccessTime.dwLowDateTime=0xcff75630, ftLastAccessTime.dwHighDateTime=0x1d5ee82, ftLastWriteTime.dwLowDateTime=0xcff75630, ftLastWriteTime.dwHighDateTime=0x1d5ee82, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JpDgGgiLXKHKj Ww_", cAlternateFileName="JPDGGG~1")) returned 1 [0108.221] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52f58d0, ftCreationTime.dwHighDateTime=0x1d5e597, ftLastAccessTime.dwLowDateTime=0x84d3ecf0, ftLastAccessTime.dwHighDateTime=0x1d5ef49, ftLastWriteTime.dwLowDateTime=0x84d3ecf0, ftLastWriteTime.dwHighDateTime=0x1d5ef49, nFileSizeHigh=0x0, nFileSizeLow=0x12bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="olXvs.mkv", cAlternateFileName="")) returned 1 [0108.221] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x923b6e30, ftCreationTime.dwHighDateTime=0x1d5eeb4, ftLastAccessTime.dwLowDateTime=0xee4150f0, ftLastAccessTime.dwHighDateTime=0x1d5e48c, ftLastWriteTime.dwLowDateTime=0xee4150f0, ftLastWriteTime.dwHighDateTime=0x1d5e48c, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="orlUj4aYPw.mp4", cAlternateFileName="ORLUJ4~1.MP4")) returned 1 [0108.221] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58787b80, ftCreationTime.dwHighDateTime=0x1d5e14d, ftLastAccessTime.dwLowDateTime=0x6688e980, ftLastAccessTime.dwHighDateTime=0x1d5ead5, ftLastWriteTime.dwLowDateTime=0x6688e980, ftLastWriteTime.dwHighDateTime=0x1d5ead5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QOBwx1DhrflIEA8pB7n", cAlternateFileName="QOBWX1~1")) returned 1 [0108.222] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5feb35d0, ftCreationTime.dwHighDateTime=0x1d5e27c, ftLastAccessTime.dwLowDateTime=0x7cbf24c0, ftLastAccessTime.dwHighDateTime=0x1d5e32e, ftLastWriteTime.dwLowDateTime=0x7cbf24c0, ftLastWriteTime.dwHighDateTime=0x1d5e32e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SgHBc1dUnNt4uo", cAlternateFileName="SGHBC1~1")) returned 1 [0108.222] FindNextFileW (in: hFindFile=0x1437d78, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5feb35d0, ftCreationTime.dwHighDateTime=0x1d5e27c, ftLastAccessTime.dwLowDateTime=0x7cbf24c0, ftLastAccessTime.dwHighDateTime=0x1d5e32e, ftLastWriteTime.dwLowDateTime=0x7cbf24c0, ftLastWriteTime.dwHighDateTime=0x1d5e32e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SgHBc1dUnNt4uo", cAlternateFileName="SGHBC1~1")) returned 0 [0108.222] FindClose (in: hFindFile=0x1437d78 | out: hFindFile=0x1437d78) returned 1 [0108.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0108.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0108.222] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0x614ef9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0108.222] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Videos.txt", nBufferLength=0x105, lpBuffer=0x614ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Videos.txt", lpFilePart=0x0) returned 0x74 [0108.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f39c) returned 1 [0108.223] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Videos.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\dirs\\videos.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x5b0 [0108.223] GetFileType (hFile=0x5b0) returned 0x1 [0108.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f398) returned 1 [0108.223] GetFileType (hFile=0x5b0) returned 0x1 [0108.224] WriteFile (in: hFile=0x5b0, lpBuffer=0x3073af0*, nNumberOfBytesToWrite=0x37d, lpNumberOfBytesWritten=0x614f418, lpOverlapped=0x0 | out: lpBuffer=0x3073af0*, lpNumberOfBytesWritten=0x614f418*=0x37d, lpOverlapped=0x0) returned 1 [0108.225] CloseHandle (hObject=0x5b0) returned 1 [0108.226] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x614ef60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x4d [0108.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f410) returned 1 [0108.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup"), fInfoLevelId=0x0, lpFileInformation=0x614f48c | out: lpFileInformation=0x614f48c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x441842cf, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd3eef18c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0108.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f40c) returned 1 [0108.227] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x614ef68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x4d [0108.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0108.227] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x4d [0108.227] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x441842cf, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd3eef18c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437838 [0108.227] FindNextFileW (in: hFindFile=0x1437838, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x441842cf, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd3eef18c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.227] FindNextFileW (in: hFindFile=0x1437838, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441842cf, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441842cf, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0108.228] FindNextFileW (in: hFindFile=0x1437838, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441842cf, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441842cf, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0108.228] FindClose (in: hFindFile=0x1437838 | out: hFindFile=0x1437838) returned 1 [0108.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0108.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0108.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0108.228] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x4d [0108.228] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x441842cf, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd3eef18c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437cf8 [0108.228] FindNextFileW (in: hFindFile=0x1437cf8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x441842cf, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd3eef18c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.228] FindNextFileW (in: hFindFile=0x1437cf8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441842cf, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441842cf, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0108.229] FindNextFileW (in: hFindFile=0x1437cf8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.229] FindClose (in: hFindFile=0x1437cf8 | out: hFindFile=0x1437cf8) returned 1 [0108.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0108.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0108.229] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x614ef9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x4d [0108.229] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Startup.txt", nBufferLength=0x105, lpBuffer=0x614ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Startup.txt", lpFilePart=0x0) returned 0x75 [0108.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f39c) returned 1 [0108.229] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Startup.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\dirs\\startup.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x5b0 [0108.229] GetFileType (hFile=0x5b0) returned 0x1 [0108.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f398) returned 1 [0108.230] GetFileType (hFile=0x5b0) returned 0x1 [0108.230] WriteFile (in: hFile=0x5b0, lpBuffer=0x3077cb8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x614f418, lpOverlapped=0x0 | out: lpBuffer=0x3077cb8*, lpNumberOfBytesWritten=0x614f418*=0x18, lpOverlapped=0x0) returned 1 [0108.231] CloseHandle (hObject=0x5b0) returned 1 [0108.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0x614ef60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0108.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f410) returned 1 [0108.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads" (normalized: "c:\\users\\fd1hvy\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x614f48c | out: lpFileInformation=0x614f48c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0108.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f40c) returned 1 [0108.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0x614ef68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0108.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0108.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0108.236] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437cb8 [0108.236] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.236] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0108.236] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0108.237] FindClose (in: hFindFile=0x1437cb8 | out: hFindFile=0x1437cb8) returned 1 [0108.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0108.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0108.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0108.237] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0108.237] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14379b8 [0108.326] FindNextFileW (in: hFindFile=0x14379b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.326] FindNextFileW (in: hFindFile=0x14379b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0108.326] FindNextFileW (in: hFindFile=0x14379b8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.326] FindClose (in: hFindFile=0x14379b8 | out: hFindFile=0x14379b8) returned 1 [0108.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0108.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0108.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0x614ef9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0108.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Downloads.txt", nBufferLength=0x105, lpBuffer=0x614ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Downloads.txt", lpFilePart=0x0) returned 0x77 [0108.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f39c) returned 1 [0108.327] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Downloads.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\dirs\\downloads.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x62c [0108.355] GetFileType (hFile=0x62c) returned 0x1 [0108.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f398) returned 1 [0108.355] GetFileType (hFile=0x62c) returned 0x1 [0108.356] WriteFile (in: hFile=0x62c, lpBuffer=0x307b314*, nNumberOfBytesToWrite=0x1a, lpNumberOfBytesWritten=0x614f418, lpOverlapped=0x0 | out: lpBuffer=0x307b314*, lpNumberOfBytesWritten=0x614f418*=0x1a, lpOverlapped=0x0) returned 1 [0108.357] CloseHandle (hObject=0x62c) returned 1 [0108.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Dropbox", nBufferLength=0x105, lpBuffer=0x614ef60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Dropbox", lpFilePart=0x0) returned 0x17 [0108.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f410) returned 1 [0108.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Dropbox" (normalized: "c:\\users\\fd1hvy\\dropbox"), fInfoLevelId=0x0, lpFileInformation=0x614f48c | out: lpFileInformation=0x614f48c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0108.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f40c) returned 1 [0108.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Dropbox", nBufferLength=0x105, lpBuffer=0x614ef9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Dropbox", lpFilePart=0x0) returned 0x17 [0108.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x105, lpBuffer=0x614ef60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive", lpFilePart=0x0) returned 0x18 [0108.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f410) returned 1 [0108.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive" (normalized: "c:\\users\\fd1hvy\\onedrive"), fInfoLevelId=0x0, lpFileInformation=0x614f48c | out: lpFileInformation=0x614f48c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0108.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f40c) returned 1 [0108.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x105, lpBuffer=0x614ef68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive", lpFilePart=0x0) returned 0x18 [0108.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0108.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive", lpFilePart=0x0) returned 0x18 [0108.360] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437af8 [0108.360] FindNextFileW (in: hFindFile=0x1437af8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.361] FindNextFileW (in: hFindFile=0x1437af8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0108.361] FindNextFileW (in: hFindFile=0x1437af8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0108.362] FindClose (in: hFindFile=0x1437af8 | out: hFindFile=0x1437af8) returned 1 [0108.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0108.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0108.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0108.362] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive", lpFilePart=0x0) returned 0x18 [0108.362] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437cb8 [0108.362] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.362] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0108.363] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.363] FindClose (in: hFindFile=0x1437cb8 | out: hFindFile=0x1437cb8) returned 1 [0108.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0108.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0108.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x105, lpBuffer=0x614ef9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive", lpFilePart=0x0) returned 0x18 [0108.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\OneDrive.txt", nBufferLength=0x105, lpBuffer=0x614ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\OneDrive.txt", lpFilePart=0x0) returned 0x76 [0108.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f39c) returned 1 [0108.363] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\OneDrive.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\dirs\\onedrive.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x62c [0108.363] GetFileType (hFile=0x62c) returned 0x1 [0108.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f398) returned 1 [0108.363] GetFileType (hFile=0x62c) returned 0x1 [0108.364] WriteFile (in: hFile=0x62c, lpBuffer=0x307e9f4*, nNumberOfBytesToWrite=0x19, lpNumberOfBytesWritten=0x614f418, lpOverlapped=0x0 | out: lpBuffer=0x307e9f4*, lpNumberOfBytesWritten=0x614f418*=0x19, lpOverlapped=0x0) returned 1 [0108.365] CloseHandle (hObject=0x62c) returned 1 [0108.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x614ef60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x22 [0108.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f410) returned 1 [0108.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x614f48c | out: lpFileInformation=0x614f48c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0108.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f40c) returned 1 [0108.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x614ef68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x22 [0108.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0108.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x22 [0108.366] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437cb8 [0108.367] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.367] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de6fe60, ftCreationTime.dwHighDateTime=0x1d5ec13, ftLastAccessTime.dwLowDateTime=0xdf5811d0, ftLastAccessTime.dwHighDateTime=0x1d5e128, ftLastWriteTime.dwLowDateTime=0xdf5811d0, ftLastWriteTime.dwHighDateTime=0x1d5e128, nFileSizeHigh=0x0, nFileSizeLow=0x2ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10Vf1EPoIs106Znl.ppt", cAlternateFileName="10VF1E~1.PPT")) returned 1 [0108.367] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb88a7d0, ftCreationTime.dwHighDateTime=0x1d5ea58, ftLastAccessTime.dwLowDateTime=0x87d3fcf0, ftLastAccessTime.dwHighDateTime=0x1d5e1a8, ftLastWriteTime.dwLowDateTime=0x87d3fcf0, ftLastWriteTime.dwHighDateTime=0x1d5e1a8, nFileSizeHigh=0x0, nFileSizeLow=0x16858, dwReserved0=0x0, dwReserved1=0x0, cFileName="2MjZyqig3oCcGB0.jpg", cAlternateFileName="2MJZYQ~1.JPG")) returned 1 [0108.367] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3574ab5307973278a085288fd98393ab", cAlternateFileName="3574AB~1")) returned 1 [0108.367] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e82240, ftCreationTime.dwHighDateTime=0x1d5e4d6, ftLastAccessTime.dwLowDateTime=0xeed894a0, ftLastAccessTime.dwHighDateTime=0x1d5f0d1, ftLastWriteTime.dwLowDateTime=0xeed894a0, ftLastWriteTime.dwHighDateTime=0x1d5f0d1, nFileSizeHigh=0x0, nFileSizeLow=0x10e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="43Ywm6L.m4a", cAlternateFileName="")) returned 1 [0108.368] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd86d020, ftCreationTime.dwHighDateTime=0x1d5e59b, ftLastAccessTime.dwLowDateTime=0x367701f0, ftLastAccessTime.dwHighDateTime=0x1d5e6ac, ftLastWriteTime.dwLowDateTime=0x367701f0, ftLastWriteTime.dwHighDateTime=0x1d5e6ac, nFileSizeHigh=0x0, nFileSizeLow=0x12da5, dwReserved0=0x0, dwReserved1=0x0, cFileName="6zYd-Bak7Y4ZzOV3.ppt", cAlternateFileName="6ZYD-B~1.PPT")) returned 1 [0108.368] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x577b4b90, ftCreationTime.dwHighDateTime=0x1d5ee9a, ftLastAccessTime.dwLowDateTime=0x6e721540, ftLastAccessTime.dwHighDateTime=0x1d5e783, ftLastWriteTime.dwLowDateTime=0x6e721540, ftLastWriteTime.dwHighDateTime=0x1d5e783, nFileSizeHigh=0x0, nFileSizeLow=0xaf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="8EJssAsOdyFu6T9tyB0.mp4", cAlternateFileName="8EJSSA~1.MP4")) returned 1 [0108.368] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49b60e0, ftCreationTime.dwHighDateTime=0x1d5f01e, ftLastAccessTime.dwLowDateTime=0xa5c387d0, ftLastAccessTime.dwHighDateTime=0x1d5efbd, ftLastWriteTime.dwLowDateTime=0xa5c387d0, ftLastWriteTime.dwHighDateTime=0x1d5efbd, nFileSizeHigh=0x0, nFileSizeLow=0x77c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="aLDgijDyeQAvI.wav", cAlternateFileName="ALDGIJ~1.WAV")) returned 1 [0108.368] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa78c7040, ftCreationTime.dwHighDateTime=0x1d5e3f1, ftLastAccessTime.dwLowDateTime=0x56e77330, ftLastAccessTime.dwHighDateTime=0x1d5ee9e, ftLastWriteTime.dwLowDateTime=0x56e77330, ftLastWriteTime.dwHighDateTime=0x1d5ee9e, nFileSizeHigh=0x0, nFileSizeLow=0x9175, dwReserved0=0x0, dwReserved1=0x0, cFileName="beXctUMWvrqKAY1JWB.pps", cAlternateFileName="BEXCTU~1.PPS")) returned 1 [0108.368] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e7cf332, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0x6e7cf332, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0x6e7cf332, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bst6CD3.tmp", cAlternateFileName="")) returned 1 [0108.368] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b4680c, ftCreationTime.dwHighDateTime=0x1d5d815, ftLastAccessTime.dwLowDateTime=0x30b4680c, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0x30b4680c, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bst708C.tmp", cAlternateFileName="")) returned 1 [0108.368] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448649e5, ftCreationTime.dwHighDateTime=0x1d5e877, ftLastAccessTime.dwLowDateTime=0x448649e5, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x448649e5, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bst729F.tmp", cAlternateFileName="")) returned 1 [0108.369] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ef5aa3, ftCreationTime.dwHighDateTime=0x1d5e7c1, ftLastAccessTime.dwLowDateTime=0x10ef5aa3, ftLastAccessTime.dwHighDateTime=0x1d5e7c1, ftLastWriteTime.dwLowDateTime=0x10ef5aa3, ftLastWriteTime.dwHighDateTime=0x1d5e7c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bst76C6.tmp", cAlternateFileName="")) returned 1 [0108.369] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd39b90, ftCreationTime.dwHighDateTime=0x1d5ef83, ftLastAccessTime.dwLowDateTime=0x674e81f0, ftLastAccessTime.dwHighDateTime=0x1d5e73c, ftLastWriteTime.dwLowDateTime=0x674e81f0, ftLastWriteTime.dwHighDateTime=0x1d5e73c, nFileSizeHigh=0x0, nFileSizeLow=0x4f0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FNht.mp3", cAlternateFileName="")) returned 1 [0108.369] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76ffedf0, ftCreationTime.dwHighDateTime=0x1d5e77d, ftLastAccessTime.dwLowDateTime=0x21824c90, ftLastAccessTime.dwHighDateTime=0x1d5f0b2, ftLastWriteTime.dwLowDateTime=0x21824c90, ftLastWriteTime.dwHighDateTime=0x1d5f0b2, nFileSizeHigh=0x0, nFileSizeLow=0x17fa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gkgffEqx-uRXeC1F.png", cAlternateFileName="GKGFFE~1.PNG")) returned 1 [0108.369] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d8719e, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x35d8719e, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x35d8719e, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x30, dwReserved0=0x0, dwReserved1=0x0, cFileName="gpustats.bx", cAlternateFileName="")) returned 1 [0108.369] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54f03620, ftCreationTime.dwHighDateTime=0x1d5e421, ftLastAccessTime.dwLowDateTime=0x1cd07470, ftLastAccessTime.dwHighDateTime=0x1d5e616, ftLastWriteTime.dwLowDateTime=0x1cd07470, ftLastWriteTime.dwHighDateTime=0x1d5e616, nFileSizeHigh=0x0, nFileSizeLow=0x990, dwReserved0=0x0, dwReserved1=0x0, cFileName="GY3A6tJlKHhXsSnUKW.docx", cAlternateFileName="GY3A6T~1.DOC")) returned 1 [0108.369] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f210c20, ftCreationTime.dwHighDateTime=0x1d5ec61, ftLastAccessTime.dwLowDateTime=0xd3638550, ftLastAccessTime.dwHighDateTime=0x1d5eda1, ftLastWriteTime.dwLowDateTime=0xd3638550, ftLastWriteTime.dwHighDateTime=0x1d5eda1, nFileSizeHigh=0x0, nFileSizeLow=0x8b35, dwReserved0=0x0, dwReserved1=0x0, cFileName="h8UYCm.ots", cAlternateFileName="")) returned 1 [0108.370] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x537cac60, ftCreationTime.dwHighDateTime=0x1d5e5f7, ftLastAccessTime.dwLowDateTime=0x74bd0540, ftLastAccessTime.dwHighDateTime=0x1d5ebcf, ftLastWriteTime.dwLowDateTime=0x74bd0540, ftLastWriteTime.dwHighDateTime=0x1d5ebcf, nFileSizeHigh=0x0, nFileSizeLow=0x2881, dwReserved0=0x0, dwReserved1=0x0, cFileName="JkjH_pw5iZPRO5t5-.mkv", cAlternateFileName="JKJH_P~1.MKV")) returned 1 [0108.370] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986be410, ftCreationTime.dwHighDateTime=0x1d5e699, ftLastAccessTime.dwLowDateTime=0xee6fb410, ftLastAccessTime.dwHighDateTime=0x1d5ecc8, ftLastWriteTime.dwLowDateTime=0xee6fb410, ftLastWriteTime.dwHighDateTime=0x1d5ecc8, nFileSizeHigh=0x0, nFileSizeLow=0x18898, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQma0aupuu6.avi", cAlternateFileName="KQMA0A~1.AVI")) returned 1 [0108.370] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcff8400, ftCreationTime.dwHighDateTime=0x1d5e0f5, ftLastAccessTime.dwLowDateTime=0x6628aab0, ftLastAccessTime.dwHighDateTime=0x1d5e2ca, ftLastWriteTime.dwLowDateTime=0x6628aab0, ftLastWriteTime.dwHighDateTime=0x1d5e2ca, nFileSizeHigh=0x0, nFileSizeLow=0x8314, dwReserved0=0x0, dwReserved1=0x0, cFileName="lx1CQrmD_8o9jWYsOt4.mp4", cAlternateFileName="LX1CQR~1.MP4")) returned 1 [0108.370] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71df4a10, ftCreationTime.dwHighDateTime=0x1d5e8f8, ftLastAccessTime.dwLowDateTime=0xcd38ea40, ftLastAccessTime.dwHighDateTime=0x1d5efc6, ftLastWriteTime.dwLowDateTime=0xcd38ea40, ftLastWriteTime.dwHighDateTime=0x1d5efc6, nFileSizeHigh=0x0, nFileSizeLow=0xa4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mp7lg0cmk6V.m4a", cAlternateFileName="MP7LG0~1.M4A")) returned 1 [0108.370] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa24c4140, ftCreationTime.dwHighDateTime=0x1d5e73f, ftLastAccessTime.dwLowDateTime=0x296cd030, ftLastAccessTime.dwHighDateTime=0x1d5e773, ftLastWriteTime.dwLowDateTime=0x296cd030, ftLastWriteTime.dwHighDateTime=0x1d5e773, nFileSizeHigh=0x0, nFileSizeLow=0x149a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="nF8AzRSnqMiXbQVRV.flv", cAlternateFileName="NF8AZR~1.FLV")) returned 1 [0108.371] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eedc80, ftCreationTime.dwHighDateTime=0x1d5f043, ftLastAccessTime.dwLowDateTime=0x8c549b40, ftLastAccessTime.dwHighDateTime=0x1d5ee5a, ftLastWriteTime.dwLowDateTime=0x8c549b40, ftLastWriteTime.dwHighDateTime=0x1d5ee5a, nFileSizeHigh=0x0, nFileSizeLow=0x5868, dwReserved0=0x0, dwReserved1=0x0, cFileName="NobRG5ZK.png", cAlternateFileName="")) returned 1 [0108.371] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedadd030, ftCreationTime.dwHighDateTime=0x1d5e2ef, ftLastAccessTime.dwLowDateTime=0x2b7fe480, ftLastAccessTime.dwHighDateTime=0x1d5f041, ftLastWriteTime.dwLowDateTime=0x2b7fe480, ftLastWriteTime.dwHighDateTime=0x1d5f041, nFileSizeHigh=0x0, nFileSizeLow=0xcd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCwJuujDF5R6.mkv", cAlternateFileName="OCWJUU~1.MKV")) returned 1 [0108.371] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cebd900, ftCreationTime.dwHighDateTime=0x1d5ed4c, ftLastAccessTime.dwLowDateTime=0x1d14a770, ftLastAccessTime.dwHighDateTime=0x1d5e7d9, ftLastWriteTime.dwLowDateTime=0x1d14a770, ftLastWriteTime.dwHighDateTime=0x1d5e7d9, nFileSizeHigh=0x0, nFileSizeLow=0xf802, dwReserved0=0x0, dwReserved1=0x0, cFileName="ozGt7_.mp4", cAlternateFileName="")) returned 1 [0108.371] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbbf1880, ftCreationTime.dwHighDateTime=0x1d5e11a, ftLastAccessTime.dwLowDateTime=0xdd0bbdc0, ftLastAccessTime.dwHighDateTime=0x1d5e3ce, ftLastWriteTime.dwLowDateTime=0xdd0bbdc0, ftLastWriteTime.dwHighDateTime=0x1d5e3ce, nFileSizeHigh=0x0, nFileSizeLow=0x3a5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PbWnMg7QXb8bPl1HP_Ov.mp3", cAlternateFileName="PBWNMG~1.MP3")) returned 1 [0108.371] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba64280, ftCreationTime.dwHighDateTime=0x1d5eee6, ftLastAccessTime.dwLowDateTime=0x9cef9250, ftLastAccessTime.dwHighDateTime=0x1d5ed3a, ftLastWriteTime.dwLowDateTime=0x9cef9250, ftLastWriteTime.dwHighDateTime=0x1d5ed3a, nFileSizeHigh=0x0, nFileSizeLow=0x146de, dwReserved0=0x0, dwReserved1=0x0, cFileName="pfHOeZc.docx", cAlternateFileName="PFHOEZ~1.DOC")) returned 1 [0108.372] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eb0f370, ftCreationTime.dwHighDateTime=0x1d5e423, ftLastAccessTime.dwLowDateTime=0x963371c0, ftLastAccessTime.dwHighDateTime=0x1d5e600, ftLastWriteTime.dwLowDateTime=0x963371c0, ftLastWriteTime.dwHighDateTime=0x1d5e600, nFileSizeHigh=0x0, nFileSizeLow=0xf019, dwReserved0=0x0, dwReserved1=0x0, cFileName="Px_d9ot3nQrRuOLYXT.avi", cAlternateFileName="PX_D9O~1.AVI")) returned 1 [0108.372] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd89f6350, ftCreationTime.dwHighDateTime=0x1d5f04d, ftLastAccessTime.dwLowDateTime=0x54757fc0, ftLastAccessTime.dwHighDateTime=0x1d5eae3, ftLastWriteTime.dwLowDateTime=0x54757fc0, ftLastWriteTime.dwHighDateTime=0x1d5eae3, nFileSizeHigh=0x0, nFileSizeLow=0x135b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="qv9XKVO3kTMjqYRwFh_.jpg", cAlternateFileName="QV9XKV~1.JPG")) returned 1 [0108.372] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x425df610, ftCreationTime.dwHighDateTime=0x1d5e1d7, ftLastAccessTime.dwLowDateTime=0x994381a0, ftLastAccessTime.dwHighDateTime=0x1d5eac6, ftLastWriteTime.dwLowDateTime=0x994381a0, ftLastWriteTime.dwHighDateTime=0x1d5eac6, nFileSizeHigh=0x0, nFileSizeLow=0x824a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ri9UAnANK_y_.mkv", cAlternateFileName="RI9UAN~1.MKV")) returned 1 [0108.372] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f575360, ftCreationTime.dwHighDateTime=0x1d5e86d, ftLastAccessTime.dwLowDateTime=0x34b0d710, ftLastAccessTime.dwHighDateTime=0x1d5efa3, ftLastWriteTime.dwLowDateTime=0x34b0d710, ftLastWriteTime.dwHighDateTime=0x1d5efa3, nFileSizeHigh=0x0, nFileSizeLow=0xc03, dwReserved0=0x0, dwReserved1=0x0, cFileName="r_tDo0DyI9ooM.ppt", cAlternateFileName="R_TDO0~1.PPT")) returned 1 [0108.373] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd942ec0, ftCreationTime.dwHighDateTime=0x1d5e99a, ftLastAccessTime.dwLowDateTime=0xa07732c0, ftLastAccessTime.dwHighDateTime=0x1d5f0b9, ftLastWriteTime.dwLowDateTime=0xa07732c0, ftLastWriteTime.dwHighDateTime=0x1d5f0b9, nFileSizeHigh=0x0, nFileSizeLow=0x17a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="TofySMrld9l.jpg", cAlternateFileName="TOFYSM~1.JPG")) returned 1 [0108.373] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x265033c0, ftCreationTime.dwHighDateTime=0x1d5e119, ftLastAccessTime.dwLowDateTime=0xba534f50, ftLastAccessTime.dwHighDateTime=0x1d5efc7, ftLastWriteTime.dwLowDateTime=0xba534f50, ftLastWriteTime.dwHighDateTime=0x1d5efc7, nFileSizeHigh=0x0, nFileSizeLow=0x162e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TSAFsL1wGzi7rtFz5lwO.mkv", cAlternateFileName="TSAFSL~1.MKV")) returned 1 [0108.373] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa441acd0, ftCreationTime.dwHighDateTime=0x1d5f0fc, ftLastAccessTime.dwLowDateTime=0xbd9ccba0, ftLastAccessTime.dwHighDateTime=0x1d5ed6f, ftLastWriteTime.dwLowDateTime=0xbd9ccba0, ftLastWriteTime.dwHighDateTime=0x1d5ed6f, nFileSizeHigh=0x0, nFileSizeLow=0xd519, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uqwwf50AcQgQDsIHZ.xls", cAlternateFileName="UQWWF5~1.XLS")) returned 1 [0108.373] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfef710e0, ftCreationTime.dwHighDateTime=0x1d5e349, ftLastAccessTime.dwLowDateTime=0x73ac8210, ftLastAccessTime.dwHighDateTime=0x1d5e8ce, ftLastWriteTime.dwLowDateTime=0x73ac8210, ftLastWriteTime.dwHighDateTime=0x1d5e8ce, nFileSizeHigh=0x0, nFileSizeLow=0x8129, dwReserved0=0x0, dwReserved1=0x0, cFileName="uxmYX.avi", cAlternateFileName="")) returned 1 [0108.373] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27271a80, ftCreationTime.dwHighDateTime=0x1d5efb9, ftLastAccessTime.dwLowDateTime=0x715ef890, ftLastAccessTime.dwHighDateTime=0x1d5e33c, ftLastWriteTime.dwLowDateTime=0x715ef890, ftLastWriteTime.dwHighDateTime=0x1d5e33c, nFileSizeHigh=0x0, nFileSizeLow=0x130a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Va9_j_x76.png", cAlternateFileName="VA9_J_~1.PNG")) returned 1 [0108.374] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7434ce80, ftCreationTime.dwHighDateTime=0x1d5ef69, ftLastAccessTime.dwLowDateTime=0x3b38df10, ftLastAccessTime.dwHighDateTime=0x1d5e986, ftLastWriteTime.dwLowDateTime=0x3b38df10, ftLastWriteTime.dwHighDateTime=0x1d5e986, nFileSizeHigh=0x0, nFileSizeLow=0x1811c, dwReserved0=0x0, dwReserved1=0x0, cFileName="vfn813oxdAjguI1K.gif", cAlternateFileName="VFN813~1.GIF")) returned 1 [0108.374] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b932820, ftCreationTime.dwHighDateTime=0x1d5ee01, ftLastAccessTime.dwLowDateTime=0x761a4730, ftLastAccessTime.dwHighDateTime=0x1d5e8a1, ftLastWriteTime.dwLowDateTime=0x761a4730, ftLastWriteTime.dwHighDateTime=0x1d5e8a1, nFileSizeHigh=0x0, nFileSizeLow=0x661, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vhuy5VBijQCGq.gif", cAlternateFileName="VHUY5V~1.GIF")) returned 1 [0108.374] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x201f2c0, ftCreationTime.dwHighDateTime=0x1d5eb54, ftLastAccessTime.dwLowDateTime=0x73e9f070, ftLastAccessTime.dwHighDateTime=0x1d5f0f6, ftLastWriteTime.dwLowDateTime=0x73e9f070, ftLastWriteTime.dwHighDateTime=0x1d5f0f6, nFileSizeHigh=0x0, nFileSizeLow=0x119ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="W2Mc-siZcB.pdf", cAlternateFileName="W2MC-S~1.PDF")) returned 1 [0108.374] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91af9690, ftCreationTime.dwHighDateTime=0x1d5ecbf, ftLastAccessTime.dwLowDateTime=0x6cc86710, ftLastAccessTime.dwHighDateTime=0x1d5e4c9, ftLastWriteTime.dwLowDateTime=0x6cc86710, ftLastWriteTime.dwHighDateTime=0x1d5e4c9, nFileSizeHigh=0x0, nFileSizeLow=0xc78f, dwReserved0=0x0, dwReserved1=0x0, cFileName="x1i_EfJvH95.png", cAlternateFileName="X1I_EF~1.PNG")) returned 1 [0108.374] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424b34a0, ftCreationTime.dwHighDateTime=0x1d5efbd, ftLastAccessTime.dwLowDateTime=0xfa42d40, ftLastAccessTime.dwHighDateTime=0x1d5eb26, ftLastWriteTime.dwLowDateTime=0xfa42d40, ftLastWriteTime.dwHighDateTime=0x1d5eb26, nFileSizeHigh=0x0, nFileSizeLow=0x16eef, dwReserved0=0x0, dwReserved1=0x0, cFileName="XIlulaLmMNU5sknrh.flv", cAlternateFileName="XILULA~1.FLV")) returned 1 [0108.374] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb016aab0, ftCreationTime.dwHighDateTime=0x1d5ea26, ftLastAccessTime.dwLowDateTime=0xfbe1dbe0, ftLastAccessTime.dwHighDateTime=0x1d5e2ec, ftLastWriteTime.dwLowDateTime=0xfbe1dbe0, ftLastWriteTime.dwHighDateTime=0x1d5e2ec, nFileSizeHigh=0x0, nFileSizeLow=0xce45, dwReserved0=0x0, dwReserved1=0x0, cFileName="xV9WvJI3hUWxk.xlsx", cAlternateFileName="XV9WVJ~1.XLS")) returned 1 [0108.375] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e50620, ftCreationTime.dwHighDateTime=0x1d5e96c, ftLastAccessTime.dwLowDateTime=0xf2ba6bb0, ftLastAccessTime.dwHighDateTime=0x1d5e439, ftLastWriteTime.dwLowDateTime=0xf2ba6bb0, ftLastWriteTime.dwHighDateTime=0x1d5e439, nFileSizeHigh=0x0, nFileSizeLow=0x136e, dwReserved0=0x0, dwReserved1=0x0, cFileName="XWE5rL3S885ztGm3V4.mp3", cAlternateFileName="XWE5RL~1.MP3")) returned 1 [0108.375] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2021c570, ftCreationTime.dwHighDateTime=0x1d5ebc0, ftLastAccessTime.dwLowDateTime=0x7be94e50, ftLastAccessTime.dwHighDateTime=0x1d5ec1a, ftLastWriteTime.dwLowDateTime=0x7be94e50, ftLastWriteTime.dwHighDateTime=0x1d5ec1a, nFileSizeHigh=0x0, nFileSizeLow=0x120ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="YYtpQOg.pdf", cAlternateFileName="")) returned 1 [0108.375] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d057710, ftCreationTime.dwHighDateTime=0x1d5ee67, ftLastAccessTime.dwLowDateTime=0xae3cb2b0, ftLastAccessTime.dwHighDateTime=0x1d5e1a3, ftLastWriteTime.dwLowDateTime=0xae3cb2b0, ftLastWriteTime.dwHighDateTime=0x1d5e1a3, nFileSizeHigh=0x0, nFileSizeLow=0xc719, dwReserved0=0x0, dwReserved1=0x0, cFileName="zZklAlUt91Yv.bmp", cAlternateFileName="ZZKLAL~1.BMP")) returned 1 [0108.375] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfbf08e, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xbcfbf08e, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xbcfbf08e, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{53C99438-1FFA-461B-9DDB-BE90937EA550} - OProcSessId.dat", cAlternateFileName="{53C99~1.DAT")) returned 1 [0108.375] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d808c6b, ftCreationTime.dwHighDateTime=0x1d5e877, ftLastAccessTime.dwLowDateTime=0x5d808c6b, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5d808c6b, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7D25B8A5-1128-4710-9224-347694366412} - OProcSessId.dat", cAlternateFileName="{7D25B~1.DAT")) returned 1 [0108.376] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5a04bc, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xae5a04bc, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xae5a04bc, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} - OProcSessId.dat", cAlternateFileName="{BE262~1.DAT")) returned 1 [0108.376] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5a04bc, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xae5a04bc, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xae5a04bc, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} - OProcSessId.dat", cAlternateFileName="{BE262~1.DAT")) returned 0 [0108.376] FindClose (in: hFindFile=0x1437cb8 | out: hFindFile=0x1437cb8) returned 1 [0108.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0108.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0108.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab", lpFilePart=0x0) returned 0x43 [0108.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3cc) returned 1 [0108.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab"), fInfoLevelId=0x0, lpFileInformation=0x614f448 | out: lpFileInformation=0x614f448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0108.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c8) returned 1 [0108.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab", nBufferLength=0x105, lpBuffer=0x614ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab", lpFilePart=0x0) returned 0x43 [0108.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0108.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab", lpFilePart=0x0) returned 0x43 [0108.377] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437ab8 [0108.377] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.377] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3aa1d4a0, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3aa1d4a0, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="a374bfdbdd1bc28c24c1762625e80fd0", cAlternateFileName="A374BF~1")) returned 1 [0108.377] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.377] FindClose (in: hFindFile=0x1437ab8 | out: hFindFile=0x1437ab8) returned 1 [0108.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0108.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0108.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0", nBufferLength=0x105, lpBuffer=0x614eed8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0", lpFilePart=0x0) returned 0x64 [0108.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0108.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0"), fInfoLevelId=0x0, lpFileInformation=0x614f404 | out: lpFileInformation=0x614f404*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3cc0099a, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3cc0099a, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0108.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f384) returned 1 [0108.378] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0", lpFilePart=0x0) returned 0x64 [0108.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0108.378] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0", lpFilePart=0x0) returned 0x64 [0108.378] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3cc0099a, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3cc0099a, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437ab8 [0108.379] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3cc0099a, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3cc0099a, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.379] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3aa1d4a0, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3aa1d4a0, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3aa1d4a0, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dirs", cAlternateFileName="")) returned 1 [0108.379] FindNextFileW (in: hFindFile=0x1437ab8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.379] FindClose (in: hFindFile=0x1437ab8 | out: hFindFile=0x1437ab8) returned 1 [0108.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0108.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0108.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs", nBufferLength=0x105, lpBuffer=0x614ee94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs", lpFilePart=0x0) returned 0x69 [0108.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f344) returned 1 [0108.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\dirs"), fInfoLevelId=0x0, lpFileInformation=0x614f3c0 | out: lpFileInformation=0x614f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3aa1d4a0, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e1e9159, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e1e9159, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0108.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f340) returned 1 [0108.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs", nBufferLength=0x105, lpBuffer=0x614ee9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs", lpFilePart=0x0) returned 0x69 [0108.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3b4) returned 1 [0108.380] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs", nBufferLength=0x105, lpBuffer=0x614ee68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs", lpFilePart=0x0) returned 0x69 [0108.380] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\*", lpFindFileData=0x614f0dc | out: lpFindFileData=0x614f0dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3aa1d4a0, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e1e9159, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e1e9159, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437cb8 [0108.380] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3aa1d4a0, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e1e9159, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e1e9159, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.380] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3afed09a, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3afed09a, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3b0133af, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x403, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.txt", cAlternateFileName="")) returned 1 [0108.380] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cb68ebe, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3cb68ebe, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3cb68ebe, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.txt", cAlternateFileName="DOCUME~1.TXT")) returned 1 [0108.380] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e175bc4, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e175bc4, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e1c2ad1, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.txt", cAlternateFileName="DOWNLO~1.TXT")) returned 1 [0108.381] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e1e9159, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e1e9159, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e1e9159, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.txt", cAlternateFileName="")) returned 1 [0108.381] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cbb44de, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3cbb44de, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3de08412, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures.txt", cAlternateFileName="")) returned 1 [0108.381] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e090e81, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e090e81, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e090e81, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup.txt", cAlternateFileName="")) returned 1 [0108.381] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e090e81, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e090e81, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e090e81, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos.txt", cAlternateFileName="")) returned 1 [0108.381] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e090e81, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e090e81, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e090e81, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos.txt", cAlternateFileName="")) returned 0 [0108.381] FindClose (in: hFindFile=0x1437cb8 | out: hFindFile=0x1437cb8) returned 1 [0108.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f370) returned 1 [0108.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f37c) returned 1 [0108.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3b4) returned 1 [0108.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs", nBufferLength=0x105, lpBuffer=0x614ee68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs", lpFilePart=0x0) returned 0x69 [0108.382] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\*", lpFindFileData=0x614f0dc | out: lpFindFileData=0x614f0dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3aa1d4a0, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e1e9159, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e1e9159, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437db8 [0108.382] FindNextFileW (in: hFindFile=0x1437db8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3aa1d4a0, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e1e9159, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e1e9159, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.382] FindNextFileW (in: hFindFile=0x1437db8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3afed09a, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3afed09a, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3b0133af, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x403, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.txt", cAlternateFileName="")) returned 1 [0108.382] FindNextFileW (in: hFindFile=0x1437db8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cb68ebe, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3cb68ebe, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3cb68ebe, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.txt", cAlternateFileName="DOCUME~1.TXT")) returned 1 [0108.382] FindNextFileW (in: hFindFile=0x1437db8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e175bc4, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e175bc4, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e1c2ad1, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.txt", cAlternateFileName="DOWNLO~1.TXT")) returned 1 [0108.383] FindNextFileW (in: hFindFile=0x1437db8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e1e9159, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e1e9159, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e1e9159, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.txt", cAlternateFileName="")) returned 1 [0108.383] FindNextFileW (in: hFindFile=0x1437db8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cbb44de, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3cbb44de, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3de08412, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures.txt", cAlternateFileName="")) returned 1 [0108.383] FindNextFileW (in: hFindFile=0x1437db8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e090e81, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e090e81, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e090e81, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup.txt", cAlternateFileName="")) returned 1 [0108.383] FindNextFileW (in: hFindFile=0x1437db8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e090e81, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e090e81, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e090e81, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos.txt", cAlternateFileName="")) returned 1 [0108.383] FindNextFileW (in: hFindFile=0x1437db8, lpFindFileData=0x614f0e8 | out: lpFindFileData=0x614f0e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.383] FindClose (in: hFindFile=0x1437db8 | out: hFindFile=0x1437db8) returned 1 [0108.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f370) returned 1 [0108.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f37c) returned 1 [0108.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0108.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0", lpFilePart=0x0) returned 0x64 [0108.384] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3cc0099a, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3cc0099a, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437cb8 [0108.384] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3cc0099a, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3cc0099a, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.384] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3aa1d4a0, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e1e9159, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e1e9159, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dirs", cAlternateFileName="")) returned 1 [0108.384] FindNextFileW (in: hFindFile=0x1437cb8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3aa1d4a0, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3e1e9159, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3e1e9159, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dirs", cAlternateFileName="")) returned 0 [0108.384] FindClose (in: hFindFile=0x1437cb8 | out: hFindFile=0x1437cb8) returned 1 [0108.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0108.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0108.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f43c) returned 1 [0108.384] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab", nBufferLength=0x105, lpBuffer=0x614eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab", lpFilePart=0x0) returned 0x43 [0108.385] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\*", lpFindFileData=0x614f164 | out: lpFindFileData=0x614f164*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437938 [0108.385] FindNextFileW (in: hFindFile=0x1437938, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.385] FindNextFileW (in: hFindFile=0x1437938, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3cc0099a, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3cc0099a, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="a374bfdbdd1bc28c24c1762625e80fd0", cAlternateFileName="A374BF~1")) returned 1 [0108.385] FindNextFileW (in: hFindFile=0x1437938, lpFindFileData=0x614f170 | out: lpFindFileData=0x614f170*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3cc0099a, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3cc0099a, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="a374bfdbdd1bc28c24c1762625e80fd0", cAlternateFileName="A374BF~1")) returned 0 [0108.385] FindClose (in: hFindFile=0x1437938 | out: hFindFile=0x1437938) returned 1 [0108.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3f8) returned 1 [0108.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f404) returned 1 [0108.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f480) returned 1 [0108.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x614ef34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x22 [0108.386] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\*", lpFindFileData=0x614f1a8 | out: lpFindFileData=0x614f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437eb8 [0108.386] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.386] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de6fe60, ftCreationTime.dwHighDateTime=0x1d5ec13, ftLastAccessTime.dwLowDateTime=0xdf5811d0, ftLastAccessTime.dwHighDateTime=0x1d5e128, ftLastWriteTime.dwLowDateTime=0xdf5811d0, ftLastWriteTime.dwHighDateTime=0x1d5e128, nFileSizeHigh=0x0, nFileSizeLow=0x2ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10Vf1EPoIs106Znl.ppt", cAlternateFileName="10VF1E~1.PPT")) returned 1 [0108.386] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb88a7d0, ftCreationTime.dwHighDateTime=0x1d5ea58, ftLastAccessTime.dwLowDateTime=0x87d3fcf0, ftLastAccessTime.dwHighDateTime=0x1d5e1a8, ftLastWriteTime.dwLowDateTime=0x87d3fcf0, ftLastWriteTime.dwHighDateTime=0x1d5e1a8, nFileSizeHigh=0x0, nFileSizeLow=0x16858, dwReserved0=0x0, dwReserved1=0x0, cFileName="2MjZyqig3oCcGB0.jpg", cAlternateFileName="2MJZYQ~1.JPG")) returned 1 [0108.386] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3574ab5307973278a085288fd98393ab", cAlternateFileName="3574AB~1")) returned 1 [0108.386] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e82240, ftCreationTime.dwHighDateTime=0x1d5e4d6, ftLastAccessTime.dwLowDateTime=0xeed894a0, ftLastAccessTime.dwHighDateTime=0x1d5f0d1, ftLastWriteTime.dwLowDateTime=0xeed894a0, ftLastWriteTime.dwHighDateTime=0x1d5f0d1, nFileSizeHigh=0x0, nFileSizeLow=0x10e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="43Ywm6L.m4a", cAlternateFileName="")) returned 1 [0108.387] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd86d020, ftCreationTime.dwHighDateTime=0x1d5e59b, ftLastAccessTime.dwLowDateTime=0x367701f0, ftLastAccessTime.dwHighDateTime=0x1d5e6ac, ftLastWriteTime.dwLowDateTime=0x367701f0, ftLastWriteTime.dwHighDateTime=0x1d5e6ac, nFileSizeHigh=0x0, nFileSizeLow=0x12da5, dwReserved0=0x0, dwReserved1=0x0, cFileName="6zYd-Bak7Y4ZzOV3.ppt", cAlternateFileName="6ZYD-B~1.PPT")) returned 1 [0108.387] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x577b4b90, ftCreationTime.dwHighDateTime=0x1d5ee9a, ftLastAccessTime.dwLowDateTime=0x6e721540, ftLastAccessTime.dwHighDateTime=0x1d5e783, ftLastWriteTime.dwLowDateTime=0x6e721540, ftLastWriteTime.dwHighDateTime=0x1d5e783, nFileSizeHigh=0x0, nFileSizeLow=0xaf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="8EJssAsOdyFu6T9tyB0.mp4", cAlternateFileName="8EJSSA~1.MP4")) returned 1 [0108.387] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49b60e0, ftCreationTime.dwHighDateTime=0x1d5f01e, ftLastAccessTime.dwLowDateTime=0xa5c387d0, ftLastAccessTime.dwHighDateTime=0x1d5efbd, ftLastWriteTime.dwLowDateTime=0xa5c387d0, ftLastWriteTime.dwHighDateTime=0x1d5efbd, nFileSizeHigh=0x0, nFileSizeLow=0x77c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="aLDgijDyeQAvI.wav", cAlternateFileName="ALDGIJ~1.WAV")) returned 1 [0108.387] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa78c7040, ftCreationTime.dwHighDateTime=0x1d5e3f1, ftLastAccessTime.dwLowDateTime=0x56e77330, ftLastAccessTime.dwHighDateTime=0x1d5ee9e, ftLastWriteTime.dwLowDateTime=0x56e77330, ftLastWriteTime.dwHighDateTime=0x1d5ee9e, nFileSizeHigh=0x0, nFileSizeLow=0x9175, dwReserved0=0x0, dwReserved1=0x0, cFileName="beXctUMWvrqKAY1JWB.pps", cAlternateFileName="BEXCTU~1.PPS")) returned 1 [0108.387] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e7cf332, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0x6e7cf332, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0x6e7cf332, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bst6CD3.tmp", cAlternateFileName="")) returned 1 [0108.387] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b4680c, ftCreationTime.dwHighDateTime=0x1d5d815, ftLastAccessTime.dwLowDateTime=0x30b4680c, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0x30b4680c, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bst708C.tmp", cAlternateFileName="")) returned 1 [0108.387] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448649e5, ftCreationTime.dwHighDateTime=0x1d5e877, ftLastAccessTime.dwLowDateTime=0x448649e5, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x448649e5, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bst729F.tmp", cAlternateFileName="")) returned 1 [0108.388] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ef5aa3, ftCreationTime.dwHighDateTime=0x1d5e7c1, ftLastAccessTime.dwLowDateTime=0x10ef5aa3, ftLastAccessTime.dwHighDateTime=0x1d5e7c1, ftLastWriteTime.dwLowDateTime=0x10ef5aa3, ftLastWriteTime.dwHighDateTime=0x1d5e7c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bst76C6.tmp", cAlternateFileName="")) returned 1 [0108.388] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd39b90, ftCreationTime.dwHighDateTime=0x1d5ef83, ftLastAccessTime.dwLowDateTime=0x674e81f0, ftLastAccessTime.dwHighDateTime=0x1d5e73c, ftLastWriteTime.dwLowDateTime=0x674e81f0, ftLastWriteTime.dwHighDateTime=0x1d5e73c, nFileSizeHigh=0x0, nFileSizeLow=0x4f0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FNht.mp3", cAlternateFileName="")) returned 1 [0108.388] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76ffedf0, ftCreationTime.dwHighDateTime=0x1d5e77d, ftLastAccessTime.dwLowDateTime=0x21824c90, ftLastAccessTime.dwHighDateTime=0x1d5f0b2, ftLastWriteTime.dwLowDateTime=0x21824c90, ftLastWriteTime.dwHighDateTime=0x1d5f0b2, nFileSizeHigh=0x0, nFileSizeLow=0x17fa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gkgffEqx-uRXeC1F.png", cAlternateFileName="GKGFFE~1.PNG")) returned 1 [0108.388] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d8719e, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x35d8719e, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x35d8719e, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x30, dwReserved0=0x0, dwReserved1=0x0, cFileName="gpustats.bx", cAlternateFileName="")) returned 1 [0108.388] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54f03620, ftCreationTime.dwHighDateTime=0x1d5e421, ftLastAccessTime.dwLowDateTime=0x1cd07470, ftLastAccessTime.dwHighDateTime=0x1d5e616, ftLastWriteTime.dwLowDateTime=0x1cd07470, ftLastWriteTime.dwHighDateTime=0x1d5e616, nFileSizeHigh=0x0, nFileSizeLow=0x990, dwReserved0=0x0, dwReserved1=0x0, cFileName="GY3A6tJlKHhXsSnUKW.docx", cAlternateFileName="GY3A6T~1.DOC")) returned 1 [0108.388] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f210c20, ftCreationTime.dwHighDateTime=0x1d5ec61, ftLastAccessTime.dwLowDateTime=0xd3638550, ftLastAccessTime.dwHighDateTime=0x1d5eda1, ftLastWriteTime.dwLowDateTime=0xd3638550, ftLastWriteTime.dwHighDateTime=0x1d5eda1, nFileSizeHigh=0x0, nFileSizeLow=0x8b35, dwReserved0=0x0, dwReserved1=0x0, cFileName="h8UYCm.ots", cAlternateFileName="")) returned 1 [0108.388] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x537cac60, ftCreationTime.dwHighDateTime=0x1d5e5f7, ftLastAccessTime.dwLowDateTime=0x74bd0540, ftLastAccessTime.dwHighDateTime=0x1d5ebcf, ftLastWriteTime.dwLowDateTime=0x74bd0540, ftLastWriteTime.dwHighDateTime=0x1d5ebcf, nFileSizeHigh=0x0, nFileSizeLow=0x2881, dwReserved0=0x0, dwReserved1=0x0, cFileName="JkjH_pw5iZPRO5t5-.mkv", cAlternateFileName="JKJH_P~1.MKV")) returned 1 [0108.388] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986be410, ftCreationTime.dwHighDateTime=0x1d5e699, ftLastAccessTime.dwLowDateTime=0xee6fb410, ftLastAccessTime.dwHighDateTime=0x1d5ecc8, ftLastWriteTime.dwLowDateTime=0xee6fb410, ftLastWriteTime.dwHighDateTime=0x1d5ecc8, nFileSizeHigh=0x0, nFileSizeLow=0x18898, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQma0aupuu6.avi", cAlternateFileName="KQMA0A~1.AVI")) returned 1 [0108.389] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcff8400, ftCreationTime.dwHighDateTime=0x1d5e0f5, ftLastAccessTime.dwLowDateTime=0x6628aab0, ftLastAccessTime.dwHighDateTime=0x1d5e2ca, ftLastWriteTime.dwLowDateTime=0x6628aab0, ftLastWriteTime.dwHighDateTime=0x1d5e2ca, nFileSizeHigh=0x0, nFileSizeLow=0x8314, dwReserved0=0x0, dwReserved1=0x0, cFileName="lx1CQrmD_8o9jWYsOt4.mp4", cAlternateFileName="LX1CQR~1.MP4")) returned 1 [0108.389] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71df4a10, ftCreationTime.dwHighDateTime=0x1d5e8f8, ftLastAccessTime.dwLowDateTime=0xcd38ea40, ftLastAccessTime.dwHighDateTime=0x1d5efc6, ftLastWriteTime.dwLowDateTime=0xcd38ea40, ftLastWriteTime.dwHighDateTime=0x1d5efc6, nFileSizeHigh=0x0, nFileSizeLow=0xa4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mp7lg0cmk6V.m4a", cAlternateFileName="MP7LG0~1.M4A")) returned 1 [0108.389] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa24c4140, ftCreationTime.dwHighDateTime=0x1d5e73f, ftLastAccessTime.dwLowDateTime=0x296cd030, ftLastAccessTime.dwHighDateTime=0x1d5e773, ftLastWriteTime.dwLowDateTime=0x296cd030, ftLastWriteTime.dwHighDateTime=0x1d5e773, nFileSizeHigh=0x0, nFileSizeLow=0x149a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="nF8AzRSnqMiXbQVRV.flv", cAlternateFileName="NF8AZR~1.FLV")) returned 1 [0108.389] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eedc80, ftCreationTime.dwHighDateTime=0x1d5f043, ftLastAccessTime.dwLowDateTime=0x8c549b40, ftLastAccessTime.dwHighDateTime=0x1d5ee5a, ftLastWriteTime.dwLowDateTime=0x8c549b40, ftLastWriteTime.dwHighDateTime=0x1d5ee5a, nFileSizeHigh=0x0, nFileSizeLow=0x5868, dwReserved0=0x0, dwReserved1=0x0, cFileName="NobRG5ZK.png", cAlternateFileName="")) returned 1 [0108.389] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedadd030, ftCreationTime.dwHighDateTime=0x1d5e2ef, ftLastAccessTime.dwLowDateTime=0x2b7fe480, ftLastAccessTime.dwHighDateTime=0x1d5f041, ftLastWriteTime.dwLowDateTime=0x2b7fe480, ftLastWriteTime.dwHighDateTime=0x1d5f041, nFileSizeHigh=0x0, nFileSizeLow=0xcd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCwJuujDF5R6.mkv", cAlternateFileName="OCWJUU~1.MKV")) returned 1 [0108.389] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cebd900, ftCreationTime.dwHighDateTime=0x1d5ed4c, ftLastAccessTime.dwLowDateTime=0x1d14a770, ftLastAccessTime.dwHighDateTime=0x1d5e7d9, ftLastWriteTime.dwLowDateTime=0x1d14a770, ftLastWriteTime.dwHighDateTime=0x1d5e7d9, nFileSizeHigh=0x0, nFileSizeLow=0xf802, dwReserved0=0x0, dwReserved1=0x0, cFileName="ozGt7_.mp4", cAlternateFileName="")) returned 1 [0108.390] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbbf1880, ftCreationTime.dwHighDateTime=0x1d5e11a, ftLastAccessTime.dwLowDateTime=0xdd0bbdc0, ftLastAccessTime.dwHighDateTime=0x1d5e3ce, ftLastWriteTime.dwLowDateTime=0xdd0bbdc0, ftLastWriteTime.dwHighDateTime=0x1d5e3ce, nFileSizeHigh=0x0, nFileSizeLow=0x3a5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PbWnMg7QXb8bPl1HP_Ov.mp3", cAlternateFileName="PBWNMG~1.MP3")) returned 1 [0108.390] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba64280, ftCreationTime.dwHighDateTime=0x1d5eee6, ftLastAccessTime.dwLowDateTime=0x9cef9250, ftLastAccessTime.dwHighDateTime=0x1d5ed3a, ftLastWriteTime.dwLowDateTime=0x9cef9250, ftLastWriteTime.dwHighDateTime=0x1d5ed3a, nFileSizeHigh=0x0, nFileSizeLow=0x146de, dwReserved0=0x0, dwReserved1=0x0, cFileName="pfHOeZc.docx", cAlternateFileName="PFHOEZ~1.DOC")) returned 1 [0108.390] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eb0f370, ftCreationTime.dwHighDateTime=0x1d5e423, ftLastAccessTime.dwLowDateTime=0x963371c0, ftLastAccessTime.dwHighDateTime=0x1d5e600, ftLastWriteTime.dwLowDateTime=0x963371c0, ftLastWriteTime.dwHighDateTime=0x1d5e600, nFileSizeHigh=0x0, nFileSizeLow=0xf019, dwReserved0=0x0, dwReserved1=0x0, cFileName="Px_d9ot3nQrRuOLYXT.avi", cAlternateFileName="PX_D9O~1.AVI")) returned 1 [0108.390] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd89f6350, ftCreationTime.dwHighDateTime=0x1d5f04d, ftLastAccessTime.dwLowDateTime=0x54757fc0, ftLastAccessTime.dwHighDateTime=0x1d5eae3, ftLastWriteTime.dwLowDateTime=0x54757fc0, ftLastWriteTime.dwHighDateTime=0x1d5eae3, nFileSizeHigh=0x0, nFileSizeLow=0x135b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="qv9XKVO3kTMjqYRwFh_.jpg", cAlternateFileName="QV9XKV~1.JPG")) returned 1 [0108.390] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x425df610, ftCreationTime.dwHighDateTime=0x1d5e1d7, ftLastAccessTime.dwLowDateTime=0x994381a0, ftLastAccessTime.dwHighDateTime=0x1d5eac6, ftLastWriteTime.dwLowDateTime=0x994381a0, ftLastWriteTime.dwHighDateTime=0x1d5eac6, nFileSizeHigh=0x0, nFileSizeLow=0x824a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ri9UAnANK_y_.mkv", cAlternateFileName="RI9UAN~1.MKV")) returned 1 [0108.390] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f575360, ftCreationTime.dwHighDateTime=0x1d5e86d, ftLastAccessTime.dwLowDateTime=0x34b0d710, ftLastAccessTime.dwHighDateTime=0x1d5efa3, ftLastWriteTime.dwLowDateTime=0x34b0d710, ftLastWriteTime.dwHighDateTime=0x1d5efa3, nFileSizeHigh=0x0, nFileSizeLow=0xc03, dwReserved0=0x0, dwReserved1=0x0, cFileName="r_tDo0DyI9ooM.ppt", cAlternateFileName="R_TDO0~1.PPT")) returned 1 [0108.390] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd942ec0, ftCreationTime.dwHighDateTime=0x1d5e99a, ftLastAccessTime.dwLowDateTime=0xa07732c0, ftLastAccessTime.dwHighDateTime=0x1d5f0b9, ftLastWriteTime.dwLowDateTime=0xa07732c0, ftLastWriteTime.dwHighDateTime=0x1d5f0b9, nFileSizeHigh=0x0, nFileSizeLow=0x17a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="TofySMrld9l.jpg", cAlternateFileName="TOFYSM~1.JPG")) returned 1 [0108.391] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x265033c0, ftCreationTime.dwHighDateTime=0x1d5e119, ftLastAccessTime.dwLowDateTime=0xba534f50, ftLastAccessTime.dwHighDateTime=0x1d5efc7, ftLastWriteTime.dwLowDateTime=0xba534f50, ftLastWriteTime.dwHighDateTime=0x1d5efc7, nFileSizeHigh=0x0, nFileSizeLow=0x162e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TSAFsL1wGzi7rtFz5lwO.mkv", cAlternateFileName="TSAFSL~1.MKV")) returned 1 [0108.391] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa441acd0, ftCreationTime.dwHighDateTime=0x1d5f0fc, ftLastAccessTime.dwLowDateTime=0xbd9ccba0, ftLastAccessTime.dwHighDateTime=0x1d5ed6f, ftLastWriteTime.dwLowDateTime=0xbd9ccba0, ftLastWriteTime.dwHighDateTime=0x1d5ed6f, nFileSizeHigh=0x0, nFileSizeLow=0xd519, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uqwwf50AcQgQDsIHZ.xls", cAlternateFileName="UQWWF5~1.XLS")) returned 1 [0108.391] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfef710e0, ftCreationTime.dwHighDateTime=0x1d5e349, ftLastAccessTime.dwLowDateTime=0x73ac8210, ftLastAccessTime.dwHighDateTime=0x1d5e8ce, ftLastWriteTime.dwLowDateTime=0x73ac8210, ftLastWriteTime.dwHighDateTime=0x1d5e8ce, nFileSizeHigh=0x0, nFileSizeLow=0x8129, dwReserved0=0x0, dwReserved1=0x0, cFileName="uxmYX.avi", cAlternateFileName="")) returned 1 [0108.391] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27271a80, ftCreationTime.dwHighDateTime=0x1d5efb9, ftLastAccessTime.dwLowDateTime=0x715ef890, ftLastAccessTime.dwHighDateTime=0x1d5e33c, ftLastWriteTime.dwLowDateTime=0x715ef890, ftLastWriteTime.dwHighDateTime=0x1d5e33c, nFileSizeHigh=0x0, nFileSizeLow=0x130a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Va9_j_x76.png", cAlternateFileName="VA9_J_~1.PNG")) returned 1 [0108.391] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7434ce80, ftCreationTime.dwHighDateTime=0x1d5ef69, ftLastAccessTime.dwLowDateTime=0x3b38df10, ftLastAccessTime.dwHighDateTime=0x1d5e986, ftLastWriteTime.dwLowDateTime=0x3b38df10, ftLastWriteTime.dwHighDateTime=0x1d5e986, nFileSizeHigh=0x0, nFileSizeLow=0x1811c, dwReserved0=0x0, dwReserved1=0x0, cFileName="vfn813oxdAjguI1K.gif", cAlternateFileName="VFN813~1.GIF")) returned 1 [0108.391] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b932820, ftCreationTime.dwHighDateTime=0x1d5ee01, ftLastAccessTime.dwLowDateTime=0x761a4730, ftLastAccessTime.dwHighDateTime=0x1d5e8a1, ftLastWriteTime.dwLowDateTime=0x761a4730, ftLastWriteTime.dwHighDateTime=0x1d5e8a1, nFileSizeHigh=0x0, nFileSizeLow=0x661, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vhuy5VBijQCGq.gif", cAlternateFileName="VHUY5V~1.GIF")) returned 1 [0108.391] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x201f2c0, ftCreationTime.dwHighDateTime=0x1d5eb54, ftLastAccessTime.dwLowDateTime=0x73e9f070, ftLastAccessTime.dwHighDateTime=0x1d5f0f6, ftLastWriteTime.dwLowDateTime=0x73e9f070, ftLastWriteTime.dwHighDateTime=0x1d5f0f6, nFileSizeHigh=0x0, nFileSizeLow=0x119ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="W2Mc-siZcB.pdf", cAlternateFileName="W2MC-S~1.PDF")) returned 1 [0108.391] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91af9690, ftCreationTime.dwHighDateTime=0x1d5ecbf, ftLastAccessTime.dwLowDateTime=0x6cc86710, ftLastAccessTime.dwHighDateTime=0x1d5e4c9, ftLastWriteTime.dwLowDateTime=0x6cc86710, ftLastWriteTime.dwHighDateTime=0x1d5e4c9, nFileSizeHigh=0x0, nFileSizeLow=0xc78f, dwReserved0=0x0, dwReserved1=0x0, cFileName="x1i_EfJvH95.png", cAlternateFileName="X1I_EF~1.PNG")) returned 1 [0108.392] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424b34a0, ftCreationTime.dwHighDateTime=0x1d5efbd, ftLastAccessTime.dwLowDateTime=0xfa42d40, ftLastAccessTime.dwHighDateTime=0x1d5eb26, ftLastWriteTime.dwLowDateTime=0xfa42d40, ftLastWriteTime.dwHighDateTime=0x1d5eb26, nFileSizeHigh=0x0, nFileSizeLow=0x16eef, dwReserved0=0x0, dwReserved1=0x0, cFileName="XIlulaLmMNU5sknrh.flv", cAlternateFileName="XILULA~1.FLV")) returned 1 [0108.392] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb016aab0, ftCreationTime.dwHighDateTime=0x1d5ea26, ftLastAccessTime.dwLowDateTime=0xfbe1dbe0, ftLastAccessTime.dwHighDateTime=0x1d5e2ec, ftLastWriteTime.dwLowDateTime=0xfbe1dbe0, ftLastWriteTime.dwHighDateTime=0x1d5e2ec, nFileSizeHigh=0x0, nFileSizeLow=0xce45, dwReserved0=0x0, dwReserved1=0x0, cFileName="xV9WvJI3hUWxk.xlsx", cAlternateFileName="XV9WVJ~1.XLS")) returned 1 [0108.392] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e50620, ftCreationTime.dwHighDateTime=0x1d5e96c, ftLastAccessTime.dwLowDateTime=0xf2ba6bb0, ftLastAccessTime.dwHighDateTime=0x1d5e439, ftLastWriteTime.dwLowDateTime=0xf2ba6bb0, ftLastWriteTime.dwHighDateTime=0x1d5e439, nFileSizeHigh=0x0, nFileSizeLow=0x136e, dwReserved0=0x0, dwReserved1=0x0, cFileName="XWE5rL3S885ztGm3V4.mp3", cAlternateFileName="XWE5RL~1.MP3")) returned 1 [0108.392] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2021c570, ftCreationTime.dwHighDateTime=0x1d5ebc0, ftLastAccessTime.dwLowDateTime=0x7be94e50, ftLastAccessTime.dwHighDateTime=0x1d5ec1a, ftLastWriteTime.dwLowDateTime=0x7be94e50, ftLastWriteTime.dwHighDateTime=0x1d5ec1a, nFileSizeHigh=0x0, nFileSizeLow=0x120ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="YYtpQOg.pdf", cAlternateFileName="")) returned 1 [0108.392] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d057710, ftCreationTime.dwHighDateTime=0x1d5ee67, ftLastAccessTime.dwLowDateTime=0xae3cb2b0, ftLastAccessTime.dwHighDateTime=0x1d5e1a3, ftLastWriteTime.dwLowDateTime=0xae3cb2b0, ftLastWriteTime.dwHighDateTime=0x1d5e1a3, nFileSizeHigh=0x0, nFileSizeLow=0xc719, dwReserved0=0x0, dwReserved1=0x0, cFileName="zZklAlUt91Yv.bmp", cAlternateFileName="ZZKLAL~1.BMP")) returned 1 [0108.392] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfbf08e, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xbcfbf08e, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xbcfbf08e, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{53C99438-1FFA-461B-9DDB-BE90937EA550} - OProcSessId.dat", cAlternateFileName="{53C99~1.DAT")) returned 1 [0108.392] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d808c6b, ftCreationTime.dwHighDateTime=0x1d5e877, ftLastAccessTime.dwLowDateTime=0x5d808c6b, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5d808c6b, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7D25B8A5-1128-4710-9224-347694366412} - OProcSessId.dat", cAlternateFileName="{7D25B~1.DAT")) returned 1 [0108.393] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5a04bc, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xae5a04bc, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xae5a04bc, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} - OProcSessId.dat", cAlternateFileName="{BE262~1.DAT")) returned 1 [0108.393] FindNextFileW (in: hFindFile=0x1437eb8, lpFindFileData=0x614f1b4 | out: lpFindFileData=0x614f1b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.393] FindClose (in: hFindFile=0x1437eb8 | out: hFindFile=0x1437eb8) returned 1 [0108.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f43c) returned 1 [0108.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f448) returned 1 [0108.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x614ef9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x22 [0108.530] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Temp.txt", nBufferLength=0x105, lpBuffer=0x614ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Temp.txt", lpFilePart=0x0) returned 0x72 [0108.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f39c) returned 1 [0108.530] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Dirs\\Temp.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\dirs\\temp.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x638 [0108.530] GetFileType (hFile=0x638) returned 0x1 [0108.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f398) returned 1 [0108.530] GetFileType (hFile=0x638) returned 0x1 [0108.531] WriteFile (in: hFile=0x638, lpBuffer=0x3097c24*, nNumberOfBytesToWrite=0x4e6, lpNumberOfBytesWritten=0x614f418, lpOverlapped=0x0 | out: lpBuffer=0x3097c24*, lpNumberOfBytesWritten=0x614f418*=0x4e6, lpOverlapped=0x0) returned 1 [0108.532] CloseHandle (hObject=0x638) returned 1 [0108.534] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0110.036] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0110.290] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0110.486] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0110.658] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0110.839] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0110.917] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.000] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.057] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.120] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.260] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.322] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.364] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.730] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.326] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.346] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.349] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.359] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.365] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.367] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.372] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.973] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.002] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.035] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.418] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.466] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.495] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.539] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.671] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.733] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.793] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.888] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0120.009] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0120.068] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0120.089] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0120.308] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.331] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.368] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.396] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.400] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.405] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.432] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.434] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.435] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.437] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.441] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.448] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.515] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.595] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.523] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0128.676] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f4bc) returned 1 [0129.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x614ef70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x38 [0129.476] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x614f1e4 | out: lpFindFileData=0x614f1e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0129.477] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f1f0 | out: lpFindFileData=0x614f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.477] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f1f0 | out: lpFindFileData=0x614f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6236fa1e, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0x6236fa1e, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 1 [0129.477] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f1f0 | out: lpFindFileData=0x614f1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.477] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0129.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f478) returned 1 [0129.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f484) returned 1 [0129.489] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x614dbd0, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0129.489] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x614dbd0, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0129.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f408) returned 1 [0129.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x614eebc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local", lpFilePart=0x0) returned 0x1d [0129.843] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\*", lpFindFileData=0x614f130 | out: lpFindFileData=0x614f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb6f6a4d1, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb6f6a4d1, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437738 [0129.843] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb6f6a4d1, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb6f6a4d1, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.843] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveSync", cAlternateFileName="ACTIVE~1")) returned 1 [0129.843] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEF", cAlternateFileName="")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectedDevicesPlatform", cAlternateFileName="CONNEC~1")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a3bd622, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0129.845] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4a3b706e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4a3b706e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd2e85042, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x13441, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0129.845] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0129.845] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1 [0129.845] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0129.845] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0129.846] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf9e1b08, ftCreationTime.dwHighDateTime=0x1d32734, ftLastAccessTime.dwLowDateTime=0xd2f40fba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdf9e1b08, ftLastWriteTime.dwHighDateTime=0x1d32734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeerDistRepub", cAlternateFileName="PEERDI~1")) returned 1 [0129.846] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3e09841, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd2f421af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe3e09841, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publishers", cAlternateFileName="PUBLIS~1")) returned 1 [0129.846] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6f6a4d1, ftCreationTime.dwHighDateTime=0x1d5d815, ftLastAccessTime.dwLowDateTime=0xb6f6a4d1, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb6f6a4d1, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x1db5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resmon.ResmonCfg", cAlternateFileName="RESMON~1.RES")) returned 1 [0129.846] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x39d98f6f, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x39d98f6f, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0129.846] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0129.846] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TileDataLayer", cAlternateFileName="TILEDA~1")) returned 1 [0129.847] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0129.847] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0129.848] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.848] FindClose (in: hFindFile=0x1437738 | out: hFindFile=0x1437738) returned 1 [0129.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c4) returned 1 [0129.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3d0) returned 1 [0129.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x28 [0129.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0129.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x28 [0129.848] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0129.849] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.849] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0129.849] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0129.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0129.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0129.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0129.849] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x28 [0129.849] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436f78 [0129.850] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.850] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0129.850] FindClose (in: hFindFile=0x1436f78 | out: hFindFile=0x1436f78) returned 1 [0129.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0129.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0129.850] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x23 [0129.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0129.850] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x23 [0129.850] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374b8 [0129.851] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.852] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0129.852] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroCef", cAlternateFileName="")) returned 1 [0129.852] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0129.852] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 0 [0129.852] FindClose (in: hFindFile=0x14374b8 | out: hFindFile=0x14374b8) returned 1 [0129.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0129.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0129.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0129.853] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x23 [0129.853] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0129.853] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.854] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0129.854] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroCef", cAlternateFileName="")) returned 1 [0129.854] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0129.854] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.854] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0129.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0129.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0129.854] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2b [0129.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0129.854] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2b [0129.855] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0129.855] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.855] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0129.855] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0129.855] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0129.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0129.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0129.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0129.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2b [0129.856] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436f78 [0129.856] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.856] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0129.856] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.856] FindClose (in: hFindFile=0x1436f78 | out: hFindFile=0x1436f78) returned 1 [0129.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0129.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0129.857] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x2e [0129.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0129.857] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x2e [0129.857] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370f8 [0129.859] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.860] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt15.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0129.860] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x24c57, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt15.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0129.860] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0129.860] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b7e48a8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7e48a8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x63727ff2, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr.dat", cAlternateFileName="ICONCA~1.DAT")) returned 1 [0129.860] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8995a87, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8995a87, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8995a87, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1aaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr65536.dat", cAlternateFileName="ICONCA~2.DAT")) returned 1 [0129.860] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76642b27, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76642b27, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe8aecfcb, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0129.861] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolsSearchCacheRdr", cAlternateFileName="TOOLSS~1")) returned 1 [0129.861] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x59d13ceb, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf76f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0129.861] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.861] FindClose (in: hFindFile=0x14370f8 | out: hFindFile=0x14370f8) returned 1 [0129.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0129.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0129.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0129.862] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x2e [0129.862] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0129.863] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.863] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt15.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0129.864] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x24c57, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt15.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0129.864] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0129.864] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b7e48a8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7e48a8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x63727ff2, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr.dat", cAlternateFileName="ICONCA~1.DAT")) returned 1 [0129.864] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8995a87, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8995a87, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8995a87, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1aaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr65536.dat", cAlternateFileName="ICONCA~2.DAT")) returned 1 [0129.865] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76642b27, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76642b27, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe8aecfcb, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0129.865] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolsSearchCacheRdr", cAlternateFileName="TOOLSS~1")) returned 1 [0129.865] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x59d13ceb, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf76f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0129.865] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x59d13ceb, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf76f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 0 [0129.865] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0129.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0129.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0129.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", lpFilePart=0x0) returned 0x34 [0129.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0129.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", lpFilePart=0x0) returned 0x34 [0129.867] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437578 [0130.216] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.216] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x255e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt15.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0130.216] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.216] FindClose (in: hFindFile=0x1437578 | out: hFindFile=0x1437578) returned 1 [0130.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", lpFilePart=0x0) returned 0x42 [0130.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.217] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", lpFilePart=0x0) returned 0x42 [0130.217] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0130.217] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.217] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.217] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0130.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.218] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x2b [0130.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.218] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x2b [0130.218] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0130.219] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.219] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0130.219] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0130.219] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0130.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.219] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x2b [0130.220] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436f78 [0130.220] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.221] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0130.221] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.222] FindClose (in: hFindFile=0x1436f78 | out: hFindFile=0x1436f78) returned 1 [0130.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.222] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x2e [0130.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0130.222] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x2e [0130.222] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0130.223] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.224] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0130.224] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 0 [0130.224] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0130.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0130.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0130.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0130.225] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x2e [0130.225] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0130.225] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.225] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0130.225] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.225] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0130.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0130.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0130.226] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", lpFilePart=0x0) returned 0x36 [0130.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.226] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", lpFilePart=0x0) returned 0x36 [0130.227] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xd6a51047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374f8 [0130.228] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xd6a51047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.228] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a51047, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd780dd5d, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0130.228] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x777b22bc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookie", cAlternateFileName="")) returned 1 [0130.229] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x777b22bc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookie", cAlternateFileName="")) returned 0 [0130.229] FindClose (in: hFindFile=0x14374f8 | out: hFindFile=0x14374f8) returned 1 [0130.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.229] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x29 [0130.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.242] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x29 [0130.243] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437738 [0130.243] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.243] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73de0392, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73e065fe, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0130.243] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0130.244] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0130.244] FindClose (in: hFindFile=0x1437738 | out: hFindFile=0x1437738) returned 1 [0130.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.244] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x29 [0130.244] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0130.244] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.244] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73de0392, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73e065fe, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0130.245] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0130.245] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.245] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0130.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.245] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x32 [0130.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0130.245] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x32 [0130.245] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0130.246] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.247] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d479e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d479e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d479e6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0130.247] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0130.247] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.247] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0130.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0130.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0130.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0130.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x32 [0130.251] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0130.252] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.252] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d479e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d479e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d479e6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0130.252] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0130.252] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 0 [0130.253] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0130.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0130.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0130.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x2e [0130.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0130.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x2e [0130.253] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3bc) returned 1 [0130.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x21 [0130.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0130.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x21 [0130.256] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374b8 [0130.256] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.257] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0130.257] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0130.257] FindClose (in: hFindFile=0x14374b8 | out: hFindFile=0x14374b8) returned 1 [0130.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0130.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0130.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0130.257] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x21 [0130.257] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0130.257] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.258] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0130.258] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.258] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0130.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0130.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0130.258] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x2b [0130.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.258] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x2b [0130.258] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437738 [0130.259] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.259] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0130.259] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0130.260] FindClose (in: hFindFile=0x1437738 | out: hFindFile=0x1437738) returned 1 [0130.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x2b [0130.260] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0130.260] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.260] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0130.260] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.261] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0130.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x38 [0130.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0130.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x38 [0130.261] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374b8 [0130.261] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.261] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.261] FindClose (in: hFindFile=0x14374b8 | out: hFindFile=0x14374b8) returned 1 [0130.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0130.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0130.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0130.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x38 [0130.262] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370f8 [0130.262] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.262] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.262] FindClose (in: hFindFile=0x14370f8 | out: hFindFile=0x14370f8) returned 1 [0130.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0130.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0130.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x23 [0130.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0130.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x23 [0130.263] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436f78 [0130.263] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.263] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0130.263] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1 [0130.263] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xc12eebd3, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1 [0130.264] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xc12eebd3, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 0 [0130.264] FindClose (in: hFindFile=0x1436f78 | out: hFindFile=0x1436f78) returned 1 [0130.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0130.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0130.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0130.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x23 [0130.264] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0130.264] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.264] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0130.265] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1 [0130.265] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xc12eebd3, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1 [0130.265] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.265] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0130.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0130.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0130.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x28 [0130.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x28 [0130.265] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0130.266] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.266] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 1 [0130.267] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.267] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0130.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.267] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x28 [0130.267] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0130.267] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.267] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 1 [0130.267] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 0 [0130.268] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0130.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.268] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x2c [0130.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.268] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x2c [0130.271] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0130.271] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.272] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data", cAlternateFileName="")) returned 1 [0130.272] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data", cAlternateFileName="")) returned 0 [0130.272] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0130.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x2c [0130.272] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0130.272] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.272] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data", cAlternateFileName="")) returned 1 [0130.273] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.273] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0130.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", lpFilePart=0x0) returned 0x31 [0130.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0130.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", lpFilePart=0x0) returned 0x31 [0130.273] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0130.379] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.379] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92842523, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92842523, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe5af4421, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AggregateCache.uca", cAlternateFileName="AGGREG~1.UCA")) returned 1 [0130.379] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.380] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0130.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0130.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0130.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0130.380] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", lpFilePart=0x0) returned 0x31 [0130.380] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437238 [0130.380] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.380] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92842523, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92842523, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe5af4421, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AggregateCache.uca", cAlternateFileName="AGGREG~1.UCA")) returned 1 [0130.381] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92842523, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92842523, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe5af4421, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AggregateCache.uca", cAlternateFileName="AGGREG~1.UCA")) returned 0 [0130.381] FindClose (in: hFindFile=0x1437238 | out: hFindFile=0x1437238) returned 1 [0130.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0130.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0130.381] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x2e [0130.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.381] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x2e [0130.381] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x1a672446, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0130.384] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x1a672446, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.384] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfe5114, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6bfe5114, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1a541366, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.jfm", cAlternateFileName="")) returned 1 [0130.384] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46f4d81c, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46f4d81c, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x1a5b3b2e, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xd80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.vol", cAlternateFileName="")) returned 1 [0130.384] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c293b35, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c293b35, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc120a166, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jcp", cAlternateFileName="")) returned 1 [0130.384] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c1163b2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1a4363d1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jtx", cAlternateFileName="")) returned 1 [0130.384] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1 [0130.384] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00002.jrs", cAlternateFileName="USSRES~2.JRS")) returned 1 [0130.385] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6c221427, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.jtx", cAlternateFileName="")) returned 1 [0130.385] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.385] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0130.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x2e [0130.386] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x1a672446, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374f8 [0130.387] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x1a672446, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.387] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfe5114, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6bfe5114, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1a541366, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.jfm", cAlternateFileName="")) returned 1 [0130.387] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46f4d81c, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46f4d81c, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x1a5b3b2e, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xd80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.vol", cAlternateFileName="")) returned 1 [0130.387] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c293b35, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c293b35, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc120a166, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jcp", cAlternateFileName="")) returned 1 [0130.387] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c1163b2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1a4363d1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jtx", cAlternateFileName="")) returned 1 [0130.388] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1 [0130.388] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00002.jrs", cAlternateFileName="USSRES~2.JRS")) returned 1 [0130.388] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6c221427, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.jtx", cAlternateFileName="")) returned 1 [0130.388] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6c221427, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.jtx", cAlternateFileName="")) returned 0 [0130.388] FindClose (in: hFindFile=0x14374f8 | out: hFindFile=0x14374f8) returned 1 [0130.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", lpFilePart=0x0) returned 0x36 [0130.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0130.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", lpFilePart=0x0) returned 0x36 [0130.389] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0130.390] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.390] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x435d76fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDPGlobalSettings.cdp", cAlternateFileName="CDPGLO~1.CDP")) returned 1 [0130.390] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.390] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0130.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0130.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0130.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0130.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", lpFilePart=0x0) returned 0x36 [0130.390] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437478 [0130.391] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.391] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x435d76fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDPGlobalSettings.cdp", cAlternateFileName="CDPGLO~1.CDP")) returned 1 [0130.391] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x435d76fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDPGlobalSettings.cdp", cAlternateFileName="CDPGLO~1.CDP")) returned 0 [0130.391] FindClose (in: hFindFile=0x1437478 | out: hFindFile=0x1437478) returned 1 [0130.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0130.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0130.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x24 [0130.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0130.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x24 [0130.391] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7e3bdb64, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0130.392] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7e3bdb64, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.392] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0130.392] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0130.392] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0 [0130.392] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0130.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0130.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0130.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0130.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x24 [0130.393] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7e3bdb64, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0130.393] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7e3bdb64, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.393] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0130.393] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0130.394] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.394] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0130.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0130.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0130.394] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x2b [0130.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.394] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x2b [0130.394] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437078 [0130.394] FindNextFileW (in: hFindFile=0x1437078, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.395] FindNextFileW (in: hFindFile=0x1437078, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa850ed2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0130.395] FindNextFileW (in: hFindFile=0x1437078, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa850ed2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0130.395] FindClose (in: hFindFile=0x1437078 | out: hFindFile=0x1437078) returned 1 [0130.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.395] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x2b [0130.395] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437578 [0130.395] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.396] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa850ed2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0130.396] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.396] FindClose (in: hFindFile=0x1437578 | out: hFindFile=0x1437578) returned 1 [0130.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.396] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x35 [0130.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0130.396] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x35 [0130.396] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfaa1ab04, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0130.397] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfaa1ab04, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.397] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0130.397] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0130.397] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a8a90d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe6ef52bb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe6f1b526, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashpadMetrics-active.pma", cAlternateFileName="CRASHP~2.PMA")) returned 1 [0130.397] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0130.397] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0130.397] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5113f4c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0130.398] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b9a7a7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa7de7b5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa804a17, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x12408, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0130.398] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0130.398] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0130.398] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0130.398] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing", cAlternateFileName="SAFEBR~1")) returned 1 [0130.398] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0130.399] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Subresource Filter", cAlternateFileName="SUBRES~1")) returned 1 [0130.399] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0130.399] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0130.399] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0130.399] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0130.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0130.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0130.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0130.399] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x35 [0130.400] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfaa1ab04, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0130.400] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfaa1ab04, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.400] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0130.400] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0130.400] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a8a90d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe6ef52bb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe6f1b526, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashpadMetrics-active.pma", cAlternateFileName="CRASHP~2.PMA")) returned 1 [0130.400] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0130.401] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0130.401] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5113f4c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0130.401] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b9a7a7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa7de7b5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa804a17, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x12408, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0130.401] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0130.401] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0130.401] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0130.401] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing", cAlternateFileName="SAFEBR~1")) returned 1 [0130.401] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0130.402] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Subresource Filter", cAlternateFileName="SUBRES~1")) returned 1 [0130.402] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0130.402] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0130.402] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.402] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0130.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0130.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0130.402] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x4d [0130.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.402] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x4d [0130.402] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0130.520] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.520] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.520] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0130.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.520] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x3e [0130.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.521] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x3e [0130.521] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0130.521] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.521] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1 [0130.521] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1 [0130.521] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xc3c501de, ftLastWriteTime.dwHighDateTime=0x1d327e6, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0130.522] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.522] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0130.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.522] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x3d [0130.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.522] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x3d [0130.522] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0130.522] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.524] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172d381, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x517321bc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0130.524] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295d523, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295d523, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa98218f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0130.524] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295fc2f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295fc2f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa9ce7a0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0130.524] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8be630f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa6610ba, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x212, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1 [0130.524] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776f89b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa7b85d6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa7b85d6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1 [0130.524] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5179d880, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe76dafa5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe76dafa5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1 [0130.525] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52964a42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8bc8e63, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8bc8e63, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~2")) returned 1 [0130.525] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeb6ec148, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb6ec148, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~3")) returned 1 [0130.525] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf9458ec6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf9458ec6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0130.525] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242d194, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242d194, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x527b211b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1 [0130.525] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242f8b3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242f8b3, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x529538f7, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1 [0130.526] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5179d880, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0130.526] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5234a080, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0130.526] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa82ac98, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x6, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1 [0130.526] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x523d5309, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1 [0130.526] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296986b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5753349f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Session", cAlternateFileName="LASTSE~1")) returned 1 [0130.526] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776f89b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5776f89b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Tabs", cAlternateFileName="LASTTA~1")) returned 1 [0130.527] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead47a83, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1 [0130.527] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb024218, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb024218, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1 [0130.527] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52319328, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52319328, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1 [0130.527] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5231ba4e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5231ba4e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe761c3cc, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1 [0130.527] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5292eec7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5292eec7, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b5f051, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1 [0130.527] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529315f0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x529315f0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53d9f3c2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1 [0130.527] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54135456, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x54135456, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xec432c10, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1 [0130.528] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54135456, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x54135456, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xec45ead4, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1 [0130.528] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c545a2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa792330, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa7b85d6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x206e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1 [0130.528] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5157d0ff, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5157d0ff, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5397926d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1 [0130.528] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517348e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517348e4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x539e223d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1 [0130.528] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebab07e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xebab07e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xebd41496, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1 [0130.528] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebab2f0c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xebab2f0c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xebd83378, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1 [0130.529] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5706285f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeeb01e7d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeeb01e7d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x8617, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1 [0130.529] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52601e23, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52601e23, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe774d6a2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1 [0130.529] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52601e23, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52601e23, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe7979194, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1 [0130.529] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Data", cAlternateFileName="SYNCDA~1")) returned 1 [0130.529] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb375cbe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb375cbe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1 [0130.529] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe75cff11, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0130.530] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x52c6a9d7, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1 [0130.530] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5118b971, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5118b971, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x52c99054, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1 [0130.530] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf148b749, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xf148b749, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf148b749, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1 [0130.530] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aedbdc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52aedbdc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1 [0130.530] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56cf52f5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56cf52f5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1 [0130.530] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x51b5f84c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1 [0130.531] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5221db78, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1 [0130.531] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.531] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0130.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.531] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x46 [0130.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.531] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x46 [0130.531] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0130.532] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.532] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.532] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0130.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.533] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x42 [0130.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.533] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x42 [0130.533] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0130.533] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.533] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.534] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0130.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.534] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x41 [0130.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.534] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x41 [0130.534] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437578 [0130.535] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.535] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.535] FindClose (in: hFindFile=0x1437578 | out: hFindFile=0x1437578) returned 1 [0130.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x3b [0130.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x3b [0130.536] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0130.536] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.536] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.536] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0130.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", lpFilePart=0x0) returned 0x43 [0130.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", lpFilePart=0x0) returned 0x43 [0130.537] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437578 [0130.537] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.537] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.537] FindClose (in: hFindFile=0x1437578 | out: hFindFile=0x1437578) returned 1 [0130.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.538] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x47 [0130.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.538] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x47 [0130.538] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437238 [0130.539] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.539] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.539] FindClose (in: hFindFile=0x1437238 | out: hFindFile=0x1437238) returned 1 [0130.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.539] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", lpFilePart=0x0) returned 0x48 [0130.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.539] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", lpFilePart=0x0) returned 0x48 [0130.539] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374b8 [0130.540] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.540] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unindexed Rules", cAlternateFileName="UNINDE~1")) returned 1 [0130.540] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unindexed Rules", cAlternateFileName="UNINDE~1")) returned 0 [0130.540] FindClose (in: hFindFile=0x14374b8 | out: hFindFile=0x14374b8) returned 1 [0130.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x40 [0130.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x40 [0130.540] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0130.541] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.541] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.541] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0130.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.541] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x41 [0130.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0130.541] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x41 [0130.541] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0130.542] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.542] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.542] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0130.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0130.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0130.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x31 [0130.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x31 [0130.543] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0130.544] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.544] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.544] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0130.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.544] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x31 [0130.544] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0130.545] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.545] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.545] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0130.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\History", lpFilePart=0x0) returned 0x25 [0130.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0130.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\History", lpFilePart=0x0) returned 0x25 [0130.545] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\History\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3bc) returned 1 [0130.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x27 [0130.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0130.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x27 [0130.547] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0130.548] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.548] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v2.0", cAlternateFileName="")) returned 1 [0130.548] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1 [0130.548] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1 [0130.548] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xffd2dee9, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xffd2dee9, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0130.548] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0130.549] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0130.549] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0130.549] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0130.549] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameDVR", cAlternateFileName="")) returned 1 [0130.549] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0130.550] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1 [0130.550] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0130.550] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0130.550] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa3009cf0, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xa3009cf0, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0130.550] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd358a482, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e02a2a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0130.551] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x827c2c6b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xdc6aa62a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdc6aa62a, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0130.551] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd63cb27, ftCreationTime.dwHighDateTime=0x1d327b2, ftLastAccessTime.dwLowDateTime=0xdd63cb27, ftLastAccessTime.dwHighDateTime=0x1d327b2, ftLastWriteTime.dwLowDateTime=0xdd63cb27, ftLastWriteTime.dwHighDateTime=0x1d327b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PenWorkspace", cAlternateFileName="PENWOR~1")) returned 1 [0130.551] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc7d69cc9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1 [0130.551] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ffd581, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x43ffd581, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x43ffd581, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0130.551] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeaeec2c4, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xeaeec2c4, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0xeaeec2c4, ftLastWriteTime.dwHighDateTime=0x1d327d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1 [0130.551] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc7e3414f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfcc934a, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0130.551] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbee6232d, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xbee6232d, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xbee6232d, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1 [0130.552] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa64c01, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0130.552] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~3")) returned 1 [0130.552] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~2")) returned 1 [0130.552] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~1")) returned 1 [0130.552] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~1")) returned 0 [0130.552] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0130.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0130.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0130.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0130.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x27 [0130.553] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370b8 [0130.553] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.553] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v2.0", cAlternateFileName="")) returned 1 [0130.553] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1 [0130.553] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1 [0130.553] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xffd2dee9, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xffd2dee9, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0130.554] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0130.554] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0130.554] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0130.554] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0130.554] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameDVR", cAlternateFileName="")) returned 1 [0130.554] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0130.554] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1 [0130.555] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0130.555] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0130.555] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa3009cf0, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xa3009cf0, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0130.555] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd358a482, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e02a2a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0130.555] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x827c2c6b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xdc6aa62a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdc6aa62a, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0130.555] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd63cb27, ftCreationTime.dwHighDateTime=0x1d327b2, ftLastAccessTime.dwLowDateTime=0xdd63cb27, ftLastAccessTime.dwHighDateTime=0x1d327b2, ftLastWriteTime.dwLowDateTime=0xdd63cb27, ftLastWriteTime.dwHighDateTime=0x1d327b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PenWorkspace", cAlternateFileName="PENWOR~1")) returned 1 [0130.555] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc7d69cc9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1 [0130.555] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ffd581, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x43ffd581, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x43ffd581, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0130.556] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeaeec2c4, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xeaeec2c4, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0xeaeec2c4, ftLastWriteTime.dwHighDateTime=0x1d327d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1 [0130.556] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc7e3414f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfcc934a, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0130.556] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbee6232d, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xbee6232d, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xbee6232d, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1 [0130.556] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa64c01, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0130.556] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~3")) returned 1 [0130.556] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~2")) returned 1 [0130.556] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~1")) returned 1 [0130.557] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.557] FindClose (in: hFindFile=0x14370b8 | out: hFindFile=0x14370b8) returned 1 [0130.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0130.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0130.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x30 [0130.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x30 [0130.557] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0130.557] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.558] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0130.558] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0130.558] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0130.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.558] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x30 [0130.558] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0130.558] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.559] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0130.559] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.559] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0130.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0130.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0130.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0130.559] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436f78 [0130.660] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.660] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE.log", cAlternateFileName="WINPRO~1.LOG")) returned 1 [0130.660] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.660] FindClose (in: hFindFile=0x1436f78 | out: hFindFile=0x1436f78) returned 1 [0130.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0130.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0130.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0130.661] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0130.661] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0130.661] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.661] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE.log", cAlternateFileName="WINPRO~1.LOG")) returned 1 [0130.661] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE.log", cAlternateFileName="WINPRO~1.LOG")) returned 0 [0130.662] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0130.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0130.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0130.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x30 [0130.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x30 [0130.662] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0130.663] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.663] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97043032, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0130.664] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0130.664] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0130.664] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0130.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x30 [0130.664] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0130.664] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.665] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97043032, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0130.665] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0130.665] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.665] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0130.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.665] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0130.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0130.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0130.666] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0130.668] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.668] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc2dd6b, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0x8cc2dd6b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x8cc2dd6b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mighost.exe.log", cAlternateFileName="MIGHOS~1.LOG")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabc08fe, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xfabc08fe, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0x1fb5c0d3, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mmc.exe.log", cAlternateFileName="MMCEXE~1.LOG")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9719a3bf, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea85c64, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdea85c64, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0x37e3c49, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0xe41, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x4005dd03, ftLastAccessTime.dwHighDateTime=0x1d3272c, ftLastWriteTime.dwLowDateTime=0xe0737866, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x16bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.669] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0130.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0130.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0130.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0130.670] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0130.670] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0130.671] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.671] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc2dd6b, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0x8cc2dd6b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x8cc2dd6b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mighost.exe.log", cAlternateFileName="MIGHOS~1.LOG")) returned 1 [0130.672] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabc08fe, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xfabc08fe, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0x1fb5c0d3, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mmc.exe.log", cAlternateFileName="MMCEXE~1.LOG")) returned 1 [0130.672] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9719a3bf, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0130.672] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea85c64, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdea85c64, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0x37e3c49, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0xe41, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0130.672] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x4005dd03, ftLastAccessTime.dwHighDateTime=0x1d3272c, ftLastWriteTime.dwLowDateTime=0xe0737866, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x16bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 1 [0130.672] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x4005dd03, ftLastAccessTime.dwHighDateTime=0x1d3272c, ftLastWriteTime.dwLowDateTime=0xe0737866, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x16bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 0 [0130.672] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0130.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0130.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0130.673] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x33 [0130.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.673] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x33 [0130.673] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0130.674] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.674] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0a8278, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0130.674] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0130.674] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0130.674] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0130.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.675] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x33 [0130.675] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0130.675] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.675] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0a8278, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0130.675] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0130.675] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.676] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0130.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.676] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x3d [0130.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0130.676] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x3d [0130.676] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0130.677] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.677] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0130.677] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb86d2dbd, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x663ba98, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0xdad, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0130.677] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.677] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0130.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0130.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0130.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0130.678] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x3d [0130.678] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374b8 [0130.678] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.678] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0130.679] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb86d2dbd, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x663ba98, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0xdad, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0130.679] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb86d2dbd, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x663ba98, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0xdad, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 0 [0130.679] FindClose (in: hFindFile=0x14374b8 | out: hFindFile=0x14374b8) returned 1 [0130.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0130.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0130.679] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x33 [0130.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.679] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x33 [0130.679] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xffd2dee9, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xffd2dee9, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0130.680] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xffd2dee9, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xffd2dee9, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.680] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe1add823, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xffd2dee9, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xffd2dee9, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x2cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 1 [0130.680] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.680] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0130.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.680] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x33 [0130.680] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xffd2dee9, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xffd2dee9, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370b8 [0130.681] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xffd2dee9, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xffd2dee9, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe1add823, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xffd2dee9, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xffd2dee9, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x2cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe1add823, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xffd2dee9, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xffd2dee9, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x2cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 0 [0130.681] FindClose (in: hFindFile=0x14370b8 | out: hFindFile=0x14370b8) returned 1 [0130.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x34 [0130.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x34 [0130.681] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437078 [0130.682] FindNextFileW (in: hFindFile=0x1437078, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.683] FindNextFileW (in: hFindFile=0x1437078, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.683] FindClose (in: hFindFile=0x1437078 | out: hFindFile=0x1437078) returned 1 [0130.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.683] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x34 [0130.683] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437478 [0130.683] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.683] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.684] FindClose (in: hFindFile=0x1437478 | out: hFindFile=0x1437478) returned 1 [0130.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x2d [0130.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x2d [0130.684] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0130.685] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.685] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.685] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0130.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.686] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x2d [0130.686] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437578 [0130.686] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.686] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.686] FindClose (in: hFindFile=0x1437578 | out: hFindFile=0x1437578) returned 1 [0130.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.686] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x33 [0130.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.687] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x33 [0130.687] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0130.687] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.687] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.687] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0130.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.688] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x33 [0130.688] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0130.688] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.688] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.688] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0130.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.689] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x2d [0130.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.689] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x2d [0130.689] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0130.690] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.691] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xa9b682de, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0130.691] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.691] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0130.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.691] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x2d [0130.691] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0130.692] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.692] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xa9b682de, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0130.692] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xa9b682de, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0 [0130.692] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0130.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.692] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x2f [0130.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.692] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x2f [0130.692] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0130.693] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.693] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb2fb6c, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdeb2fb6c, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x49388b7e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52880, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 1 [0130.693] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.693] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0130.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.694] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x2f [0130.694] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0130.694] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.694] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb2fb6c, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdeb2fb6c, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x49388b7e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52880, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 1 [0130.694] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb2fb6c, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdeb2fb6c, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x49388b7e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52880, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 0 [0130.695] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0130.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x3c [0130.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x3c [0130.695] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0130.786] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.786] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0130.786] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 0 [0130.786] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0130.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.787] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x3c [0130.787] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0130.787] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.787] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0130.789] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.789] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0130.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.789] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x4d [0130.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0130.789] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x4d [0130.789] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0130.790] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.790] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.791] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0130.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0130.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0130.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0130.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x4d [0130.791] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0130.791] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.792] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.792] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0130.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0130.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0130.792] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", lpFilePart=0x0) returned 0x34 [0130.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0130.792] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", lpFilePart=0x0) returned 0x34 [0130.792] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374f8 [0130.792] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.793] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 1 [0130.793] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 0 [0130.793] FindClose (in: hFindFile=0x14374f8 | out: hFindFile=0x14374f8) returned 1 [0130.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0130.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0130.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0130.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", lpFilePart=0x0) returned 0x34 [0130.793] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374f8 [0130.793] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.794] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 1 [0130.794] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.794] FindClose (in: hFindFile=0x14374f8 | out: hFindFile=0x14374f8) returned 1 [0130.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0130.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0130.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", lpFilePart=0x0) returned 0x40 [0130.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0130.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", lpFilePart=0x0) returned 0x40 [0130.794] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0130.796] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.798] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa24f074, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa24f074, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa24f074, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGGXW3P8.dat", cAlternateFileName="9NBLGG~2.DAT")) returned 1 [0130.798] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc240, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa5bc240, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa5bc240, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH10PG8.dat", cAlternateFileName="9N76AF~1.DAT")) returned 1 [0130.799] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e790b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa2e790b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa2e790b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH42THS.dat", cAlternateFileName="9NBLGG~3.DAT")) returned 1 [0130.799] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1dca08, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa1dca08, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa1dca08, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4LS1F.dat", cAlternateFileName="9NBLGG~1.DAT")) returned 1 [0130.800] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa333d55, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa333d55, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa333d55, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4NNS1.dat", cAlternateFileName="9NBLGG~4.DAT")) returned 1 [0130.800] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3801a9, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3801a9, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3801a9, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4QGHW.dat", cAlternateFileName="9N1C6C~1.DAT")) returned 1 [0130.800] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6ed39b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6ed39b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6ed39b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4R32N.dat", cAlternateFileName="9NBDA7~1.DAT")) returned 1 [0130.800] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75fa82, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa75fa82, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa75fa82, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH537C2.dat", cAlternateFileName="9N71A2~1.DAT")) returned 1 [0130.800] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa844781, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa844781, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa844781, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH5FV99.dat", cAlternateFileName="9N1A4E~1.DAT")) returned 1 [0130.801] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7f82bd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7f82bd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7f82bd, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH5PNB1.dat", cAlternateFileName="9N41FC~1.DAT")) returned 1 [0130.801] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7397f6, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7397f6, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7397f6, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD1HKW.dat", cAlternateFileName="9W5A8D~1.DAT")) returned 1 [0130.801] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa29b498, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa29b498, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa29b498, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD29V9.dat", cAlternateFileName="9WZDNC~1.DAT")) returned 1 [0130.801] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f2837, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3f2837, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3f2837, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD2G0J.dat", cAlternateFileName="9WZDNC~4.DAT")) returned 1 [0130.802] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6c7176, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6c7176, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6c7176, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBJJ.dat", cAlternateFileName="9W346D~1.DAT")) returned 1 [0130.802] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa608680, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa608680, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa608680, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBVB.dat", cAlternateFileName="9WA7C0~1.DAT")) returned 1 [0130.802] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fd75b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa4fd75b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa4fd75b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHV4V.dat", cAlternateFileName="9WEE31~1.DAT")) returned 1 [0130.803] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa418a66, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa418a66, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa418a66, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVFW.dat", cAlternateFileName="9WB9D7~1.DAT")) returned 1 [0130.803] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ec73, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa43ec73, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa43ec73, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVH4.dat", cAlternateFileName="9W15AF~1.DAT")) returned 1 [0130.803] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81e4ec, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa81e4ec, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa81e4ec, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVJL.dat", cAlternateFileName="9W71BA~1.DAT")) returned 1 [0130.803] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4b130e, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa4b130e, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa4b130e, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVN5.dat", cAlternateFileName="9W36B6~1.DAT")) returned 1 [0130.804] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa929428, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa929428, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa929428, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVQM.dat", cAlternateFileName="9WF232~1.DAT")) returned 1 [0130.804] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7135d5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7135d5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7135d5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHWD2.dat", cAlternateFileName="9W2E3D~1.DAT")) returned 1 [0130.804] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3a63cb, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3a63cb, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3a63cb, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHWKN.dat", cAlternateFileName="9WZDNC~2.DAT")) returned 1 [0130.804] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6a0f40, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6a0f40, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6a0f40, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ140.dat", cAlternateFileName="9WAA4D~1.DAT")) returned 1 [0130.804] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa86a943, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa86a943, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa86a943, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ364.dat", cAlternateFileName="9W3A1B~1.DAT")) returned 1 [0130.805] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8dcfd1, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8dcfd1, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa8dcfd1, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3P2.dat", cAlternateFileName="9W8817~1.DAT")) returned 1 [0130.805] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa464eb7, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa464eb7, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa464eb7, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PM.dat", cAlternateFileName="9WA8D8~1.DAT")) returned 1 [0130.805] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67ad1f, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa67ad1f, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa67ad1f, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PR.dat", cAlternateFileName="9WFE0D~1.DAT")) returned 1 [0130.806] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa903203, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa903203, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa903203, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PT.dat", cAlternateFileName="9W54A4~1.DAT")) returned 1 [0130.806] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94f64d, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3Q2.dat", cAlternateFileName="9WABF7~1.DAT")) returned 1 [0130.806] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa62e8ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa62e8ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa62e8ac, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3T6.dat", cAlternateFileName="9W7114~1.DAT")) returned 1 [0130.807] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7abe6c, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7abe6c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7abe6c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBBG.dat", cAlternateFileName="9W8A94~1.DAT")) returned 1 [0130.807] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3cc60b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3cc60b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3cc60b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBD8.dat", cAlternateFileName="9WZDNC~3.DAT")) returned 1 [0130.808] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7abe6c, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7abe6c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7abe6c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBH4.dat", cAlternateFileName="9W3EDB~1.DAT")) returned 1 [0130.808] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6da5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8b6da5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa8b6da5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBMP.dat", cAlternateFileName="9WFCD7~1.DAT")) returned 1 [0130.809] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.809] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0130.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0130.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0130.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0130.810] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", lpFilePart=0x0) returned 0x40 [0130.811] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0130.812] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.812] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa24f074, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa24f074, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa24f074, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGGXW3P8.dat", cAlternateFileName="9NBLGG~2.DAT")) returned 1 [0130.813] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc240, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa5bc240, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa5bc240, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH10PG8.dat", cAlternateFileName="9N76AF~1.DAT")) returned 1 [0130.814] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e790b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa2e790b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa2e790b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH42THS.dat", cAlternateFileName="9NBLGG~3.DAT")) returned 1 [0130.814] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1dca08, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa1dca08, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa1dca08, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4LS1F.dat", cAlternateFileName="9NBLGG~1.DAT")) returned 1 [0130.815] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa333d55, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa333d55, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa333d55, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4NNS1.dat", cAlternateFileName="9NBLGG~4.DAT")) returned 1 [0130.816] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3801a9, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3801a9, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3801a9, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4QGHW.dat", cAlternateFileName="9N1C6C~1.DAT")) returned 1 [0130.816] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6ed39b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6ed39b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6ed39b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4R32N.dat", cAlternateFileName="9NBDA7~1.DAT")) returned 1 [0130.816] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75fa82, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa75fa82, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa75fa82, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH537C2.dat", cAlternateFileName="9N71A2~1.DAT")) returned 1 [0130.817] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa844781, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa844781, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa844781, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH5FV99.dat", cAlternateFileName="9N1A4E~1.DAT")) returned 1 [0130.817] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7f82bd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7f82bd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7f82bd, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH5PNB1.dat", cAlternateFileName="9N41FC~1.DAT")) returned 1 [0130.817] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7397f6, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7397f6, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7397f6, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD1HKW.dat", cAlternateFileName="9W5A8D~1.DAT")) returned 1 [0130.818] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa29b498, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa29b498, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa29b498, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD29V9.dat", cAlternateFileName="9WZDNC~1.DAT")) returned 1 [0130.818] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f2837, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3f2837, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3f2837, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD2G0J.dat", cAlternateFileName="9WZDNC~4.DAT")) returned 1 [0130.818] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6c7176, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6c7176, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6c7176, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBJJ.dat", cAlternateFileName="9W346D~1.DAT")) returned 1 [0130.819] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa608680, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa608680, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa608680, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBVB.dat", cAlternateFileName="9WA7C0~1.DAT")) returned 1 [0130.819] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fd75b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa4fd75b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa4fd75b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHV4V.dat", cAlternateFileName="9WEE31~1.DAT")) returned 1 [0130.819] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa418a66, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa418a66, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa418a66, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVFW.dat", cAlternateFileName="9WB9D7~1.DAT")) returned 1 [0130.820] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ec73, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa43ec73, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa43ec73, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVH4.dat", cAlternateFileName="9W15AF~1.DAT")) returned 1 [0130.820] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81e4ec, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa81e4ec, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa81e4ec, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVJL.dat", cAlternateFileName="9W71BA~1.DAT")) returned 1 [0130.821] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4b130e, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa4b130e, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa4b130e, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVN5.dat", cAlternateFileName="9W36B6~1.DAT")) returned 1 [0130.822] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa929428, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa929428, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa929428, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVQM.dat", cAlternateFileName="9WF232~1.DAT")) returned 1 [0130.822] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7135d5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7135d5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7135d5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHWD2.dat", cAlternateFileName="9W2E3D~1.DAT")) returned 1 [0130.823] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3a63cb, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3a63cb, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3a63cb, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHWKN.dat", cAlternateFileName="9WZDNC~2.DAT")) returned 1 [0130.823] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6a0f40, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6a0f40, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6a0f40, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ140.dat", cAlternateFileName="9WAA4D~1.DAT")) returned 1 [0130.824] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa86a943, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa86a943, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa86a943, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ364.dat", cAlternateFileName="9W3A1B~1.DAT")) returned 1 [0130.824] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8dcfd1, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8dcfd1, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa8dcfd1, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3P2.dat", cAlternateFileName="9W8817~1.DAT")) returned 1 [0130.825] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa464eb7, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa464eb7, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa464eb7, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PM.dat", cAlternateFileName="9WA8D8~1.DAT")) returned 1 [0130.825] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67ad1f, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa67ad1f, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa67ad1f, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PR.dat", cAlternateFileName="9WFE0D~1.DAT")) returned 1 [0130.826] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa903203, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa903203, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa903203, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PT.dat", cAlternateFileName="9W54A4~1.DAT")) returned 1 [0130.826] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94f64d, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3Q2.dat", cAlternateFileName="9WABF7~1.DAT")) returned 1 [0130.826] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa62e8ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa62e8ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa62e8ac, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3T6.dat", cAlternateFileName="9W7114~1.DAT")) returned 1 [0130.827] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7abe6c, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7abe6c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7abe6c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBBG.dat", cAlternateFileName="9W8A94~1.DAT")) returned 1 [0130.828] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3cc60b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3cc60b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3cc60b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBD8.dat", cAlternateFileName="9WZDNC~3.DAT")) returned 1 [0130.828] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7abe6c, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7abe6c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7abe6c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBH4.dat", cAlternateFileName="9W3EDB~1.DAT")) returned 1 [0130.829] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6da5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8b6da5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa8b6da5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBMP.dat", cAlternateFileName="9WFCD7~1.DAT")) returned 1 [0130.829] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6da5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8b6da5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa8b6da5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBMP.dat", cAlternateFileName="9WFCD7~1.DAT")) returned 0 [0130.829] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0130.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0130.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.241] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x39 [0131.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0131.241] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x39 [0131.248] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437578 [0131.248] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.256] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc08468a, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0xc08468a, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xc169496, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x19ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0131.256] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4354c7cc, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4354c7cc, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcdb7df5a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0131.256] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e58e25, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0131.256] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmieSiteList", cAlternateFileName="EMIESI~1")) returned 1 [0131.256] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmieUserList", cAlternateFileName="EMIEUS~1")) returned 1 [0131.257] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4371635e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4371635e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xf03e1a39, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie4uinit-ClearIconCache.log", cAlternateFileName="IE4UIN~2.LOG")) returned 1 [0131.257] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3cfd5892, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcdb7df5a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie4uinit-UserConfig.log", cAlternateFileName="IE4UIN~1.LOG")) returned 1 [0131.257] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatData", cAlternateFileName="IECOMP~1")) returned 1 [0131.257] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x447fe759, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x447fe759, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagestore", cAlternateFileName="IMAGES~1")) returned 1 [0131.257] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1092cc59, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9a2df3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed DB", cAlternateFileName="INDEXE~1")) returned 1 [0131.257] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7a6cf3f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xf7a6cf3f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xf7a6cf3f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0131.257] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4349f648, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5c26bd14, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0131.258] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabRoaming", cAlternateFileName="TABROA~1")) returned 1 [0131.258] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiles", cAlternateFileName="")) returned 1 [0131.258] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracking Protection", cAlternateFileName="TRACKI~1")) returned 1 [0131.258] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VersionManager", cAlternateFileName="VERSIO~1")) returned 1 [0131.258] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VersionManager", cAlternateFileName="VERSIO~1")) returned 0 [0131.258] FindClose (in: hFindFile=0x1437578 | out: hFindFile=0x1437578) returned 1 [0131.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0131.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0131.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0131.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x39 [0131.259] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0131.259] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.259] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc08468a, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0xc08468a, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xc169496, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x19ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0131.259] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4354c7cc, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4354c7cc, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcdb7df5a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0131.260] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e58e25, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0131.260] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmieSiteList", cAlternateFileName="EMIESI~1")) returned 1 [0131.260] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmieUserList", cAlternateFileName="EMIEUS~1")) returned 1 [0131.260] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4371635e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4371635e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xf03e1a39, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie4uinit-ClearIconCache.log", cAlternateFileName="IE4UIN~2.LOG")) returned 1 [0131.260] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3cfd5892, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcdb7df5a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie4uinit-UserConfig.log", cAlternateFileName="IE4UIN~1.LOG")) returned 1 [0131.260] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatData", cAlternateFileName="IECOMP~1")) returned 1 [0131.261] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x447fe759, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x447fe759, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagestore", cAlternateFileName="IMAGES~1")) returned 1 [0131.261] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1092cc59, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9a2df3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed DB", cAlternateFileName="INDEXE~1")) returned 1 [0131.261] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7a6cf3f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xf7a6cf3f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xf7a6cf3f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0131.261] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4349f648, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5c26bd14, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0131.261] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabRoaming", cAlternateFileName="TABROA~1")) returned 1 [0131.261] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiles", cAlternateFileName="")) returned 1 [0131.261] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracking Protection", cAlternateFileName="TRACKI~1")) returned 1 [0131.261] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VersionManager", cAlternateFileName="VERSIO~1")) returned 1 [0131.262] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.262] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0131.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0131.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0131.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x42 [0131.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x42 [0131.262] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e58e25, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436f78 [0131.262] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e58e25, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.263] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x45e62a70, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e62a70, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e62a70, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0131.263] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JW094SOV", cAlternateFileName="")) returned 1 [0131.263] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KHCDOJTQ", cAlternateFileName="")) returned 1 [0131.263] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROM18SK9", cAlternateFileName="")) returned 1 [0131.263] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RZ8OSEEE", cAlternateFileName="")) returned 1 [0131.263] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RZ8OSEEE", cAlternateFileName="")) returned 0 [0131.263] FindClose (in: hFindFile=0x1436f78 | out: hFindFile=0x1436f78) returned 1 [0131.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x42 [0131.264] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e58e25, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0131.264] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e58e25, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.264] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x45e62a70, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e62a70, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e62a70, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0131.264] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JW094SOV", cAlternateFileName="")) returned 1 [0131.264] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KHCDOJTQ", cAlternateFileName="")) returned 1 [0131.265] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROM18SK9", cAlternateFileName="")) returned 1 [0131.265] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RZ8OSEEE", cAlternateFileName="")) returned 1 [0131.265] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.265] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0131.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\JW094SOV", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\JW094SOV", lpFilePart=0x0) returned 0x4b [0131.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\JW094SOV", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\JW094SOV", lpFilePart=0x0) returned 0x4b [0131.265] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\JW094SOV\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x8cd0fdbe, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0131.266] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x8cd0fdbe, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.266] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8cd0fdbe, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8cd0fdbe, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8cd98945, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="consent.google[1].xml", cAlternateFileName="CONSEN~1.XML")) returned 1 [0131.266] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.266] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0131.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\KHCDOJTQ", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\KHCDOJTQ", lpFilePart=0x0) returned 0x4b [0131.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\KHCDOJTQ", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\KHCDOJTQ", lpFilePart=0x0) returned 0x4b [0131.267] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\KHCDOJTQ\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0131.267] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.268] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0xacef60c2, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1 [0131.268] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.268] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0131.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.268] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\ROM18SK9", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\ROM18SK9", lpFilePart=0x0) returned 0x4b [0131.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.268] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\ROM18SK9", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\ROM18SK9", lpFilePart=0x0) returned 0x4b [0131.269] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\ROM18SK9\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x59b69c63, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0131.269] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x59b69c63, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.269] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59b69c63, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x59b69c63, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x8f5906b9, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.microsoft[1].xml", cAlternateFileName="WWWMIC~1.XML")) returned 1 [0131.269] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.269] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0131.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.269] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\RZ8OSEEE", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\RZ8OSEEE", lpFilePart=0x0) returned 0x4b [0131.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\RZ8OSEEE", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\RZ8OSEEE", lpFilePart=0x0) returned 0x4b [0131.270] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\RZ8OSEEE\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437578 [0131.270] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.270] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.270] FindClose (in: hFindFile=0x1437578 | out: hFindFile=0x1437578) returned 1 [0131.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", lpFilePart=0x0) returned 0x46 [0131.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", lpFilePart=0x0) returned 0x46 [0131.271] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0131.271] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.271] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0131.271] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.271] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0131.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.271] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", lpFilePart=0x0) returned 0x46 [0131.272] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0131.272] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.272] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0131.272] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0131.272] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0131.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", lpFilePart=0x0) returned 0x46 [0131.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", lpFilePart=0x0) returned 0x46 [0131.273] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0131.273] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.273] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0131.273] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.273] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0131.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", lpFilePart=0x0) returned 0x46 [0131.274] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437478 [0131.274] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.274] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0131.274] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0131.274] FindClose (in: hFindFile=0x1437478 | out: hFindFile=0x1437478) returned 1 [0131.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.274] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", lpFilePart=0x0) returned 0x46 [0131.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", lpFilePart=0x0) returned 0x46 [0131.275] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0131.275] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.276] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcd515a18, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xbea, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompatdata.xml", cAlternateFileName="IECOMP~1.XML")) returned 1 [0131.276] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.276] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0131.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", lpFilePart=0x0) returned 0x46 [0131.276] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0131.276] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.277] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcd515a18, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xbea, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompatdata.xml", cAlternateFileName="IECOMP~1.XML")) returned 1 [0131.277] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcd515a18, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xbea, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompatdata.xml", cAlternateFileName="IECOMP~1.XML")) returned 0 [0131.277] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0131.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", lpFilePart=0x0) returned 0x44 [0131.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", lpFilePart=0x0) returned 0x44 [0131.277] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x447fe759, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x447fe759, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0131.278] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x447fe759, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x447fe759, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.278] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xabb1af8a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabb1af8a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idyl1t3", cAlternateFileName="")) returned 1 [0131.278] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x447fe759, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45933233, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45933233, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="p1nh3xb", cAlternateFileName="")) returned 1 [0131.278] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x447fe759, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45933233, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45933233, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="p1nh3xb", cAlternateFileName="")) returned 0 [0131.279] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0131.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.279] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", lpFilePart=0x0) returned 0x44 [0131.279] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x447fe759, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x447fe759, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0131.279] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x447fe759, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x447fe759, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.279] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xabb1af8a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabb1af8a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idyl1t3", cAlternateFileName="")) returned 1 [0131.280] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x447fe759, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45933233, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45933233, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="p1nh3xb", cAlternateFileName="")) returned 1 [0131.280] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.280] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0131.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\idyl1t3", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\idyl1t3", lpFilePart=0x0) returned 0x4c [0131.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\idyl1t3", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\idyl1t3", lpFilePart=0x0) returned 0x4c [0131.280] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\idyl1t3\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xabb1af8a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabb1af8a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0131.280] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xabb1af8a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabb1af8a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.281] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xabb1af8a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabb1af8a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.281] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0131.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\p1nh3xb", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\p1nh3xb", lpFilePart=0x0) returned 0x4c [0131.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\p1nh3xb", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\p1nh3xb", lpFilePart=0x0) returned 0x4c [0131.281] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\p1nh3xb\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x447fe759, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45933233, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45933233, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0131.281] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x447fe759, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45933233, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45933233, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.281] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45933233, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45933233, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0xb4c056f3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x5c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagestore.dat", cAlternateFileName="IMAGES~1.DAT")) returned 1 [0131.282] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.282] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0131.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.282] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB", lpFilePart=0x0) returned 0x44 [0131.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.282] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB", lpFilePart=0x0) returned 0x44 [0131.282] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1092cc59, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9a2df3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437238 [0131.285] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1092cc59, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9a2df3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.285] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1099f359, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x1099f359, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xc34609ca, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x180000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppQuota.edb", cAlternateFileName="")) returned 1 [0131.285] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf8b2cee, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xcf8b2cee, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc34609ca, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppQuota.jfm", cAlternateFileName="")) returned 1 [0131.285] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10979113, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10979113, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xc34ace44, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0131.285] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10952ea2, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10979113, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xc34ace44, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0131.286] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10952ea2, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10952ea2, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x6b9c9042, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0131.286] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10979113, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10979113, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x10979113, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0131.286] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10979113, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10979113, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x10979113, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0131.286] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10952ea2, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9c9042, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0131.286] FindNextFileW (in: hFindFile=0x1437238, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.286] FindClose (in: hFindFile=0x1437238 | out: hFindFile=0x1437238) returned 1 [0131.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB", lpFilePart=0x0) returned 0x44 [0131.287] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1092cc59, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9a2df3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0131.288] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1092cc59, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9a2df3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.288] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1099f359, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x1099f359, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xc34609ca, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x180000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppQuota.edb", cAlternateFileName="")) returned 1 [0131.289] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf8b2cee, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xcf8b2cee, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc34609ca, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppQuota.jfm", cAlternateFileName="")) returned 1 [0131.289] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10979113, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10979113, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xc34ace44, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0131.289] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10952ea2, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10979113, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xc34ace44, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0131.289] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10952ea2, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10952ea2, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x6b9c9042, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0131.289] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10979113, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10979113, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x10979113, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0131.289] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10979113, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10979113, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x10979113, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0131.289] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10952ea2, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9c9042, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0131.290] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10952ea2, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9c9042, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 0 [0131.290] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0131.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x42 [0131.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x42 [0131.291] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4349f648, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5c26bd14, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370b8 [0131.379] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4349f648, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5c26bd14, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.379] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xabbf3518, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xabbf3518, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0131.379] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c26bd14, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xa58a8538, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xa58a8538, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1 [0131.379] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c26bd14, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xa58a8538, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xa58a8538, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 0 [0131.380] FindClose (in: hFindFile=0x14370b8 | out: hFindFile=0x14370b8) returned 1 [0131.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.380] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x42 [0131.380] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4349f648, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5c26bd14, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0131.380] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4349f648, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5c26bd14, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.380] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xabbf3518, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xabbf3518, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0131.381] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c26bd14, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xa58a8538, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xa58a8538, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1 [0131.381] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.381] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0131.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.381] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x49 [0131.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.381] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x49 [0131.381] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xabbf3518, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xb4cc42b6, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0131.382] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xabbf3518, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xb4cc42b6, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.382] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xabbf3518, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xb4cc42b6, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.382] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0131.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x4e [0131.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x4e [0131.383] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c26bd14, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xa58a8538, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xb4a24886, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370f8 [0131.384] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c26bd14, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xa58a8538, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xb4a24886, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.385] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c26bd14, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5c26bd14, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0xb4a24886, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{9617C115-93E0-11E7-BFDA-E8DAAAF0A0ED}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0131.385] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.385] FindClose (in: hFindFile=0x14370f8 | out: hFindFile=0x14370f8) returned 1 [0131.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", lpFilePart=0x0) returned 0x44 [0131.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", lpFilePart=0x0) returned 0x44 [0131.386] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0131.386] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.386] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.387] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0131.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.387] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", lpFilePart=0x0) returned 0x44 [0131.387] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0131.387] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.387] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.387] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0131.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", lpFilePart=0x0) returned 0x3f [0131.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", lpFilePart=0x0) returned 0x3f [0131.388] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0131.388] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.389] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a696d49, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pin-314712940", cAlternateFileName="PIN-31~1")) returned 1 [0131.389] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a72f6ee, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a72f6ee, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pin21042551290", cAlternateFileName="PIN210~1")) returned 1 [0131.389] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a72f6ee, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a72f6ee, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pin21042551290", cAlternateFileName="PIN210~1")) returned 0 [0131.389] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0131.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", lpFilePart=0x0) returned 0x3f [0131.389] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0131.390] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.390] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a696d49, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pin-314712940", cAlternateFileName="PIN-31~1")) returned 1 [0131.390] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a72f6ee, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a72f6ee, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pin21042551290", cAlternateFileName="PIN210~1")) returned 1 [0131.390] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.390] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0131.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940", lpFilePart=0x0) returned 0x4d [0131.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940", lpFilePart=0x0) returned 0x4d [0131.391] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a696d49, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0131.391] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a696d49, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.391] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a696d49, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a696d49, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x9eb777e7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x19b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msapplication.xml", cAlternateFileName="MSAPPL~1.XML")) returned 1 [0131.391] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.391] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0131.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin21042551290", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin21042551290", lpFilePart=0x0) returned 0x4e [0131.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin21042551290", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin21042551290", lpFilePart=0x0) returned 0x4e [0131.392] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin21042551290\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a72f6ee, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a72f6ee, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0131.393] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a72f6ee, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a72f6ee, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.393] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a72f6ee, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a72f6ee, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.393] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0131.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", lpFilePart=0x0) returned 0x4d [0131.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", lpFilePart=0x0) returned 0x4d [0131.394] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0131.394] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.394] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.394] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0131.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", lpFilePart=0x0) returned 0x4d [0131.422] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0131.422] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.422] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.422] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0131.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.423] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", lpFilePart=0x0) returned 0x48 [0131.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.423] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", lpFilePart=0x0) returned 0x48 [0131.423] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0131.424] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.424] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x3866, dwReserved0=0x0, dwReserved1=0x0, cFileName="versionlist.xml", cAlternateFileName="VERSIO~1.XML")) returned 1 [0131.424] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.424] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0131.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.425] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", lpFilePart=0x0) returned 0x48 [0131.425] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0131.425] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.425] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x3866, dwReserved0=0x0, dwReserved1=0x0, cFileName="versionlist.xml", cAlternateFileName="VERSIO~1.XML")) returned 1 [0131.425] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x3866, dwReserved0=0x0, dwReserved1=0x0, cFileName="versionlist.xml", cAlternateFileName="VERSIO~1.XML")) returned 0 [0131.426] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0131.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.426] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x34 [0131.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0131.426] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x34 [0131.426] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0131.426] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.426] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0131.427] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0131.427] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0 [0131.427] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0131.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0131.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0131.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0131.427] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x34 [0131.427] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374b8 [0131.427] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.428] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0131.428] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0131.428] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.428] FindClose (in: hFindFile=0x14374b8 | out: hFindFile=0x14374b8) returned 1 [0131.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0131.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0131.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x43 [0131.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x43 [0131.428] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0131.429] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.429] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb6d796, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb6d796, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.430] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb6d796, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb6d796, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0131.430] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0131.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x43 [0131.430] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0131.430] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.430] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb6d796, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb6d796, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.430] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.431] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0131.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.431] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x49 [0131.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.431] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x49 [0131.431] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb6d796, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb6d796, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436f78 [0131.431] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb6d796, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb6d796, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.431] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc61bbb37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000165C9", cAlternateFileName="")) returned 1 [0131.431] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc61bbb37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000165C9", cAlternateFileName="")) returned 0 [0131.432] FindClose (in: hFindFile=0x1436f78 | out: hFindFile=0x1436f78) returned 1 [0131.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x4b [0131.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x4b [0131.432] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436f78 [0131.432] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.432] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.433] FindClose (in: hFindFile=0x1436f78 | out: hFindFile=0x1436f78) returned 1 [0131.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x4b [0131.433] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0131.433] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.433] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.433] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0131.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.434] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x2e [0131.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0131.434] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x2e [0131.434] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa3009cf0, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xa3009cf0, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0131.434] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa3009cf0, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xa3009cf0, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.434] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0", cAlternateFileName="")) returned 1 [0131.434] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3009cf0, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb425304a, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTele", cAlternateFileName="")) returned 1 [0131.434] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3009cf0, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb425304a, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTele", cAlternateFileName="")) returned 0 [0131.435] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0131.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0131.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0131.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0131.435] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x2e [0131.435] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa3009cf0, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xa3009cf0, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0131.435] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa3009cf0, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xa3009cf0, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.435] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0", cAlternateFileName="")) returned 1 [0131.435] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3009cf0, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb425304a, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTele", cAlternateFileName="")) returned 1 [0131.435] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.436] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0131.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0131.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0131.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0", lpFilePart=0x0) returned 0x33 [0131.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0", lpFilePart=0x0) returned 0x33 [0131.436] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0131.436] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.436] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BackstageInAppNavCache", cAlternateFileName="BACKST~1")) returned 1 [0131.437] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbff407, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x7cbff407, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x7cbff407, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x3453f, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe_Rules.xml", cAlternateFileName="EXCELE~1.XML")) returned 1 [0131.437] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17ea40e, ftCreationTime.dwHighDateTime=0x1d327e6, ftLastAccessTime.dwLowDateTime=0xe17ea40e, ftLastAccessTime.dwHighDateTime=0x1d327e6, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Floodgate", cAlternateFileName="FLOODG~1")) returned 1 [0131.437] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32354d68, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32354d68, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x32354d68, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x21b0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaccess.exe_Rules.xml", cAlternateFileName="MSACCE~1.XML")) returned 1 [0131.437] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa676ba0c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xa676ba0c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xa6791c64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoia.exe_Rules.xml", cAlternateFileName="MSOIAE~1.XML")) returned 1 [0131.437] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ade170, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x44ade170, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x44ade170, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x19601, dwReserved0=0x0, dwReserved1=0x0, cFileName="mspub.exe_Rules.xml", cAlternateFileName="MSPUBE~1.XML")) returned 1 [0131.437] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc76852f0, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xc76852f0, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xc76852f0, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="officec2rclient.exe_Rules.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0131.437] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ac8343, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xb3ac8343, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xbfe1eb4c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeclicktorun.exe_Rules.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0131.438] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e69405, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x83e69405, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x83e69405, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x28442, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe_Rules.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0131.438] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a53e30, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x19a53e30, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x19a53e30, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2dc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpnt.exe_Rules.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0131.438] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a526ab, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x80a526ab, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x80a526ab, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup32.exe_Rules.xml", cAlternateFileName="SETUP3~1.XML")) returned 1 [0131.438] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95817b70, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x95817b70, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x95818eea, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup64.exe_Rules.xml", cAlternateFileName="SETUP6~1.XML")) returned 1 [0131.438] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10ce24c, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc10ce24c, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc10ce24c, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x3bbff, dwReserved0=0x0, dwReserved1=0x0, cFileName="visio.exe_Rules.xml", cAlternateFileName="VISIOE~1.XML")) returned 1 [0131.438] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c194002, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x7c194002, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x7c194002, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebServiceCache", cAlternateFileName="WEBSER~1")) returned 1 [0131.438] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a20d0e, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x282ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="winproj.exe_Rules.xml", cAlternateFileName="WINPRO~1.XML")) returned 1 [0131.439] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x464d669, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x464d669, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x464d669, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x3694b, dwReserved0=0x0, dwReserved1=0x0, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 1 [0131.439] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.439] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0131.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.439] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0", lpFilePart=0x0) returned 0x33 [0131.439] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0131.439] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.440] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BackstageInAppNavCache", cAlternateFileName="BACKST~1")) returned 1 [0131.440] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbff407, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x7cbff407, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x7cbff407, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x3453f, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe_Rules.xml", cAlternateFileName="EXCELE~1.XML")) returned 1 [0131.440] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17ea40e, ftCreationTime.dwHighDateTime=0x1d327e6, ftLastAccessTime.dwLowDateTime=0xe17ea40e, ftLastAccessTime.dwHighDateTime=0x1d327e6, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Floodgate", cAlternateFileName="FLOODG~1")) returned 1 [0131.539] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32354d68, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32354d68, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x32354d68, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x21b0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaccess.exe_Rules.xml", cAlternateFileName="MSACCE~1.XML")) returned 1 [0131.539] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa676ba0c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xa676ba0c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xa6791c64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoia.exe_Rules.xml", cAlternateFileName="MSOIAE~1.XML")) returned 1 [0131.539] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ade170, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x44ade170, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x44ade170, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x19601, dwReserved0=0x0, dwReserved1=0x0, cFileName="mspub.exe_Rules.xml", cAlternateFileName="MSPUBE~1.XML")) returned 1 [0131.539] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc76852f0, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xc76852f0, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xc76852f0, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="officec2rclient.exe_Rules.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0131.540] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ac8343, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xb3ac8343, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xbfe1eb4c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeclicktorun.exe_Rules.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0131.540] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e69405, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x83e69405, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x83e69405, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x28442, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe_Rules.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0131.540] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a53e30, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x19a53e30, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x19a53e30, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2dc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpnt.exe_Rules.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0131.540] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a526ab, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x80a526ab, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x80a526ab, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup32.exe_Rules.xml", cAlternateFileName="SETUP3~1.XML")) returned 1 [0131.540] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95817b70, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x95817b70, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x95818eea, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup64.exe_Rules.xml", cAlternateFileName="SETUP6~1.XML")) returned 1 [0131.540] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10ce24c, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc10ce24c, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc10ce24c, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x3bbff, dwReserved0=0x0, dwReserved1=0x0, cFileName="visio.exe_Rules.xml", cAlternateFileName="VISIOE~1.XML")) returned 1 [0131.541] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c194002, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x7c194002, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x7c194002, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebServiceCache", cAlternateFileName="WEBSER~1")) returned 1 [0131.541] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a20d0e, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x282ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="winproj.exe_Rules.xml", cAlternateFileName="WINPRO~1.XML")) returned 1 [0131.541] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x464d669, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x464d669, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x464d669, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x3694b, dwReserved0=0x0, dwReserved1=0x0, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 1 [0131.541] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x464d669, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x464d669, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x464d669, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x3694b, dwReserved0=0x0, dwReserved1=0x0, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 0 [0131.541] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0131.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.541] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache", lpFilePart=0x0) returned 0x4a [0131.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache", lpFilePart=0x0) returned 0x4a [0131.542] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374f8 [0131.543] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.544] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyComputer", cAlternateFileName="MYCOMP~1")) returned 1 [0131.544] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyComputer", cAlternateFileName="MYCOMP~1")) returned 0 [0131.544] FindClose (in: hFindFile=0x14374f8 | out: hFindFile=0x14374f8) returned 1 [0131.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.544] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate", lpFilePart=0x0) returned 0x3d [0131.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.544] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate", lpFilePart=0x0) returned 0x3d [0131.544] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17ea40e, ftCreationTime.dwHighDateTime=0x1d327e6, ftLastAccessTime.dwLowDateTime=0xe17ea40e, ftLastAccessTime.dwHighDateTime=0x1d327e6, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0131.548] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17ea40e, ftCreationTime.dwHighDateTime=0x1d327e6, ftLastAccessTime.dwLowDateTime=0xe17ea40e, ftLastAccessTime.dwHighDateTime=0x1d327e6, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.548] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77060bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x77060bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.Settings.json", cAlternateFileName="EXCELS~1.JSO")) returned 1 [0131.548] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77060bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x77060bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.SurveyEventActivityStats.json", cAlternateFileName="EXCELS~3.JSO")) returned 1 [0131.549] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77060bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x77060bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.SurveyHistoryStats.json", cAlternateFileName="EXCELS~2.JSO")) returned 1 [0131.549] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.549] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0131.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache", lpFilePart=0x0) returned 0x43 [0131.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache", lpFilePart=0x0) returned 0x43 [0131.550] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c194002, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x7c194002, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x7c194002, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0131.550] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c194002, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x7c194002, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x7c194002, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.551] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c194002, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xbb2b8178, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbb2b8178, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AllUsers", cAlternateFileName="")) returned 1 [0131.551] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c194002, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xbb2b8178, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbb2b8178, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AllUsers", cAlternateFileName="")) returned 0 [0131.551] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0131.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.551] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\OTele", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\OTele", lpFilePart=0x0) returned 0x34 [0131.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.551] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\OTele", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\OTele", lpFilePart=0x0) returned 0x34 [0131.551] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\OTele\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3009cf0, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb4279206, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0131.554] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3009cf0, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb4279206, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.555] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ae56af, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x40ae56af, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x40ae56af, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1B9115E4-1F5D-4CE6-9508-7A7EBBE3534F} (0) - 1304 - excel.exe - OTele.dat", cAlternateFileName="{1B911~1.DAT")) returned 1 [0131.555] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ae56af, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x40ae56af, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x40ae56af, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1B9115E4-1F5D-4CE6-9508-7A7EBBE3534F} (0) - 1304 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{1B911~2.DAT")) returned 1 [0131.555] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ae56af, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x40ae56af, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x40ae56af, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1B9115E4-1F5D-4CE6-9508-7A7EBBE3534F} (1) - 1304 - excel.exe - OTele.dat", cAlternateFileName="{1B911~3.DAT")) returned 1 [0131.555] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ae56af, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x40ae56af, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x40ae56af, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x1f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1B9115E4-1F5D-4CE6-9508-7A7EBBE3534F} (1) - 1304 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{1B911~4.DAT")) returned 1 [0131.555] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ae56af, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x40ae56af, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x40ae56af, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1B9115E4-1F5D-4CE6-9508-7A7EBBE3534F} (2) - 1304 - excel.exe - OTele.dat", cAlternateFileName="{10A22~1.DAT")) returned 1 [0131.556] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414e1537, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x414e1537, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x414e1537, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DD62F26-1A3F-4275-8844-50DDEBF25FB7} (0) - 3576 - excel.exe - OTele.dat", cAlternateFileName="{4DD62~1.DAT")) returned 1 [0131.556] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414e1537, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x414e1537, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x414e1537, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DD62F26-1A3F-4275-8844-50DDEBF25FB7} (0) - 3576 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{4DD62~2.DAT")) returned 1 [0131.556] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414e1537, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x414e1537, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x414e1537, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DD62F26-1A3F-4275-8844-50DDEBF25FB7} (1) - 3576 - excel.exe - OTele.dat", cAlternateFileName="{4DD62~3.DAT")) returned 1 [0131.556] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414e1537, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x414e1537, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x414e1537, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x1f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DD62F26-1A3F-4275-8844-50DDEBF25FB7} (1) - 3576 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{4DD62~4.DAT")) returned 1 [0131.556] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414e1537, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x414e1537, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x414e1537, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DD62F26-1A3F-4275-8844-50DDEBF25FB7} (2) - 3576 - excel.exe - OTele.dat", cAlternateFileName="{411B1~1.DAT")) returned 1 [0131.556] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5f51381, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xc5f51381, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc5f51381, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="{61F167A5-718E-4E8B-8D6B-141DA9EB9DC9} (0) - 3976 - visio.exe - OTele.dat", cAlternateFileName="{61F16~1.DAT")) returned 1 [0131.557] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefec2281, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xefec2281, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xefec2281, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9C5E7D9B-2A2B-4118-AE33-9030D7BCCAB1} (0) - 2228 - winproj.exe - OTele.dat", cAlternateFileName="{9C5E7~1.DAT")) returned 1 [0131.557] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefee82a5, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xefee82a5, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xefee82a5, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x1f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9C5E7D9B-2A2B-4118-AE33-9030D7BCCAB1} (0) - 2228 - winproj.exe - OTeleMediumCost.dat", cAlternateFileName="{9C5E7~2.DAT")) returned 1 [0131.557] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefee82a5, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xefee82a5, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xefee82a5, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9C5E7D9B-2A2B-4118-AE33-9030D7BCCAB1} (1) - 2228 - winproj.exe - OTele.dat", cAlternateFileName="{9C5E7~4.DAT")) returned 1 [0131.557] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefee82a5, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xefee82a5, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xefee82a5, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9C5E7D9B-2A2B-4118-AE33-9030D7BCCAB1} (1) - 2228 - winproj.exe - OTeleMediumCost.dat", cAlternateFileName="{9C5E7~3.DAT")) returned 1 [0131.557] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb425304a, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb425304a, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} (0) - 3960 - outlook.exe - OTele.dat", cAlternateFileName="{BE262~1.DAT")) returned 1 [0131.557] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb425304a, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb425304a, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} (0) - 3960 - outlook.exe - OTeleMediumCost.dat", cAlternateFileName="{BE262~2.DAT")) returned 1 [0131.558] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb425304a, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb425304a, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} (1) - 3960 - outlook.exe - OTele.dat", cAlternateFileName="{BE262~3.DAT")) returned 1 [0131.558] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb425304a, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb425304a, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x221, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} (1) - 3960 - outlook.exe - OTeleMediumCost.dat", cAlternateFileName="{BE262~4.DAT")) returned 1 [0131.558] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4279206, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xb4279206, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb4279206, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} (2) - 3960 - outlook.exe - OTele.dat", cAlternateFileName="{B6D00~1.DAT")) returned 1 [0131.558] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.558] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0131.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\OTele", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\OTele", lpFilePart=0x0) returned 0x34 [0131.559] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\OTele\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3009cf0, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb4279206, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436f78 [0131.560] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3009cf0, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb4279206, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.560] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ae56af, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x40ae56af, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x40ae56af, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1B9115E4-1F5D-4CE6-9508-7A7EBBE3534F} (0) - 1304 - excel.exe - OTele.dat", cAlternateFileName="{1B911~1.DAT")) returned 1 [0131.560] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ae56af, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x40ae56af, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x40ae56af, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1B9115E4-1F5D-4CE6-9508-7A7EBBE3534F} (0) - 1304 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{1B911~2.DAT")) returned 1 [0131.561] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ae56af, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x40ae56af, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x40ae56af, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1B9115E4-1F5D-4CE6-9508-7A7EBBE3534F} (1) - 1304 - excel.exe - OTele.dat", cAlternateFileName="{1B911~3.DAT")) returned 1 [0131.561] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ae56af, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x40ae56af, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x40ae56af, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x1f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1B9115E4-1F5D-4CE6-9508-7A7EBBE3534F} (1) - 1304 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{1B911~4.DAT")) returned 1 [0131.561] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ae56af, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x40ae56af, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x40ae56af, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1B9115E4-1F5D-4CE6-9508-7A7EBBE3534F} (2) - 1304 - excel.exe - OTele.dat", cAlternateFileName="{10A22~1.DAT")) returned 1 [0131.561] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414e1537, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x414e1537, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x414e1537, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DD62F26-1A3F-4275-8844-50DDEBF25FB7} (0) - 3576 - excel.exe - OTele.dat", cAlternateFileName="{4DD62~1.DAT")) returned 1 [0131.561] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414e1537, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x414e1537, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x414e1537, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DD62F26-1A3F-4275-8844-50DDEBF25FB7} (0) - 3576 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{4DD62~2.DAT")) returned 1 [0131.561] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414e1537, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x414e1537, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x414e1537, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DD62F26-1A3F-4275-8844-50DDEBF25FB7} (1) - 3576 - excel.exe - OTele.dat", cAlternateFileName="{4DD62~3.DAT")) returned 1 [0131.562] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414e1537, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x414e1537, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x414e1537, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x1f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DD62F26-1A3F-4275-8844-50DDEBF25FB7} (1) - 3576 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{4DD62~4.DAT")) returned 1 [0131.562] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414e1537, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x414e1537, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x414e1537, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DD62F26-1A3F-4275-8844-50DDEBF25FB7} (2) - 3576 - excel.exe - OTele.dat", cAlternateFileName="{411B1~1.DAT")) returned 1 [0131.562] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5f51381, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xc5f51381, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc5f51381, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="{61F167A5-718E-4E8B-8D6B-141DA9EB9DC9} (0) - 3976 - visio.exe - OTele.dat", cAlternateFileName="{61F16~1.DAT")) returned 1 [0131.562] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefec2281, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xefec2281, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xefec2281, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9C5E7D9B-2A2B-4118-AE33-9030D7BCCAB1} (0) - 2228 - winproj.exe - OTele.dat", cAlternateFileName="{9C5E7~1.DAT")) returned 1 [0131.562] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefee82a5, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xefee82a5, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xefee82a5, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x1f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9C5E7D9B-2A2B-4118-AE33-9030D7BCCAB1} (0) - 2228 - winproj.exe - OTeleMediumCost.dat", cAlternateFileName="{9C5E7~2.DAT")) returned 1 [0131.562] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefee82a5, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xefee82a5, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xefee82a5, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9C5E7D9B-2A2B-4118-AE33-9030D7BCCAB1} (1) - 2228 - winproj.exe - OTele.dat", cAlternateFileName="{9C5E7~4.DAT")) returned 1 [0131.563] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefee82a5, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xefee82a5, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xefee82a5, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9C5E7D9B-2A2B-4118-AE33-9030D7BCCAB1} (1) - 2228 - winproj.exe - OTeleMediumCost.dat", cAlternateFileName="{9C5E7~3.DAT")) returned 1 [0131.563] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb425304a, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb425304a, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} (0) - 3960 - outlook.exe - OTele.dat", cAlternateFileName="{BE262~1.DAT")) returned 1 [0131.563] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb425304a, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb425304a, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} (0) - 3960 - outlook.exe - OTeleMediumCost.dat", cAlternateFileName="{BE262~2.DAT")) returned 1 [0131.563] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb425304a, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb425304a, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} (1) - 3960 - outlook.exe - OTele.dat", cAlternateFileName="{BE262~3.DAT")) returned 1 [0131.563] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb425304a, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xb425304a, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb425304a, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x221, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} (1) - 3960 - outlook.exe - OTeleMediumCost.dat", cAlternateFileName="{BE262~4.DAT")) returned 1 [0131.564] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4279206, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xb4279206, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb4279206, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} (2) - 3960 - outlook.exe - OTele.dat", cAlternateFileName="{B6D00~1.DAT")) returned 1 [0131.564] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4279206, ftCreationTime.dwHighDateTime=0x1d5e7c2, ftLastAccessTime.dwLowDateTime=0xb4279206, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xb4279206, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BE262C12-7D57-419E-805F-B347DC7BEF4D} (2) - 3960 - outlook.exe - OTele.dat", cAlternateFileName="{B6D00~1.DAT")) returned 0 [0131.564] FindClose (in: hFindFile=0x1436f78 | out: hFindFile=0x1436f78) returned 1 [0131.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.565] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive", lpFilePart=0x0) returned 0x30 [0131.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0131.565] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive", lpFilePart=0x0) returned 0x30 [0131.565] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd358a482, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e02a2a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0131.565] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd358a482, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e02a2a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.565] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4244211c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45981b75, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x45fc3e4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.6816.0313", cAlternateFileName="173681~1.031")) returned 1 [0131.566] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62cd1c1f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x94192bdc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x94192bdc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.6816.0313_1", cAlternateFileName="173681~2.031")) returned 1 [0131.566] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99698e57, ftCreationTime.dwHighDateTime=0x1d336d7, ftLastAccessTime.dwLowDateTime=0xfc44d7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfc44d7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.6998.0830", cAlternateFileName="173699~1.083")) returned 1 [0131.566] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42fe5d7d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4d63219e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4d63219e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.7076.1026", cAlternateFileName="173707~1.102")) returned 1 [0131.566] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec96f546, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x1e2fe7ce, ftLastAccessTime.dwHighDateTime=0x1d38c44, ftLastWriteTime.dwLowDateTime=0x1e2fe7ce, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.7131.1115", cAlternateFileName="173713~1.111")) returned 1 [0131.566] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59fa41b9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x91e28c9b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e28c9b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.7294.0108", cAlternateFileName="173729~1.010")) returned 1 [0131.566] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f32ceb1, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcd897090, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xcd897090, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0131.567] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef4d171, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5c25c5c7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x17b6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.exe", cAlternateFileName="")) returned 1 [0131.567] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3d07569, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0xe3d07569, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xb1234fa3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrivePersonal.cmd", cAlternateFileName="ONEDRI~1.CMD")) returned 1 [0131.567] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3d07569, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5c6d4c59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x22f6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDriveStandaloneUpdater.exe", cAlternateFileName="ONEDRI~1.EXE")) returned 1 [0131.567] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8b1c81b, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x7a48c8b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x7a48c8b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings", cAlternateFileName="")) returned 1 [0131.567] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd358a482, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd358a482, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xd358a482, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0131.567] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd955c7b, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd4289a6f, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd4289a6f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandaloneUpdater", cAlternateFileName="STANDA~1")) returned 1 [0131.567] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8b1c81b, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x77018ce, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x77018ce, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Update", cAlternateFileName="")) returned 1 [0131.568] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8b1c81b, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x77018ce, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x77018ce, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Update", cAlternateFileName="")) returned 0 [0131.568] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0131.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0131.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0131.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0131.568] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive", lpFilePart=0x0) returned 0x30 [0131.568] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd358a482, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e02a2a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370b8 [0131.568] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd358a482, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e02a2a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.568] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4244211c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45981b75, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x45fc3e4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.6816.0313", cAlternateFileName="173681~1.031")) returned 1 [0131.569] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62cd1c1f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x94192bdc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x94192bdc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.6816.0313_1", cAlternateFileName="173681~2.031")) returned 1 [0131.569] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99698e57, ftCreationTime.dwHighDateTime=0x1d336d7, ftLastAccessTime.dwLowDateTime=0xfc44d7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfc44d7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.6998.0830", cAlternateFileName="173699~1.083")) returned 1 [0131.569] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42fe5d7d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4d63219e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4d63219e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.7076.1026", cAlternateFileName="173707~1.102")) returned 1 [0131.569] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec96f546, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x1e2fe7ce, ftLastAccessTime.dwHighDateTime=0x1d38c44, ftLastWriteTime.dwLowDateTime=0x1e2fe7ce, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.7131.1115", cAlternateFileName="173713~1.111")) returned 1 [0131.569] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59fa41b9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x91e28c9b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e28c9b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.7294.0108", cAlternateFileName="173729~1.010")) returned 1 [0131.569] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f32ceb1, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcd897090, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xcd897090, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0131.569] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef4d171, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5c25c5c7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x17b6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.exe", cAlternateFileName="")) returned 1 [0131.570] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3d07569, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0xe3d07569, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xb1234fa3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrivePersonal.cmd", cAlternateFileName="ONEDRI~1.CMD")) returned 1 [0131.570] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3d07569, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5c6d4c59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x22f6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDriveStandaloneUpdater.exe", cAlternateFileName="ONEDRI~1.EXE")) returned 1 [0131.570] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8b1c81b, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x7a48c8b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x7a48c8b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings", cAlternateFileName="")) returned 1 [0131.570] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd358a482, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd358a482, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xd358a482, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0131.570] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd955c7b, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd4289a6f, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd4289a6f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandaloneUpdater", cAlternateFileName="STANDA~1")) returned 1 [0131.570] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8b1c81b, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x77018ce, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x77018ce, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Update", cAlternateFileName="")) returned 1 [0131.570] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.571] FindClose (in: hFindFile=0x14370b8 | out: hFindFile=0x14370b8) returned 1 [0131.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0131.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0131.571] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313", lpFilePart=0x0) returned 0x3f [0131.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.571] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313", lpFilePart=0x0) returned 0x3f [0131.571] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4244211c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45981b75, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x45fc3e4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437578 [0131.571] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4244211c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45981b75, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x45fc3e4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.571] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45981b75, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45981b75, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x4a31e6fe, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adal.dll", cAlternateFileName="")) returned 1 [0131.572] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc3e4e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45fc3e4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x45fc3e4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0131.572] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc3e4e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45fc3e4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x45fc3e4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 0 [0131.572] FindClose (in: hFindFile=0x1437578 | out: hFindFile=0x1437578) returned 1 [0131.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.572] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313", lpFilePart=0x0) returned 0x3f [0131.572] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4244211c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45981b75, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x45fc3e4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0131.572] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4244211c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45981b75, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x45fc3e4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.573] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45981b75, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45981b75, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x4a31e6fe, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adal.dll", cAlternateFileName="")) returned 1 [0131.573] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc3e4e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45fc3e4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x45fc3e4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0131.573] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.573] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0131.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.573] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313\\images", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313\\images", lpFilePart=0x0) returned 0x46 [0131.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.573] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313\\images", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313\\images", lpFilePart=0x0) returned 0x46 [0131.573] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313\\images\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc3e4e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45fc3e4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x45fc3e4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0131.575] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc3e4e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45fc3e4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x45fc3e4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.575] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc3e4e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x45fc3e4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x45fc3e4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.575] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0131.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.575] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1", lpFilePart=0x0) returned 0x41 [0131.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0131.575] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1", lpFilePart=0x0) returned 0x41 [0131.575] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62cd1c1f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x94192bdc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x94192bdc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0131.608] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62cd1c1f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x94192bdc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x94192bdc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.609] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e292ba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x62e292ba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x62f5a435, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xbf480, dwReserved0=0x0, dwReserved1=0x0, cFileName="adal.dll", cAlternateFileName="")) returned 1 [0131.609] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79a32b5c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79a32b5c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b80026d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1 [0131.610] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c6e6df3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c6e6df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7d50edb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am-et", cAlternateFileName="")) returned 1 [0131.610] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d535015, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92eeb4b7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x995052d5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0131.610] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f806bf, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x62f806bf, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x62fccb49, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x157b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppBlue.png", cAlternateFileName="")) returned 1 [0131.610] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62fccb49, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x62fccb49, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63019007, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xbeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppWhite.png", cAlternateFileName="")) returned 1 [0131.610] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6303f259, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6303f259, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6308b6ff, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 1 [0131.610] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x630fde10, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x630fde10, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6314a2c4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~1.PNG")) returned 1 [0131.611] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6314a2c4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6314a2c4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6319677c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ElevatedAppBlue.png", cAlternateFileName="ELEVAT~1.PNG")) returned 1 [0131.611] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6319677c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6319677c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x631e2c34, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x13cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ElevatedAppWhite.png", cAlternateFileName="ELEVAT~2.PNG")) returned 1 [0131.611] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x631e2c34, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x631e2c34, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6322f10c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1e64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Error.png", cAlternateFileName="")) returned 1 [0131.611] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6322f10c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6322f10c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6327b5c0, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x7080, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETWlog.dll", cAlternateFileName="")) returned 1 [0131.611] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6327b5c0, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6327b5c0, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x632c7a59, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1a05c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fabricmdl2.ttf", cAlternateFileName="FABRIC~1.TTF")) returned 1 [0131.611] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632edcac, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x632edcac, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63313f14, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x34680, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileCoAuth.exe", cAlternateFileName="FILECO~1.EXE")) returned 1 [0131.611] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x633f8d23, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x633f8d23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6363507b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x14678, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileCoAuthLib.dll", cAlternateFileName="FILECO~1.DLL")) returned 1 [0131.612] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6365b2da, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6365b2da, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x636a778f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1c078, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 1 [0131.612] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63740102, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63740102, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6384b15d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2ace78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 1 [0131.612] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63897631, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63897631, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63909d3f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x41c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncApi.dll", cAlternateFileName="FILESY~3.DLL")) returned 1 [0131.612] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x639c8902, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x639c8902, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63a14db0, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2ab080, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncClient.dll", cAlternateFileName="FILESY~4.DLL")) returned 1 [0131.612] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b1fe38, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63b1fe38, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63b460b0, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x37c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncConfig.exe", cAlternateFileName="FILESY~1.EXE")) returned 1 [0131.612] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63bdea0d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63bdea0d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63c2aec5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x169278, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncSessions.dll", cAlternateFileName="FIFC38~1.DLL")) returned 1 [0131.613] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63d0fcdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63d0fcdd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63d5c183, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1ff280, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncShell.dll", cAlternateFileName="FI340C~1.DLL")) returned 1 [0131.613] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63e1ad4e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63e1ad4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63ed9914, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncViews.dll", cAlternateFileName="FI224F~1.DLL")) returned 1 [0131.613] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62e75769, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x65ebd293, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6648cf42, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0131.613] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x664b30ca, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x664b30ca, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x669ea1ca, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0131.613] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66a3667f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x66a3667f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x66efb348, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0131.613] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66fb9e02, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x66fb9e02, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x676222fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0131.613] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6766e7b5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6766e7b5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x67c8a82f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1 [0131.614] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67cd6ce4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x67cd6ce4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x683b195f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0131.614] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x683d7ba5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x683d7ba5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6895b2c6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km-kh", cAlternateFileName="")) returned 1 [0131.614] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x689a779d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x689a779d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x68f9d5af, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0131.614] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6929867f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6929867f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x698680a7, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0131.614] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x698b455c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x698b455c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x69d790b9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kok", cAlternateFileName="")) returned 1 [0131.614] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69d9f315, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x69d9f315, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6acf85b2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ku-arab", cAlternateFileName="")) returned 1 [0131.615] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b9ef2a5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6b9ef2a5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d7706a5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ky", cAlternateFileName="")) returned 1 [0131.615] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e762101, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6e762101, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f7a01b3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lb-lu", cAlternateFileName="")) returned 1 [0131.615] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f984dd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63f984dd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63fe4992, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x6880, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0131.615] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x640a3555, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x640a3555, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x640efa0d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1e9a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0131.615] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x641ae5e2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x641ae5e2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x64947f51, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x18078, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoggingPlatform.dll", cAlternateFileName="LOGGIN~1.DLL")) returned 1 [0131.616] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f812a39, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f812a39, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7082a726, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0131.616] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x712bee62, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x712bee62, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x72074711, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0131.616] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7298b859, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7298b859, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x738be721, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mi-nz", cAlternateFileName="")) returned 1 [0131.616] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x738e4aec, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x738e4aec, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7400ba78, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mk", cAlternateFileName="")) returned 1 [0131.616] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74d4ec0d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x74d4ec0d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7574a9fb, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml-in", cAlternateFileName="")) returned 1 [0131.616] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766577c4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x766577c4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772b5b3d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1 [0131.616] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5a3c7, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77b5a3c7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x78c0ab9c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0131.617] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78ca353b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x78ca353b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7994dd40, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0131.617] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a52e75, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x64a52e75, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x64a9f327, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x6f080, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0131.617] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64c68f6a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x64c68f6a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x64cb5428, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xece78, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0131.617] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x799c044b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x799c044b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7ba1636c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mt-mt", cAlternateFileName="")) returned 1 [0131.617] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c88a7da, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c88a7da, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7d82ff2c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0131.617] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dee4913, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7dee4913, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7ea37c2a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne-np", cAlternateFileName="")) returned 1 [0131.617] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f2dc4c4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f2dc4c4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7fae83f6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0131.617] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80687bb0, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80687bb0, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x821f8fe4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nn-no", cAlternateFileName="")) returned 1 [0131.618] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x841f8082, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x841f8082, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x87940ac2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nso-za", cAlternateFileName="")) returned 1 [0131.618] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64e0c952, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x64e0c952, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x64e32bb1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x16f678, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.exe", cAlternateFileName="")) returned 1 [0131.618] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x651a039f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x651a039f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6521297f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDriveLogo.png", cAlternateFileName="ONEDRI~1.PNG")) returned 1 [0131.618] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6544ec4a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6544ec4a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6544ec4a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrivePersonal.cmd", cAlternateFileName="ONEDRI~1.CMD")) returned 1 [0131.618] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655f2628, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x655f2628, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6563eae4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1a4478, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDriveStandaloneUpdater.exe", cAlternateFileName="ONEDRI~1.EXE")) returned 1 [0131.618] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8884d827, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8884d827, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x89a7b782, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="or-in", cAlternateFileName="")) returned 1 [0131.618] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c2dd635, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8c2dd635, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8dfe14e2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pa", cAlternateFileName="")) returned 1 [0131.619] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f41accd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f41accd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x90838ac4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pa-arab", cAlternateFileName="")) returned 1 [0131.619] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9176bafe, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x9176bafe, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x91fc3ef2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pa-arab-pk", cAlternateFileName="PA-ARA~1")) returned 1 [0131.619] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92fa272d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92fa272d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x93cb15c0, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0131.619] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94192bdc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x94192bdc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x95e55260, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="platforms", cAlternateFileName="PLATFO~1")) returned 1 [0131.619] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65808733, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x65808733, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x65939a33, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x478c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Core.dll", cAlternateFileName="")) returned 1 [0131.619] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65b9bfab, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x65b9bfab, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x66060b50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x50c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5DBus.dll", cAlternateFileName="")) returned 1 [0131.619] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663a7ede, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x663a7ede, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x66597d74, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x4a8480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Gui.dll", cAlternateFileName="")) returned 1 [0131.619] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x668b8ef0, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x668b8ef0, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x668df14f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xd3280, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Network.dll", cAlternateFileName="QT5NET~1.DLL")) returned 1 [0131.620] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66eaeea0, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x66eaeea0, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x66f215aa, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x44e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5PrintSupport.dll", cAlternateFileName="QT5PRI~1.DLL")) returned 1 [0131.621] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x672daf1e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x672daf1e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x673273d0, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x269280, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Qml.dll", cAlternateFileName="")) returned 1 [0131.621] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676222fd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x676222fd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6770711e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x27c280, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Quick.dll", cAlternateFileName="")) returned 1 [0131.621] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679696bc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x679696bc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x679b5b74, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x11a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5QuickControls2.dll", cAlternateFileName="QT5QUI~1.DLL")) returned 1 [0131.621] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c8a82f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x67c8a82f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x67d49401, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x7a480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5QuickTemplates2.dll", cAlternateFileName="QT5QUI~2.DLL")) returned 1 [0131.621] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6838b6e1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6838b6e1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x683d7ba5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x41280, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Svg.dll", cAlternateFileName="")) returned 1 [0131.621] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6885024e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6885024e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6890edf2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x44b280, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Widgets.dll", cAlternateFileName="QT5WID~1.DLL")) returned 1 [0131.621] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d6125d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x68d6125d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x68d874b9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x3be80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5WinExtras.dll", cAlternateFileName="QT5WIN~1.DLL")) returned 1 [0131.621] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x692722dd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x692722dd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6929867f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2266, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaCritical.png", cAlternateFileName="QUOTAC~1.PNG")) returned 1 [0131.621] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x696ea90f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x696ea90f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x69710b74, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaError.png", cAlternateFileName="QUOTAE~1.PNG")) returned 1 [0131.622] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69aca657, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x69aca657, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x69b16b0c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1d59, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaNearing.png", cAlternateFileName="QUOTAN~1.PNG")) returned 1 [0131.622] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1f175f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6a1f175f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b03f98a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x95878, dwReserved0=0x0, dwReserved1=0x0, cFileName="RemoteAccess.dll", cAlternateFileName="REMOTE~1.DLL")) returned 1 [0131.622] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cf18113, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6cf18113, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6e762101, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x3b721, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScreenshotOptIn.gif", cAlternateFileName="SCREEN~1.GIF")) returned 1 [0131.622] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ec668, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f7ec668, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f812a39, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x32078, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0131.622] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705ee3d2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x705ee3d2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x709357eb, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xa080, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqmWrapper.dll", cAlternateFileName="SQMWRA~1.DLL")) returned 1 [0131.622] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef6f73, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x71ef6f73, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x739a353d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x45fe78, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncEngine.dll", cAlternateFileName="SYNCEN~1.DLL")) returned 1 [0131.622] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7496eece, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7496eece, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7587bcf1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x4da80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry.dll", cAlternateFileName="TELEME~1.DLL")) returned 1 [0131.623] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769c4dd9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x769c4dd9, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772b5b3d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x8d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0131.623] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78091616, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x78091616, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7863afb8, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xa21, dwReserved0=0x0, dwReserved1=0x0, cFileName="Warning.png", cAlternateFileName="")) returned 1 [0131.623] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79462f6b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79462f6b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7999a1e6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f478, dwReserved0=0x0, dwReserved1=0x0, cFileName="WnsClientApi.dll", cAlternateFileName="WNSCLI~1.DLL")) returned 1 [0131.623] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.623] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0131.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0131.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0131.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0131.624] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1", lpFilePart=0x0) returned 0x41 [0131.624] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62cd1c1f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x94192bdc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x94192bdc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0131.625] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62cd1c1f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x94192bdc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x94192bdc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.625] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e292ba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x62e292ba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x62f5a435, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xbf480, dwReserved0=0x0, dwReserved1=0x0, cFileName="adal.dll", cAlternateFileName="")) returned 1 [0131.626] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79a32b5c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79a32b5c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b80026d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1 [0131.626] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c6e6df3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c6e6df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7d50edb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am-et", cAlternateFileName="")) returned 1 [0131.626] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d535015, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92eeb4b7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x995052d5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0131.626] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f806bf, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x62f806bf, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x62fccb49, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x157b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppBlue.png", cAlternateFileName="")) returned 1 [0131.626] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62fccb49, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x62fccb49, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63019007, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xbeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppWhite.png", cAlternateFileName="")) returned 1 [0131.626] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6303f259, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6303f259, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6308b6ff, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 1 [0131.626] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x630fde10, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x630fde10, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6314a2c4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~1.PNG")) returned 1 [0131.627] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6314a2c4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6314a2c4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6319677c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ElevatedAppBlue.png", cAlternateFileName="ELEVAT~1.PNG")) returned 1 [0131.627] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6319677c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6319677c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x631e2c34, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x13cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ElevatedAppWhite.png", cAlternateFileName="ELEVAT~2.PNG")) returned 1 [0131.627] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x631e2c34, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x631e2c34, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6322f10c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1e64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Error.png", cAlternateFileName="")) returned 1 [0131.627] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6322f10c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6322f10c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6327b5c0, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x7080, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETWlog.dll", cAlternateFileName="")) returned 1 [0131.627] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6327b5c0, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6327b5c0, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x632c7a59, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1a05c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fabricmdl2.ttf", cAlternateFileName="FABRIC~1.TTF")) returned 1 [0131.628] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632edcac, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x632edcac, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63313f14, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x34680, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileCoAuth.exe", cAlternateFileName="FILECO~1.EXE")) returned 1 [0131.628] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x633f8d23, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x633f8d23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6363507b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x14678, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileCoAuthLib.dll", cAlternateFileName="FILECO~1.DLL")) returned 1 [0131.628] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6365b2da, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6365b2da, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x636a778f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1c078, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 1 [0131.628] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63740102, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63740102, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6384b15d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2ace78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 1 [0131.628] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63897631, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63897631, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63909d3f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x41c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncApi.dll", cAlternateFileName="FILESY~3.DLL")) returned 1 [0131.628] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x639c8902, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x639c8902, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63a14db0, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2ab080, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncClient.dll", cAlternateFileName="FILESY~4.DLL")) returned 1 [0131.629] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b1fe38, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63b1fe38, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63b460b0, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x37c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncConfig.exe", cAlternateFileName="FILESY~1.EXE")) returned 1 [0131.629] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63bdea0d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63bdea0d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63c2aec5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x169278, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncSessions.dll", cAlternateFileName="FIFC38~1.DLL")) returned 1 [0131.629] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63d0fcdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63d0fcdd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63d5c183, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1ff280, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncShell.dll", cAlternateFileName="FI340C~1.DLL")) returned 1 [0131.629] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63e1ad4e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63e1ad4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63ed9914, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncViews.dll", cAlternateFileName="FI224F~1.DLL")) returned 1 [0131.629] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62e75769, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x65ebd293, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6648cf42, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0131.629] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x664b30ca, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x664b30ca, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x669ea1ca, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0131.629] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66a3667f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x66a3667f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x66efb348, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0131.630] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66fb9e02, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x66fb9e02, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x676222fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0131.630] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6766e7b5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6766e7b5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x67c8a82f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1 [0131.630] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67cd6ce4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x67cd6ce4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x683b195f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0131.630] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x683d7ba5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x683d7ba5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6895b2c6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km-kh", cAlternateFileName="")) returned 1 [0131.630] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x689a779d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x689a779d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x68f9d5af, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0131.630] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6929867f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6929867f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x698680a7, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0131.630] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x698b455c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x698b455c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x69d790b9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kok", cAlternateFileName="")) returned 1 [0131.630] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69d9f315, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x69d9f315, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6acf85b2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ku-arab", cAlternateFileName="")) returned 1 [0131.631] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b9ef2a5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6b9ef2a5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d7706a5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ky", cAlternateFileName="")) returned 1 [0131.631] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e762101, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6e762101, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f7a01b3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lb-lu", cAlternateFileName="")) returned 1 [0131.631] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f984dd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63f984dd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63fe4992, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x6880, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0131.631] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x640a3555, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x640a3555, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x640efa0d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1e9a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0131.631] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x641ae5e2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x641ae5e2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x64947f51, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x18078, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoggingPlatform.dll", cAlternateFileName="LOGGIN~1.DLL")) returned 1 [0131.631] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f812a39, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f812a39, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7082a726, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0131.631] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x712bee62, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x712bee62, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x72074711, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0131.632] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7298b859, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7298b859, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x738be721, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mi-nz", cAlternateFileName="")) returned 1 [0131.632] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x738e4aec, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x738e4aec, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7400ba78, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mk", cAlternateFileName="")) returned 1 [0131.632] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74d4ec0d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x74d4ec0d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7574a9fb, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml-in", cAlternateFileName="")) returned 1 [0131.632] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766577c4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x766577c4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772b5b3d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1 [0131.632] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5a3c7, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77b5a3c7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x78c0ab9c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0131.632] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78ca353b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x78ca353b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7994dd40, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0131.632] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a52e75, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x64a52e75, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x64a9f327, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x6f080, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0131.632] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64c68f6a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x64c68f6a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x64cb5428, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xece78, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0131.633] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x799c044b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x799c044b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7ba1636c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mt-mt", cAlternateFileName="")) returned 1 [0131.633] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c88a7da, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c88a7da, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7d82ff2c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0131.633] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dee4913, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7dee4913, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7ea37c2a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne-np", cAlternateFileName="")) returned 1 [0131.633] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f2dc4c4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f2dc4c4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7fae83f6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0131.633] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80687bb0, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80687bb0, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x821f8fe4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nn-no", cAlternateFileName="")) returned 1 [0131.633] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x841f8082, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x841f8082, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x87940ac2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nso-za", cAlternateFileName="")) returned 1 [0131.633] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64e0c952, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x64e0c952, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x64e32bb1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x16f678, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.exe", cAlternateFileName="")) returned 1 [0131.634] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x651a039f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x651a039f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6521297f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDriveLogo.png", cAlternateFileName="ONEDRI~1.PNG")) returned 1 [0131.634] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6544ec4a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6544ec4a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6544ec4a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrivePersonal.cmd", cAlternateFileName="ONEDRI~1.CMD")) returned 1 [0131.634] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655f2628, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x655f2628, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6563eae4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1a4478, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDriveStandaloneUpdater.exe", cAlternateFileName="ONEDRI~1.EXE")) returned 1 [0131.634] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8884d827, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8884d827, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x89a7b782, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="or-in", cAlternateFileName="")) returned 1 [0131.634] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c2dd635, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8c2dd635, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8dfe14e2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pa", cAlternateFileName="")) returned 1 [0131.634] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f41accd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f41accd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x90838ac4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pa-arab", cAlternateFileName="")) returned 1 [0131.634] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9176bafe, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x9176bafe, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x91fc3ef2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pa-arab-pk", cAlternateFileName="PA-ARA~1")) returned 1 [0131.635] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92fa272d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92fa272d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x93cb15c0, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0131.635] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94192bdc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x94192bdc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x95e55260, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="platforms", cAlternateFileName="PLATFO~1")) returned 1 [0131.635] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65808733, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x65808733, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x65939a33, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x478c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Core.dll", cAlternateFileName="")) returned 1 [0131.635] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65b9bfab, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x65b9bfab, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x66060b50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x50c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5DBus.dll", cAlternateFileName="")) returned 1 [0131.635] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663a7ede, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x663a7ede, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x66597d74, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x4a8480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Gui.dll", cAlternateFileName="")) returned 1 [0131.635] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x668b8ef0, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x668b8ef0, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x668df14f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xd3280, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Network.dll", cAlternateFileName="QT5NET~1.DLL")) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66eaeea0, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x66eaeea0, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x66f215aa, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x44e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5PrintSupport.dll", cAlternateFileName="QT5PRI~1.DLL")) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x672daf1e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x672daf1e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x673273d0, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x269280, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Qml.dll", cAlternateFileName="")) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676222fd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x676222fd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6770711e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x27c280, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Quick.dll", cAlternateFileName="")) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679696bc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x679696bc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x679b5b74, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x11a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5QuickControls2.dll", cAlternateFileName="QT5QUI~1.DLL")) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c8a82f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x67c8a82f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x67d49401, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x7a480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5QuickTemplates2.dll", cAlternateFileName="QT5QUI~2.DLL")) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6838b6e1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6838b6e1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x683d7ba5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x41280, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Svg.dll", cAlternateFileName="")) returned 1 [0131.637] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6885024e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6885024e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6890edf2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x44b280, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Widgets.dll", cAlternateFileName="QT5WID~1.DLL")) returned 1 [0131.637] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d6125d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x68d6125d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x68d874b9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x3be80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5WinExtras.dll", cAlternateFileName="QT5WIN~1.DLL")) returned 1 [0131.637] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x692722dd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x692722dd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6929867f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2266, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaCritical.png", cAlternateFileName="QUOTAC~1.PNG")) returned 1 [0131.637] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x696ea90f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x696ea90f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x69710b74, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaError.png", cAlternateFileName="QUOTAE~1.PNG")) returned 1 [0131.637] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69aca657, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x69aca657, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x69b16b0c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1d59, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaNearing.png", cAlternateFileName="QUOTAN~1.PNG")) returned 1 [0131.637] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1f175f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6a1f175f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b03f98a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x95878, dwReserved0=0x0, dwReserved1=0x0, cFileName="RemoteAccess.dll", cAlternateFileName="REMOTE~1.DLL")) returned 1 [0131.638] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cf18113, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6cf18113, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6e762101, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x3b721, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScreenshotOptIn.gif", cAlternateFileName="SCREEN~1.GIF")) returned 1 [0131.638] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ec668, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f7ec668, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f812a39, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x32078, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0131.638] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705ee3d2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x705ee3d2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x709357eb, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xa080, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqmWrapper.dll", cAlternateFileName="SQMWRA~1.DLL")) returned 1 [0131.638] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef6f73, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x71ef6f73, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x739a353d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x45fe78, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncEngine.dll", cAlternateFileName="SYNCEN~1.DLL")) returned 1 [0131.638] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7496eece, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7496eece, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7587bcf1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x4da80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry.dll", cAlternateFileName="TELEME~1.DLL")) returned 1 [0131.639] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769c4dd9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x769c4dd9, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772b5b3d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x8d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0131.639] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78091616, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x78091616, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7863afb8, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xa21, dwReserved0=0x0, dwReserved1=0x0, cFileName="Warning.png", cAlternateFileName="")) returned 1 [0131.639] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79462f6b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79462f6b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7999a1e6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f478, dwReserved0=0x0, dwReserved1=0x0, cFileName="WnsClientApi.dll", cAlternateFileName="WNSCLI~1.DLL")) returned 1 [0131.639] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79462f6b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79462f6b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7999a1e6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f478, dwReserved0=0x0, dwReserved1=0x0, cFileName="WnsClientApi.dll", cAlternateFileName="WNSCLI~1.DLL")) returned 0 [0131.639] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0131.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0131.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0131.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\af", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\af", lpFilePart=0x0) returned 0x44 [0131.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.641] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\af", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\af", lpFilePart=0x0) returned 0x44 [0131.641] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\af\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79a32b5c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79a32b5c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b80026d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0131.800] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79a32b5c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79a32b5c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b80026d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.800] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b80026d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b80026d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7c4f6f50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1e880, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.800] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.800] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0131.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.801] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\am-et", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\am-et", lpFilePart=0x0) returned 0x47 [0131.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.801] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\am-et", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\am-et", lpFilePart=0x0) returned 0x47 [0131.801] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\am-et\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c6e6df3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c6e6df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7d50edb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374f8 [0131.804] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c6e6df3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c6e6df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7d50edb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.805] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d50edb6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7d50edb6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7d535015, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x17280, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.805] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.805] FindClose (in: hFindFile=0x14374f8 | out: hFindFile=0x14374f8) returned 1 [0131.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\amd64", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\amd64", lpFilePart=0x0) returned 0x47 [0131.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\amd64", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\amd64", lpFilePart=0x0) returned 0x47 [0131.805] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\amd64\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d535015, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92eeb4b7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x995052d5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437738 [0131.807] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d535015, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92eeb4b7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x995052d5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.807] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc35eb7, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7dc35eb7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7e0faa24, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x14e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileCoAuthLib64.dll", cAlternateFileName="FILECO~1.DLL")) returned 1 [0131.807] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f079f04, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f079f04, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8019cdea, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x59e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncApi64.dll", cAlternateFileName="FILESY~1.DLL")) returned 1 [0131.808] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x819a0c09, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x819a0c09, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8932e41e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x211c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncShell64.dll", cAlternateFileName="FILESY~2.DLL")) returned 1 [0131.808] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aff0c6b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8aff0c6b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8c5b229c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1ea80, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoggingPlatform64.dll", cAlternateFileName="LOGGIN~1.DLL")) returned 1 [0131.808] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4d987d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f4d987d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x91791d57, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xa1078, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0131.808] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92eeb4b7, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92eeb4b7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x955fce85, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0xeb078, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0131.808] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x995052d5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x995052d5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9c8ba415, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry64.dll", cAlternateFileName="TELEME~1.DLL")) returned 1 [0131.808] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.808] FindClose (in: hFindFile=0x1437738 | out: hFindFile=0x1437738) returned 1 [0131.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\images", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\images", lpFilePart=0x0) returned 0x48 [0131.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\images", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\images", lpFilePart=0x0) returned 0x48 [0131.810] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\images\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62e75769, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x65ebd293, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6648cf42, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0131.811] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62e75769, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x65ebd293, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6648cf42, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.812] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63313f14, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63313f14, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x633f8d23, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x172e, dwReserved0=0x0, dwReserved1=0x0, cFileName="iceBucket.svg", cAlternateFileName="ICEBUC~1.SVG")) returned 1 [0131.812] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6378c70a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6378c70a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6378c70a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="loading.svg", cAlternateFileName="")) returned 1 [0131.812] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63e40fc3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x63e40fc3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x63e67222, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x46c, dwReserved0=0x0, dwReserved1=0x0, cFileName="onedrivePremium.svg", cAlternateFileName="ONEDRI~1.SVG")) returned 1 [0131.812] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64862ffe, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x64862ffe, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x64947f51, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1137, dwReserved0=0x0, dwReserved1=0x0, cFileName="partiallyFreezing.svg", cAlternateFileName="PARTIA~1.SVG")) returned 1 [0131.821] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6512dc37, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6512dc37, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x651ec84a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x56d, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.svg", cAlternateFileName="")) returned 1 [0131.821] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65854d45, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x65854d45, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6587af94, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x56f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settingsdisabled.svg", cAlternateFileName="SETTIN~1.SVG")) returned 1 [0131.821] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65ebd293, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x65ebd293, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x65f0977a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x12c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="stackedIceCubes.svg", cAlternateFileName="STACKE~1.SVG")) returned 1 [0131.821] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6648cf42, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6648cf42, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x664b30ca, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x72d, dwReserved0=0x0, dwReserved1=0x0, cFileName="waterGlass.svg", cAlternateFileName="WATERG~1.SVG")) returned 1 [0131.822] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.822] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0131.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\is", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\is", lpFilePart=0x0) returned 0x44 [0131.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\is", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\is", lpFilePart=0x0) returned 0x44 [0131.823] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\is\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x664b30ca, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x664b30ca, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x669ea1ca, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0131.847] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x664b30ca, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x664b30ca, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x669ea1ca, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.847] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x669ea1ca, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x669ea1ca, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x66a3667f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1e680, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.847] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.847] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0131.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.847] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\it", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\it", lpFilePart=0x0) returned 0x44 [0131.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\it", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\it", lpFilePart=0x0) returned 0x44 [0131.848] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\it\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66a3667f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x66a3667f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x66efb348, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0131.848] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66a3667f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x66a3667f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x66efb348, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.848] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66efb348, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x66efb348, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x66f215aa, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1f880, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.848] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.849] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0131.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.849] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ja", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ja", lpFilePart=0x0) returned 0x44 [0131.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.849] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ja", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ja", lpFilePart=0x0) returned 0x44 [0131.849] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ja\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66fb9e02, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x66fb9e02, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x676222fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0131.850] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66fb9e02, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x66fb9e02, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x676222fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.850] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676222fd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x676222fd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6766e7b5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x14680, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.850] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.850] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0131.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ka", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ka", lpFilePart=0x0) returned 0x44 [0131.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ka", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ka", lpFilePart=0x0) returned 0x44 [0131.851] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ka\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6766e7b5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6766e7b5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x67c8a82f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0131.851] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6766e7b5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6766e7b5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x67c8a82f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.852] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c8a82f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x67c8a82f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x67cd6ce4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x20078, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.852] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.852] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0131.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kk", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kk", lpFilePart=0x0) returned 0x44 [0131.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kk", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kk", lpFilePart=0x0) returned 0x44 [0131.852] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kk\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67cd6ce4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x67cd6ce4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x683b195f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0131.853] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67cd6ce4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x67cd6ce4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x683b195f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.853] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683b195f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x683b195f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x683d7ba5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1fa80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.853] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.853] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0131.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.853] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\km-kh", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\km-kh", lpFilePart=0x0) returned 0x47 [0131.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.854] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\km-kh", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\km-kh", lpFilePart=0x0) returned 0x47 [0131.854] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\km-kh\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x683d7ba5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x683d7ba5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6895b2c6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374b8 [0131.854] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x683d7ba5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x683d7ba5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6895b2c6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.854] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6895b2c6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6895b2c6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x689a779d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.855] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.855] FindClose (in: hFindFile=0x14374b8 | out: hFindFile=0x14374b8) returned 1 [0131.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kn", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kn", lpFilePart=0x0) returned 0x44 [0131.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kn", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kn", lpFilePart=0x0) returned 0x44 [0131.855] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kn\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x689a779d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x689a779d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x68f9d5af, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0131.856] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x689a779d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x689a779d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x68f9d5af, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.856] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f9d5af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x68f9d5af, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6929867f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x20e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.856] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.856] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0131.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ko", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ko", lpFilePart=0x0) returned 0x44 [0131.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ko", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ko", lpFilePart=0x0) returned 0x44 [0131.856] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ko\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6929867f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6929867f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x698680a7, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0131.857] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6929867f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6929867f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x698680a7, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.857] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698680a7, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x698680a7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x698b455c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x13880, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.857] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.858] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0131.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.858] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kok", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kok", lpFilePart=0x0) returned 0x45 [0131.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.858] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kok", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kok", lpFilePart=0x0) returned 0x45 [0131.858] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\kok\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x698b455c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x698b455c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x69d790b9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437078 [0131.858] FindNextFileW (in: hFindFile=0x1437078, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x698b455c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x698b455c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x69d790b9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.858] FindNextFileW (in: hFindFile=0x1437078, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d790b9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x69d790b9, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x69d9f315, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1e680, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.859] FindNextFileW (in: hFindFile=0x1437078, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.859] FindClose (in: hFindFile=0x1437078 | out: hFindFile=0x1437078) returned 1 [0131.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.859] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ku-arab", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ku-arab", lpFilePart=0x0) returned 0x49 [0131.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.859] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ku-arab", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ku-arab", lpFilePart=0x0) returned 0x49 [0131.859] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ku-arab\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69d9f315, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x69d9f315, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6acf85b2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0131.949] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69d9f315, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x69d9f315, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6acf85b2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.949] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acf85b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6acf85b2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b491e37, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1e880, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.949] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.949] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0131.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ky", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ky", lpFilePart=0x0) returned 0x44 [0131.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ky", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ky", lpFilePart=0x0) returned 0x44 [0131.949] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ky\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b9ef2a5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6b9ef2a5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d7706a5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0131.950] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b9ef2a5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6b9ef2a5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d7706a5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.950] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d7706a5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d7706a5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6e67d2d9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1e680, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.951] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.951] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0131.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.951] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lb-lu", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lb-lu", lpFilePart=0x0) returned 0x47 [0131.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.951] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lb-lu", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lb-lu", lpFilePart=0x0) returned 0x47 [0131.951] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lb-lu\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e762101, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6e762101, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f7a01b3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374b8 [0131.952] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e762101, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6e762101, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f7a01b3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.952] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7a01b3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f7a01b3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f812a39, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x21680, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.952] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.952] FindClose (in: hFindFile=0x14374b8 | out: hFindFile=0x14374b8) returned 1 [0131.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.952] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lt", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lt", lpFilePart=0x0) returned 0x44 [0131.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.953] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lt", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lt", lpFilePart=0x0) returned 0x44 [0131.953] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lt\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f812a39, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f812a39, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7082a726, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0131.953] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f812a39, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f812a39, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7082a726, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.954] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7082a726, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7082a726, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x71082c64, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1f678, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.954] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.954] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0131.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0131.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0131.954] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lv", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lv", lpFilePart=0x0) returned 0x44 [0131.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0131.954] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lv", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lv", lpFilePart=0x0) returned 0x44 [0131.954] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\lv\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x712bee62, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x712bee62, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x72074711, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370f8 [0131.955] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x712bee62, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x712bee62, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x72074711, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.955] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72074711, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x72074711, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7274f380, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1ee80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0131.955] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.955] FindClose (in: hFindFile=0x14370f8 | out: hFindFile=0x14370f8) returned 1 [0131.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.285] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mi-nz", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mi-nz", lpFilePart=0x0) returned 0x47 [0132.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mi-nz", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mi-nz", lpFilePart=0x0) returned 0x47 [0132.286] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mi-nz\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7298b859, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7298b859, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x738be721, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436f78 [0132.287] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7298b859, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7298b859, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x738be721, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.287] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738be721, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x738be721, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x738e4aec, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1e680, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.287] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.287] FindClose (in: hFindFile=0x1436f78 | out: hFindFile=0x1436f78) returned 1 [0132.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mk", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mk", lpFilePart=0x0) returned 0x44 [0132.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mk", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mk", lpFilePart=0x0) returned 0x44 [0132.288] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mk\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x738e4aec, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x738e4aec, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7400ba78, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0132.290] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x738e4aec, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x738e4aec, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7400ba78, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.290] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7400ba78, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7400ba78, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x74568f5f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1f680, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.291] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.291] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0132.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ml-in", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ml-in", lpFilePart=0x0) returned 0x47 [0132.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ml-in", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ml-in", lpFilePart=0x0) returned 0x47 [0132.291] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ml-in\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74d4ec0d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x74d4ec0d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7574a9fb, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0132.292] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74d4ec0d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x74d4ec0d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7574a9fb, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.292] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7574a9fb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7574a9fb, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x760fa2d7, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x22480, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.292] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.292] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0132.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.293] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mn", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mn", lpFilePart=0x0) returned 0x44 [0132.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.293] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mn", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mn", lpFilePart=0x0) returned 0x44 [0132.293] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mn\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766577c4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x766577c4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772b5b3d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0132.294] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766577c4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x766577c4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772b5b3d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.294] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772b5b3d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x772b5b3d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7791e076, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1e880, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.294] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.294] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0132.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.294] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mr", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mr", lpFilePart=0x0) returned 0x44 [0132.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.294] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mr", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mr", lpFilePart=0x0) returned 0x44 [0132.294] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mr\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5a3c7, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77b5a3c7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x78c0ab9c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374f8 [0132.296] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5a3c7, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77b5a3c7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x78c0ab9c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.296] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78c0ab9c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x78c0ab9c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x78ca353b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1e880, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.296] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.296] FindClose (in: hFindFile=0x14374f8 | out: hFindFile=0x14374f8) returned 1 [0132.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.296] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ms", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ms", lpFilePart=0x0) returned 0x44 [0132.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.297] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ms", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ms", lpFilePart=0x0) returned 0x44 [0132.297] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ms\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78ca353b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x78ca353b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7994dd40, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0132.297] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78ca353b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x78ca353b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7994dd40, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.298] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7994dd40, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7994dd40, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7999a1e6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1f280, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.298] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.298] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0132.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.298] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mt-mt", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mt-mt", lpFilePart=0x0) returned 0x47 [0132.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.298] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mt-mt", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mt-mt", lpFilePart=0x0) returned 0x47 [0132.298] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\mt-mt\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x799c044b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x799c044b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7ba1636c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0132.299] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x799c044b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x799c044b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7ba1636c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.299] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba1636c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7ba1636c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7c7f1e77, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1f680, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.299] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.299] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0132.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.299] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nb-no", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nb-no", lpFilePart=0x0) returned 0x47 [0132.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.300] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nb-no", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nb-no", lpFilePart=0x0) returned 0x47 [0132.300] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nb-no\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c88a7da, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c88a7da, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7d82ff2c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0132.300] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c88a7da, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c88a7da, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7d82ff2c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.300] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d82ff2c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7d82ff2c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7de4bfc8, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1d880, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.300] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.300] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0132.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.301] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ne-np", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ne-np", lpFilePart=0x0) returned 0x47 [0132.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.301] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ne-np", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ne-np", lpFilePart=0x0) returned 0x47 [0132.301] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\ne-np\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dee4913, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7dee4913, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7ea37c2a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0132.301] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dee4913, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7dee4913, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7ea37c2a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.302] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ea37c2a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7ea37c2a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7f1d144c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x20078, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.302] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.302] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0132.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nl", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nl", lpFilePart=0x0) returned 0x44 [0132.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nl", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nl", lpFilePart=0x0) returned 0x44 [0132.302] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nl\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f2dc4c4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f2dc4c4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7fae83f6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0132.303] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f2dc4c4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f2dc4c4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7fae83f6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.303] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fae83f6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7fae83f6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80471ab5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1fc80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.303] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.303] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0132.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.303] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nn-no", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nn-no", lpFilePart=0x0) returned 0x47 [0132.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.303] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nn-no", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nn-no", lpFilePart=0x0) returned 0x47 [0132.303] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nn-no\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80687bb0, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80687bb0, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x821f8fe4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0132.304] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80687bb0, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80687bb0, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x821f8fe4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.304] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x821f8fe4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x821f8fe4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83499640, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1d480, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.304] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.305] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0132.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.305] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nso-za", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nso-za", lpFilePart=0x0) returned 0x48 [0132.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.305] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nso-za", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nso-za", lpFilePart=0x0) returned 0x48 [0132.305] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\nso-za\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x841f8082, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x841f8082, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x87940ac2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437578 [0132.305] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x841f8082, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x841f8082, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x87940ac2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.306] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87940ac2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x87940ac2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8878ec7a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x20480, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.306] FindNextFileW (in: hFindFile=0x1437578, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.306] FindClose (in: hFindFile=0x1437578 | out: hFindFile=0x1437578) returned 1 [0132.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.306] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\or-in", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\or-in", lpFilePart=0x0) returned 0x47 [0132.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.306] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\or-in", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\or-in", lpFilePart=0x0) returned 0x47 [0132.306] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\or-in\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8884d827, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8884d827, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x89a7b782, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437738 [0132.307] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8884d827, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8884d827, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x89a7b782, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.307] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a7b782, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x89a7b782, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8bbdc723, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x21a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.307] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.307] FindClose (in: hFindFile=0x1437738 | out: hFindFile=0x1437738) returned 1 [0132.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.308] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa", lpFilePart=0x0) returned 0x44 [0132.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.308] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa", lpFilePart=0x0) returned 0x44 [0132.308] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c2dd635, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8c2dd635, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8dfe14e2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0132.308] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c2dd635, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8c2dd635, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8dfe14e2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.308] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dfe14e2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8dfe14e2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8ef09cab, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1f280, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.309] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.309] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0132.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.309] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa-arab", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa-arab", lpFilePart=0x0) returned 0x49 [0132.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.309] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa-arab", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa-arab", lpFilePart=0x0) returned 0x49 [0132.309] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa-arab\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f41accd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f41accd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x90838ac4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437478 [0132.310] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f41accd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f41accd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x90838ac4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.310] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90838ac4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x90838ac4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x915a1ebb, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1ec80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.310] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.310] FindClose (in: hFindFile=0x1437478 | out: hFindFile=0x1437478) returned 1 [0132.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.310] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa-arab-pk", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa-arab-pk", lpFilePart=0x0) returned 0x4c [0132.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.310] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa-arab-pk", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa-arab-pk", lpFilePart=0x0) returned 0x4c [0132.311] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pa-arab-pk\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9176bafe, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x9176bafe, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x91fc3ef2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0132.311] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9176bafe, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x9176bafe, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x91fc3ef2, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.311] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fc3ef2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x91fc3ef2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x92d10e9e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x1ec80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.312] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.312] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0132.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.312] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pl", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pl", lpFilePart=0x0) returned 0x44 [0132.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.312] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pl", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pl", lpFilePart=0x0) returned 0x44 [0132.312] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\pl\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92fa272d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92fa272d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x93cb15c0, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14375b8 [0132.313] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92fa272d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92fa272d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x93cb15c0, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.313] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93cb15c0, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x93cb15c0, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9412f7df, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x20c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0132.313] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.313] FindClose (in: hFindFile=0x14375b8 | out: hFindFile=0x14375b8) returned 1 [0132.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.313] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\platforms", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\platforms", lpFilePart=0x0) returned 0x4b [0132.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.313] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\platforms", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\platforms", lpFilePart=0x0) returned 0x4b [0132.313] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6816.0313_1\\platforms\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94192bdc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x94192bdc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x95e55260, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0132.458] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94192bdc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x94192bdc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x95e55260, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.458] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e55260, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x95e55260, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9c8ba415, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x48000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qwindows.dll", cAlternateFileName="")) returned 1 [0132.458] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.458] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0132.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.458] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830", lpFilePart=0x0) returned 0x3f [0132.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0132.458] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830", lpFilePart=0x0) returned 0x3f [0132.459] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99698e57, ftCreationTime.dwHighDateTime=0x1d336d7, ftLastAccessTime.dwLowDateTime=0xfc44d7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfc44d7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0132.459] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99698e57, ftCreationTime.dwHighDateTime=0x1d336d7, ftLastAccessTime.dwLowDateTime=0xfc44d7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfc44d7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.459] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99698e57, ftCreationTime.dwHighDateTime=0x1d336d7, ftLastAccessTime.dwLowDateTime=0xfc44d7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfc44d7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.460] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0132.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0132.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0132.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0132.460] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830", lpFilePart=0x0) returned 0x3f [0132.460] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99698e57, ftCreationTime.dwHighDateTime=0x1d336d7, ftLastAccessTime.dwLowDateTime=0xfc44d7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfc44d7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0132.460] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99698e57, ftCreationTime.dwHighDateTime=0x1d336d7, ftLastAccessTime.dwLowDateTime=0xfc44d7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfc44d7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.460] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99698e57, ftCreationTime.dwHighDateTime=0x1d336d7, ftLastAccessTime.dwLowDateTime=0xfc44d7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfc44d7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.460] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0132.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0132.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0132.460] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7076.1026", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7076.1026", lpFilePart=0x0) returned 0x3f [0132.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0132.460] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7076.1026", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7076.1026", lpFilePart=0x0) returned 0x3f [0132.460] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7076.1026\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42fe5d7d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4d63219e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4d8482cc, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0132.463] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42fe5d7d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4d63219e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4d8482cc, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.466] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x432220cc, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x432220cc, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x432220cc, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0xd5ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="adal.dll", cAlternateFileName="")) returned 1 [0132.466] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x432483c3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x432483c3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x432483c3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="alertIcon.png", cAlternateFileName="ALERTI~1.PNG")) returned 1 [0132.466] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4326e587, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4326e587, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x432baa3b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0132.466] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x432baa3b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x432baa3b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x432baa3b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0132.466] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x432e0d21, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x432e0d21, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x432e0d21, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0132.466] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43306ef9, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43306ef9, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43306ef9, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0132.466] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4332d1b3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4332d1b3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4332d1b3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x54c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="AP87F4~1.DLL")) returned 1 [0132.467] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433533b1, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x433533b1, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x433533b1, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0132.467] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433533b1, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x433533b1, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x433533b1, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0132.467] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4337960b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4337960b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4337960b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="AP4F63~1.DLL")) returned 1 [0132.467] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4339f8f1, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4339f8f1, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4339f8f1, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="AP26B7~1.DLL")) returned 1 [0132.467] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433c5ab8, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x433c5ab8, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x433c5ab8, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="AP40C7~1.DLL")) returned 1 [0132.467] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433ebd08, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x433ebd08, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x433ebd08, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="APD0F3~1.DLL")) returned 1 [0132.467] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433ebd08, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x433ebd08, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x433ebd08, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x50c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0132.467] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43411f70, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43411f70, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43411f70, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="AP25B1~1.DLL")) returned 1 [0132.467] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434381b9, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x434381b9, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4345e41a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="AP8526~1.DLL")) returned 1 [0132.468] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4345e41a, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4345e41a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4345e41a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="AP507A~1.DLL")) returned 1 [0132.468] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43484682, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43484682, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43484682, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="APEF2A~1.DLL")) returned 1 [0132.468] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434d0b3d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x434d0b3d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x434d0b3d, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0132.468] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434f6d90, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x434f6d90, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x434f6d90, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x44c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="AP5574~1.DLL")) returned 1 [0132.468] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434f6d90, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x434f6d90, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x434f6d90, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x44c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="APDC30~1.DLL")) returned 1 [0132.468] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4351cff1, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4351cff1, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4351cff1, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="AP743F~1.DLL")) returned 1 [0132.468] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435432b8, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x435432b8, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x435432b8, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="AP7678~1.DLL")) returned 1 [0132.468] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435694a2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x435694a2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4358f6e7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0132.468] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435b5953, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x435b5953, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x435b5953, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="APFAD9~1.DLL")) returned 1 [0132.470] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435dbbba, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x435dbbba, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x435dbbba, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0132.470] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43601e14, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43601e14, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4362805d, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="APF2DB~1.DLL")) returned 1 [0132.470] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4364e2c2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4364e2c2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4364e2c2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0132.470] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4367452a, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4367452a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4367452a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x56c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0132.470] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4369a779, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4369a779, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4369a779, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0132.470] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436c09da, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x436c09da, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4373317b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0132.470] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x439bb982, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x439bb982, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43a7a4f2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0132.471] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ac695b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43ac695b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43ac695b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0132.471] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b12e49, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43b12e49, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43b39099, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x70c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0132.471] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b5f2f0, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43b5f2f0, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43b5f2f0, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x66c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0132.471] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b85540, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43b85540, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43b85540, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x11cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0132.471] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bab77b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43bab77b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43bab77b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0132.471] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bab77b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43bab77b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43bab77b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x58c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0132.472] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bd19ea, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43bd19ea, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43bd19ea, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x5ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0132.472] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bf7c41, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43bf7c41, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43bf7c41, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x5ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0132.472] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c1de9b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43c1de9b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43c1de9b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x50c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0132.472] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c1de9b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43c1de9b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43c1de9b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0132.472] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c440fc, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43c440fc, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43c440fc, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x157b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppBlue.png", cAlternateFileName="")) returned 1 [0132.472] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c6a348, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43c6a348, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43c6a348, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1d96, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppErrorBlue.png", cAlternateFileName="APPERR~1.PNG")) returned 1 [0132.472] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c905a2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43c905a2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43c905a2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppErrorWhite.png", cAlternateFileName="APPERR~2.PNG")) returned 1 [0132.472] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c905a2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43c905a2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43c905a2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0xbeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppWhite.png", cAlternateFileName="")) returned 1 [0132.472] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43cb6811, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43cb6811, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43cb6811, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 1 [0132.472] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43cdca64, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43cdca64, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43cdca64, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~1.PNG")) returned 1 [0132.473] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d02cc5, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43d02cc5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43d02cc5, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1914, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSyncLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 1 [0132.473] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d28f1f, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43d28f1f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43d28f1f, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ElevatedAppBlue.png", cAlternateFileName="ELEVAT~1.PNG")) returned 1 [0132.473] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d4f17d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43d4f17d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43d4f17d, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x13cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ElevatedAppWhite.png", cAlternateFileName="ELEVAT~2.PNG")) returned 1 [0132.473] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d753cc, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43d753cc, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43d753cc, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1e64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Error.png", cAlternateFileName="")) returned 1 [0132.474] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d9b627, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43d9b627, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43d9b627, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ErrorPage.html", cAlternateFileName="ERRORP~1.HTM")) returned 1 [0132.474] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43dc1881, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43dc1881, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43dc1881, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETWlog.dll", cAlternateFileName="")) returned 1 [0132.474] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43de7adb, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43de7adb, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43e0dd2e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x3fcc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileCoAuth.exe", cAlternateFileName="FILECO~1.EXE")) returned 1 [0132.474] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e5a208, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43e5a208, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43e5a208, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x268c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileCoAuthLib.dll", cAlternateFileName="FILECO~1.DLL")) returned 1 [0132.474] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x441eda6d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x441eda6d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x441eda6d, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x206c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 1 [0132.474] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44450056, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x44450056, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x444762b0, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0xab4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 1 [0132.474] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x446feaa9, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x446feaa9, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4474af37, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0xb9ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncApi.dll", cAlternateFileName="FILESY~3.DLL")) returned 1 [0132.474] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448c86c0, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x448c86c0, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x448c86c0, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2fb2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncClient.dll", cAlternateFileName="FILESY~4.DLL")) returned 1 [0132.474] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449d3741, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x449d3741, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x449d3741, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x40ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncConfig.exe", cAlternateFileName="FILESY~1.EXE")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ade7be, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x44ade7be, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x44ade7be, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x120c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncFAL.dll", cAlternateFileName="FI0695~1.DLL")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d66fd9, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x44d66fd9, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x44d66fd9, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x340c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncFALWB.dll", cAlternateFileName="FI7839~1.DLL")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44fef89b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x44fef89b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x45088144, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x176ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncSessions.dll", cAlternateFileName="FIFC38~1.DLL")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45251d87, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x45251d87, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x45277fd0, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x27f6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncShell.dll", cAlternateFileName="FI340C~1.DLL")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454b43f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x454b43f3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x454b43f3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0xd50c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncViews.dll", cAlternateFileName="FI224F~1.DLL")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43817f3c, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43817f3c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43817f3c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x450fa84f, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x450fa84f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x450fa84f, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f6ecb7, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x45f6ecb7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x45f6ecb7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ha-latn-ng", cAlternateFileName="HA-LAT~1")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46e09392, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x46e09392, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x46e09392, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x479a8b8f, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x479a8b8f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x479a8b8f, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48decbf3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x48decbf3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x48decbf3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bac7060, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4bac7060, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4bac7060, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4cc5c63a, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4cc5c63a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4cc5c63a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy", cAlternateFileName="")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d8482cc, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4d8482cc, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4d8482cc, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aaa1f6, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x45aaa1f6, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x45aaa1f6, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x13a0c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libeay32.dll", cAlternateFileName="")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45efc5a9, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x45efc5a9, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x45efc5a9, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x74c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460c61f0, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x460c61f0, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x460c61f0, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1e06c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465186bf, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x465186bf, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4653e8ca, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1900, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoadingPage.html", cAlternateFileName="LOADIN~1.HTM")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46bcd047, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x46bcd047, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x46bcd047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x14fcc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoggingPlatform.dll", cAlternateFileName="LOGGIN~1.DLL")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f6088d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x46f6088d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x46f6088d, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x6acc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479a8b8f, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x479a8b8f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x479f50c8, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x19b8c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.exe", cAlternateFileName="")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f06031, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x47f06031, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x47f06031, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDriveLogo.png", cAlternateFileName="ONEDRI~1.PNG")) returned 1 [0132.475] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x484afa4c, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x484afa4c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x48679671, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2308c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDriveStandaloneUpdater.exe", cAlternateFileName="ONEDRI~1.EXE")) returned 1 [0132.476] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4915a1db, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4915a1db, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x49180435, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48eac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Core.dll", cAlternateFileName="")) returned 1 [0132.476] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b69ae5f, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4b69ae5f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4b69ae5f, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x53ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5DBus.dll", cAlternateFileName="")) returned 1 [0132.476] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c40425f, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4c40425f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4c45070f, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4becc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Gui.dll", cAlternateFileName="")) returned 1 [0132.476] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca929df, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4ca929df, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4ca929df, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0xe4ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Network.dll", cAlternateFileName="QT5NET~1.DLL")) returned 1 [0132.476] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cee4e36, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4cee4e36, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4cee4e36, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x450c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5PrintSupport.dll", cAlternateFileName="QT5PRI~1.DLL")) returned 1 [0132.476] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d63219e, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4d63219e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4d7d5bd9, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x280cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qt5Qml.dll", cAlternateFileName="")) returned 1 [0132.476] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.476] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0132.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0132.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0132.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0132.477] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7076.1026", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7076.1026", lpFilePart=0x0) returned 0x3f [0132.477] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7076.1026\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42fe5d7d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4d63219e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4d8482cc, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0132.478] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42fe5d7d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4d63219e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4d8482cc, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.478] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x432220cc, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x432220cc, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x432220cc, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0xd5ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="adal.dll", cAlternateFileName="")) returned 1 [0132.478] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x432483c3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x432483c3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x432483c3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="alertIcon.png", cAlternateFileName="ALERTI~1.PNG")) returned 1 [0132.478] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4326e587, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4326e587, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x432baa3b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0132.478] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x432baa3b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x432baa3b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x432baa3b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0132.478] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x432e0d21, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x432e0d21, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x432e0d21, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0132.478] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43306ef9, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43306ef9, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43306ef9, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0132.478] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4332d1b3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4332d1b3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4332d1b3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x54c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="AP87F4~1.DLL")) returned 1 [0132.478] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433533b1, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x433533b1, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x433533b1, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433533b1, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x433533b1, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x433533b1, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4337960b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4337960b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4337960b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="AP4F63~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4339f8f1, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4339f8f1, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4339f8f1, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="AP26B7~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433c5ab8, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x433c5ab8, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x433c5ab8, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="AP40C7~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433ebd08, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x433ebd08, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x433ebd08, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="APD0F3~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433ebd08, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x433ebd08, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x433ebd08, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x50c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43411f70, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43411f70, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43411f70, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="AP25B1~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434381b9, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x434381b9, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4345e41a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="AP8526~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4345e41a, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4345e41a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4345e41a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="AP507A~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43484682, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43484682, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43484682, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="APEF2A~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434d0b3d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x434d0b3d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x434d0b3d, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434f6d90, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x434f6d90, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x434f6d90, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x44c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="AP5574~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434f6d90, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x434f6d90, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x434f6d90, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x44c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="APDC30~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4351cff1, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4351cff1, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4351cff1, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="AP743F~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435432b8, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x435432b8, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x435432b8, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="AP7678~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435694a2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x435694a2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4358f6e7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435b5953, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x435b5953, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x435b5953, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="APFAD9~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435dbbba, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x435dbbba, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x435dbbba, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43601e14, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43601e14, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4362805d, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x46c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="APF2DB~1.DLL")) returned 1 [0132.479] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4364e2c2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4364e2c2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4364e2c2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4367452a, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4367452a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4367452a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x56c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4369a779, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x4369a779, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4369a779, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436c09da, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x436c09da, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4373317b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x439bb982, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x439bb982, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43a7a4f2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ac695b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43ac695b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43ac695b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b12e49, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43b12e49, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43b39099, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x70c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b5f2f0, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43b5f2f0, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43b5f2f0, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x66c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b85540, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43b85540, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43b85540, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x11cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bab77b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43bab77b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43bab77b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bab77b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43bab77b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43bab77b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x58c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bd19ea, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43bd19ea, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43bd19ea, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x5ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bf7c41, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43bf7c41, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43bf7c41, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x5ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c1de9b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43c1de9b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43c1de9b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x50c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c1de9b, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43c1de9b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43c1de9b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x48c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c440fc, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43c440fc, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43c440fc, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x157b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppBlue.png", cAlternateFileName="")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c6a348, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43c6a348, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43c6a348, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1d96, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppErrorBlue.png", cAlternateFileName="APPERR~1.PNG")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c905a2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43c905a2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43c905a2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppErrorWhite.png", cAlternateFileName="APPERR~2.PNG")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c905a2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43c905a2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43c905a2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0xbeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppWhite.png", cAlternateFileName="")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43cb6811, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43cb6811, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43cb6811, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43cdca64, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43cdca64, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43cdca64, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~1.PNG")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d02cc5, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43d02cc5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43d02cc5, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1914, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSyncLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d28f1f, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43d28f1f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43d28f1f, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ElevatedAppBlue.png", cAlternateFileName="ELEVAT~1.PNG")) returned 1 [0132.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d4f17d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x43d4f17d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x43d4f17d, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x13cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ElevatedAppWhite.png", cAlternateFileName="ELEVAT~2.PNG")) returned 1 [0132.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0132.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0132.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0132.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0132.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0132.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0132.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0132.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0132.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0132.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0132.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0132.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", lpFilePart=0x0) returned 0x45 [0135.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", lpFilePart=0x0) returned 0x45 [0135.123] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f2d181, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xb213bb5b, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xb213bb5b, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370b8 [0135.124] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f2d181, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xb213bb5b, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xb213bb5b, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.124] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb213bb5b, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xb213bb5b, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xb213bb5b, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogFiles", cAlternateFileName="VISIOL~1")) returned 1 [0135.124] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb213bb5b, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xb213bb5b, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xb213bb5b, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogFiles", cAlternateFileName="VISIOL~1")) returned 0 [0135.124] FindClose (in: hFindFile=0x14370b8 | out: hFindFile=0x14370b8) returned 1 [0135.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", lpFilePart=0x0) returned 0x46 [0135.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", lpFilePart=0x0) returned 0x46 [0135.125] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe3955f00, ftCreationTime.dwHighDateTime=0x1d3aafb, ftLastAccessTime.dwLowDateTime=0xe3955f00, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xf50bbe18, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0135.126] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe3955f00, ftCreationTime.dwHighDateTime=0x1d3aafb, ftLastAccessTime.dwLowDateTime=0xe3955f00, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xf50bbe18, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.126] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe3955f00, ftCreationTime.dwHighDateTime=0x1d3aafb, ftLastAccessTime.dwLowDateTime=0xe3955f00, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xf50bbe18, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.126] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0135.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.126] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", lpFilePart=0x0) returned 0x3c [0135.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.126] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", lpFilePart=0x0) returned 0x3c [0135.126] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcdae55d7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc52ab59a, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc52ab59a, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0135.126] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcdae55d7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc52ab59a, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc52ab59a, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.127] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xce9337cd, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce9337cd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce9337cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0135.127] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.127] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0135.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", lpFilePart=0x0) returned 0x3d [0135.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", lpFilePart=0x0) returned 0x3d [0135.536] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd515a18, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x8d444485, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8d444485, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0135.537] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd515a18, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x8d444485, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8d444485, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.539] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x8d444485, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8d444485, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8d444485, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 1 [0135.539] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8d444485, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8d444485, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8d444485, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE", cAlternateFileName="")) returned 1 [0135.539] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8d444485, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8d444485, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8d444485, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE", cAlternateFileName="")) returned 0 [0135.539] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0135.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.539] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", lpFilePart=0x0) returned 0x45 [0135.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", lpFilePart=0x0) returned 0x45 [0135.540] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xcd561ed0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x8ccdf089, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8ccdf089, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14375b8 [0135.540] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xcd561ed0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x8ccdf089, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8ccdf089, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.541] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ccdf089, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8ccdf089, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8ccdf089, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1 [0135.541] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ccdf089, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8ccdf089, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8ccdf089, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 0 [0135.541] FindClose (in: hFindFile=0x14375b8 | out: hFindFile=0x14375b8) returned 1 [0135.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.541] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x3b [0135.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.541] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x3b [0135.541] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xace8aa06, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xace8aa06, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0135.543] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xace8aa06, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xace8aa06, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.543] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf08b1bb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xf08b1bb5, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xf08b1bb5, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="2TW2FB0X.cookie", cAlternateFileName="2TW2FB~1.COO")) returned 1 [0135.543] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x97c1763d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x97c1763d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x97c1763d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="374U3A1K.cookie", cAlternateFileName="374U3A~1.COO")) returned 1 [0135.544] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x97b58c47, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x97b58c47, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x97b58c47, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="BI3PPODN.cookie", cAlternateFileName="BI3PPO~1.COO")) returned 1 [0135.544] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdf9f05df, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdf9f05df, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xdf9f05df, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0135.544] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x433e08f7, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x433e08f7, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DNTException", cAlternateFileName="DNTEXC~1")) returned 1 [0135.544] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ce722ba, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8ce722ba, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8ce722ba, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWJUGATK.cookie", cAlternateFileName="GWJUGA~1.COO")) returned 1 [0135.544] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacddadd7, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xacddadd7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xacddadd7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="JESBACFH.cookie", cAlternateFileName="JESBAC~1.COO")) returned 1 [0135.544] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a303509, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a303509, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a303509, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2Q60DYF.cookie", cAlternateFileName="L2Q60D~1.COO")) returned 1 [0135.545] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc83b6f59, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0135.545] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x904e9952, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x904e9952, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x904e9952, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="P9JHL0AF.cookie", cAlternateFileName="P9JHL0~1.COO")) returned 1 [0135.545] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0135.545] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x651fe40, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x651fe40, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x651fe40, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="T0ICIWVP.cookie", cAlternateFileName="T0ICIW~1.COO")) returned 1 [0135.546] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8faedb8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8faedb8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8faedb8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TDJT1R5W.cookie", cAlternateFileName="TDJT1R~1.COO")) returned 1 [0135.546] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x651fe40, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x651fe40, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x651fe40, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="UBHR6PKO.cookie", cAlternateFileName="UBHR6P~1.COO")) returned 1 [0135.546] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90109c21, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x90109c21, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x90109c21, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZXBG6NYW.cookie", cAlternateFileName="ZXBG6N~1.COO")) returned 1 [0135.546] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.546] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0135.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0135.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0135.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0135.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x3b [0135.548] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xace8aa06, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xace8aa06, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437478 [0135.549] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xace8aa06, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xace8aa06, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.549] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf08b1bb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xf08b1bb5, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xf08b1bb5, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="2TW2FB0X.cookie", cAlternateFileName="2TW2FB~1.COO")) returned 1 [0135.549] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x97c1763d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x97c1763d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x97c1763d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="374U3A1K.cookie", cAlternateFileName="374U3A~1.COO")) returned 1 [0135.550] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x97b58c47, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x97b58c47, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x97b58c47, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="BI3PPODN.cookie", cAlternateFileName="BI3PPO~1.COO")) returned 1 [0135.550] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdf9f05df, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdf9f05df, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xdf9f05df, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0135.550] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x433e08f7, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x433e08f7, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DNTException", cAlternateFileName="DNTEXC~1")) returned 1 [0135.550] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ce722ba, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8ce722ba, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8ce722ba, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWJUGATK.cookie", cAlternateFileName="GWJUGA~1.COO")) returned 1 [0135.551] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacddadd7, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xacddadd7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xacddadd7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="JESBACFH.cookie", cAlternateFileName="JESBAC~1.COO")) returned 1 [0135.551] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a303509, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a303509, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a303509, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2Q60DYF.cookie", cAlternateFileName="L2Q60D~1.COO")) returned 1 [0135.551] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc83b6f59, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0135.551] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x904e9952, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x904e9952, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x904e9952, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="P9JHL0AF.cookie", cAlternateFileName="P9JHL0~1.COO")) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x651fe40, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x651fe40, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x651fe40, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="T0ICIWVP.cookie", cAlternateFileName="T0ICIW~1.COO")) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8faedb8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8faedb8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8faedb8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TDJT1R5W.cookie", cAlternateFileName="TDJT1R~1.COO")) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x651fe40, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x651fe40, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x651fe40, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="UBHR6PKO.cookie", cAlternateFileName="UBHR6P~1.COO")) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90109c21, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x90109c21, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x90109c21, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZXBG6NYW.cookie", cAlternateFileName="ZXBG6N~1.COO")) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90109c21, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x90109c21, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x90109c21, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZXBG6NYW.cookie", cAlternateFileName="ZXBG6N~1.COO")) returned 0 [0135.553] FindClose (in: hFindFile=0x1437478 | out: hFindFile=0x1437478) returned 1 [0135.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0135.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0135.554] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", lpFilePart=0x0) returned 0x48 [0135.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.554] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", lpFilePart=0x0) returned 0x48 [0135.554] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x433e08f7, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x433e08f7, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0135.555] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x433e08f7, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x433e08f7, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.555] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x433e08f7, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x433e08f7, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x433e08f7, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0135.556] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0135.556] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0135.556] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0135.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", lpFilePart=0x0) returned 0x3f [0135.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", lpFilePart=0x0) returned 0x3f [0135.557] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc83b6f59, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0135.557] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc83b6f59, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.557] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc83b6f59, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.557] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0135.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.558] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", lpFilePart=0x0) returned 0x44 [0135.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.558] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", lpFilePart=0x0) returned 0x44 [0135.558] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0135.655] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.655] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0135.655] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0135.655] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0135.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.655] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications", lpFilePart=0x0) returned 0x3d [0135.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.655] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications", lpFilePart=0x0) returned 0x3d [0135.655] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae251d1a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x55bff026, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55bff026, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370f8 [0135.656] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae251d1a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x55bff026, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55bff026, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.656] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5da496a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc5da496a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x6c29747c, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpndatabase.db", cAlternateFileName="WPNDAT~1.DB")) returned 1 [0135.656] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55bff026, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x55bff026, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb29276c0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpndatabase.db-shm", cAlternateFileName="WPNDAT~2.DB-")) returned 1 [0135.656] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc64330fb, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc64330fb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbd021adb, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0xc140, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpndatabase.db-wal", cAlternateFileName="WPNDAT~1.DB-")) returned 1 [0135.657] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc069f076, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc84021e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x740cf5bf, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpnidm", cAlternateFileName="")) returned 1 [0135.657] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc5bb4ac4, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc5bb4ac4, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xb2901466, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPNPRMRY.tmp", cAlternateFileName="")) returned 1 [0135.657] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.657] FindClose (in: hFindFile=0x14370f8 | out: hFindFile=0x14370f8) returned 1 [0135.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0135.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0135.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0135.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications", lpFilePart=0x0) returned 0x3d [0135.657] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae251d1a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x55bff026, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55bff026, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0135.658] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae251d1a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x55bff026, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55bff026, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.658] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5da496a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc5da496a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x6c29747c, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpndatabase.db", cAlternateFileName="WPNDAT~1.DB")) returned 1 [0135.658] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55bff026, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x55bff026, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb29276c0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpndatabase.db-shm", cAlternateFileName="WPNDAT~2.DB-")) returned 1 [0135.658] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc64330fb, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc64330fb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbd021adb, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0xc140, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpndatabase.db-wal", cAlternateFileName="WPNDAT~1.DB-")) returned 1 [0135.658] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc069f076, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc84021e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x740cf5bf, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpnidm", cAlternateFileName="")) returned 1 [0135.658] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc5bb4ac4, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc5bb4ac4, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xb2901466, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPNPRMRY.tmp", cAlternateFileName="")) returned 1 [0135.659] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc5bb4ac4, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc5bb4ac4, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xb2901466, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPNPRMRY.tmp", cAlternateFileName="")) returned 0 [0135.659] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0135.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0135.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0135.659] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm", lpFilePart=0x0) returned 0x44 [0135.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.659] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm", lpFilePart=0x0) returned 0x44 [0135.659] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc069f076, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc84021e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x740cf5bf, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437738 [0135.659] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc069f076, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc84021e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x740cf5bf, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.660] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x86a75080, ftCreationTime.dwHighDateTime=0x1d3272d, ftLastAccessTime.dwLowDateTime=0x86a75080, ftLastAccessTime.dwHighDateTime=0x1d3272d, ftLastWriteTime.dwLowDateTime=0x86a75080, ftLastWriteTime.dwHighDateTime=0x1d3272d, nFileSizeHigh=0x0, nFileSizeLow=0x20a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="353d8595.jpg", cAlternateFileName="")) returned 1 [0135.660] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1d7663a2, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x1d7663a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1d7663a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="a8c77985.jpg", cAlternateFileName="")) returned 1 [0135.660] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xb30a9f00, ftCreationTime.dwHighDateTime=0x1d32724, ftLastAccessTime.dwLowDateTime=0xb30a9f00, ftLastAccessTime.dwHighDateTime=0x1d32724, ftLastWriteTime.dwLowDateTime=0xb30a9f00, ftLastWriteTime.dwHighDateTime=0x1d32724, nFileSizeHigh=0x0, nFileSizeLow=0x12d54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca910921.jpg", cAlternateFileName="")) returned 1 [0135.660] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.660] FindClose (in: hFindFile=0x1437738 | out: hFindFile=0x1437738) returned 1 [0135.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.660] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", lpFilePart=0x0) returned 0x3a [0135.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.660] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", lpFilePart=0x0) returned 0x3a [0135.660] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3ec8443, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xdc924418, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14375b8 [0135.661] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3ec8443, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xdc924418, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.661] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc924418, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xa6871230, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0xbdca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModuleAnalysisCache", cAlternateFileName="MODULE~1")) returned 1 [0135.661] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.661] FindClose (in: hFindFile=0x14375b8 | out: hFindFile=0x14375b8) returned 1 [0135.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0135.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0135.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0135.661] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", lpFilePart=0x0) returned 0x3a [0135.661] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3ec8443, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xdc924418, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0135.662] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3ec8443, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xdc924418, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.662] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc924418, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xa6871230, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0xbdca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModuleAnalysisCache", cAlternateFileName="MODULE~1")) returned 1 [0135.662] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc924418, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xa6871230, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0xbdca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModuleAnalysisCache", cAlternateFileName="MODULE~1")) returned 0 [0135.662] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0135.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0135.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0135.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache", lpFilePart=0x0) returned 0x38 [0135.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache", lpFilePart=0x0) returned 0x38 [0135.663] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca7566ed, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xca7566ed, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0135.668] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca7566ed, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xca7566ed, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.684] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a6b7131, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7a6b7131, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7a6b7131, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="1527C7~1.447")) returned 1 [0135.684] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d59771, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83d59771, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="C5E252~1.0_N")) returned 1 [0135.684] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83020fb6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83020fb6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83020fb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="CORTAN~1.0_N")) returned 1 [0135.684] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81af8126, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81af8126, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x81af8126, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy", cAlternateFileName="DESKTO~2.0_N")) returned 1 [0135.684] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ca9f1d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80ca9f1d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80ca9f1d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="DESKTO~1.0_N")) returned 1 [0135.684] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79e84fa9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79e84fa9, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79e84fa9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="E2A4F9~1.332")) returned 1 [0135.685] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c1636cc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c1636cc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7c1636cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="ENVIRO~1.0_N")) returned 1 [0135.685] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7db04be3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7db04be3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7db04be3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy", cAlternateFileName="HOLOCA~1.5_N")) returned 1 [0135.685] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e3f592b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7e3f592b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7e3f592b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy", cAlternateFileName="HOLOIT~1.2_N")) returned 1 [0135.685] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd33b5198, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd33b5198, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd33b5198, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~2.0_N")) returned 1 [0135.685] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80235763, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80235763, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80235763, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.447")) returned 1 [0135.686] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb18f1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7cfb18f1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7cfb18f1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BioEnrollment_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI2C32~1.0_N")) returned 1 [0135.686] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7673c617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7673c617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7673c617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CredDialogHost_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICEC2~1.0_N")) returned 1 [0135.686] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b1e4202, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b1e4202, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b1e4202, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.LockApp_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MIC1CC~1.0_N")) returned 1 [0135.686] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc0dcb3, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdbc0dcb3, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdbc0dcb3, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_N")) returned 1 [0135.687] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f5fd63a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f5fd63a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7f5fd63a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PPIProjection_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI5A4E~1.0_N")) returned 1 [0135.687] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77138478, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77138478, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77138478, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.Apprep.ChxApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIFC10~1.0_N")) returned 1 [0135.687] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79521b5c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79521b5c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79521b5c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.AssignedAccessLockApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI189A~1.0_N")) returned 1 [0135.687] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc62ee79, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xcc62ee79, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xcc62ee79, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.CloudExperienceHost_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0135.687] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd942a48, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdd942a48, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdd942a48, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ContentDeliveryManager_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~4.0_N")) returned 1 [0135.688] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eb2cb6, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd9eb2cb6, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd9eb2cb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.150")) returned 1 [0135.688] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75db2f08, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x75db2f08, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x75db2f08, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.HolographicFirstRun_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI98FA~1.0_N")) returned 1 [0135.688] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x753b713c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x753b713c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x753b713c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ModalSharePickerHost_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIC120~1.0_N")) returned 1 [0135.688] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74a7a048, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x74a7a048, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x74a7a048, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.OOBENetworkCaptivePortal_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI7DAE~1.0_N")) returned 1 [0135.688] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7407e16d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7407e16d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7407e16d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.OOBENetworkConnectionFlow_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MID492~1.0_N")) returned 1 [0135.688] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x733f9bba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x733f9bba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x733f9bba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ParentalControls_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI6FCD~1.0_N")) returned 1 [0135.689] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x725392b3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x725392b3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x725392b3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.SecHealthUI_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI3009~1.0_N")) returned 1 [0135.689] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70d619bd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x70d619bd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x70d619bd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI2456~1.0_N")) returned 1 [0135.689] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701e842d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x701e842d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x701e842d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.SecureAssessmentBrowser_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI829F~1.0_N")) returned 1 [0135.689] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd55d4d1e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd55d4d1e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd55d4d1e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ShellExperienceHost_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.332")) returned 1 [0135.689] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71c4851d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x71c4851d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x71c4851d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.WindowPicker_10.0.15063.332_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~2.332")) returned 1 [0135.689] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f34dd66, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f34dd66, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f34dd66, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxGameCallableUI_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIB10B~1.0_N")) returned 1 [0135.690] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7871fddf, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7871fddf, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7871fddf, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows.ContactSupport_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~2.0_N")) returned 1 [0135.690] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd855dc57, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd855dc57, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd855dc57, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 1 [0135.690] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd855dc57, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd855dc57, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd855dc57, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 0 [0135.690] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0135.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0135.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0135.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0135.691] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache", lpFilePart=0x0) returned 0x38 [0135.691] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca7566ed, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xca7566ed, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0135.692] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca7566ed, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xca7566ed, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a6b7131, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7a6b7131, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7a6b7131, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="1527C7~1.447")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d59771, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83d59771, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="C5E252~1.0_N")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83020fb6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83020fb6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83020fb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="CORTAN~1.0_N")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81af8126, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81af8126, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x81af8126, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy", cAlternateFileName="DESKTO~2.0_N")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ca9f1d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80ca9f1d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80ca9f1d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="DESKTO~1.0_N")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79e84fa9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79e84fa9, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79e84fa9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="E2A4F9~1.332")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c1636cc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c1636cc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7c1636cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="ENVIRO~1.0_N")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7db04be3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7db04be3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7db04be3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy", cAlternateFileName="HOLOCA~1.5_N")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e3f592b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7e3f592b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7e3f592b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy", cAlternateFileName="HOLOIT~1.2_N")) returned 1 [0135.694] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd33b5198, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd33b5198, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd33b5198, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~2.0_N")) returned 1 [0135.694] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80235763, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80235763, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80235763, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.447")) returned 1 [0135.694] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb18f1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7cfb18f1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7cfb18f1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BioEnrollment_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI2C32~1.0_N")) returned 1 [0135.694] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7673c617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7673c617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7673c617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CredDialogHost_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICEC2~1.0_N")) returned 1 [0135.694] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b1e4202, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b1e4202, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b1e4202, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.LockApp_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MIC1CC~1.0_N")) returned 1 [0135.694] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc0dcb3, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdbc0dcb3, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdbc0dcb3, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_N")) returned 1 [0135.694] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f5fd63a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f5fd63a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7f5fd63a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PPIProjection_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI5A4E~1.0_N")) returned 1 [0135.695] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77138478, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77138478, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77138478, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.Apprep.ChxApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIFC10~1.0_N")) returned 1 [0135.695] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79521b5c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79521b5c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79521b5c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.AssignedAccessLockApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI189A~1.0_N")) returned 1 [0135.695] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc62ee79, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xcc62ee79, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xcc62ee79, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.CloudExperienceHost_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0135.695] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd942a48, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdd942a48, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdd942a48, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ContentDeliveryManager_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~4.0_N")) returned 1 [0135.695] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eb2cb6, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd9eb2cb6, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd9eb2cb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.150")) returned 1 [0135.696] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75db2f08, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x75db2f08, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x75db2f08, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.HolographicFirstRun_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI98FA~1.0_N")) returned 1 [0135.696] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x753b713c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x753b713c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x753b713c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ModalSharePickerHost_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIC120~1.0_N")) returned 1 [0135.696] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74a7a048, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x74a7a048, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x74a7a048, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.OOBENetworkCaptivePortal_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI7DAE~1.0_N")) returned 1 [0135.696] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7407e16d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7407e16d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7407e16d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.OOBENetworkConnectionFlow_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MID492~1.0_N")) returned 1 [0135.696] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x733f9bba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x733f9bba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x733f9bba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ParentalControls_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI6FCD~1.0_N")) returned 1 [0135.696] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x725392b3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x725392b3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x725392b3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.SecHealthUI_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI3009~1.0_N")) returned 1 [0135.696] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70d619bd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x70d619bd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x70d619bd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI2456~1.0_N")) returned 1 [0135.696] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701e842d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x701e842d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x701e842d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.SecureAssessmentBrowser_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI829F~1.0_N")) returned 1 [0135.696] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd55d4d1e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd55d4d1e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd55d4d1e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ShellExperienceHost_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.332")) returned 1 [0135.697] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71c4851d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x71c4851d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x71c4851d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.WindowPicker_10.0.15063.332_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~2.332")) returned 1 [0135.697] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f34dd66, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f34dd66, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f34dd66, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxGameCallableUI_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIB10B~1.0_N")) returned 1 [0135.697] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7871fddf, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7871fddf, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7871fddf, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows.ContactSupport_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~2.0_N")) returned 1 [0135.697] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd855dc57, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd855dc57, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd855dc57, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 1 [0135.697] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.697] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0135.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0135.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0135.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8a [0135.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8a [0135.698] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a6b7131, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7a6b7131, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7a6b7131, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374f8 [0135.701] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a6b7131, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7a6b7131, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7a6b7131, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.701] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a6b7131, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7a6b7131, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7a6b7131, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.701] FindClose (in: hFindFile=0x14374f8 | out: hFindFile=0x14374f8) returned 1 [0135.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.702] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x88 [0135.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.702] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x88 [0135.702] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d59771, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83d59771, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0135.702] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d59771, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83d59771, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.702] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d59771, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83d59771, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.702] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0135.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.702] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6f [0135.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.702] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6f [0135.703] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83020fb6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83020fb6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83020fb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0135.703] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83020fb6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83020fb6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83020fb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.703] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83020fb6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83020fb6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83020fb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.704] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0135.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.704] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6e [0135.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.704] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6e [0135.704] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81af8126, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81af8126, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x81af8126, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374f8 [0135.749] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81af8126, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81af8126, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x81af8126, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.749] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81af8126, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81af8126, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x81af8126, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.749] FindClose (in: hFindFile=0x14374f8 | out: hFindFile=0x14374f8) returned 1 [0135.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x71 [0135.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x71 [0135.749] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ca9f1d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80ca9f1d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80ca9f1d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0135.750] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ca9f1d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80ca9f1d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80ca9f1d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.750] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ca9f1d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80ca9f1d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80ca9f1d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.750] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0135.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.750] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8a [0135.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.750] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8a [0135.750] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79e84fa9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79e84fa9, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79e84fa9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0135.751] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79e84fa9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79e84fa9, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79e84fa9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.751] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79e84fa9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79e84fa9, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79e84fa9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.751] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0135.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.751] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6c [0135.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.751] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6c [0135.751] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c1636cc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c1636cc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7c1636cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0135.752] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c1636cc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c1636cc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7c1636cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.752] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c1636cc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c1636cc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7c1636cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.752] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0135.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x62 [0135.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x62 [0135.752] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7db04be3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7db04be3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7db04be3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0135.752] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7db04be3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7db04be3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7db04be3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.753] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7db04be3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7db04be3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7db04be3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.753] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0135.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x69 [0135.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x69 [0135.753] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e3f592b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7e3f592b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7e3f592b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370b8 [0135.754] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e3f592b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7e3f592b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7e3f592b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.754] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e3f592b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7e3f592b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7e3f592b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.754] FindClose (in: hFindFile=0x14370b8 | out: hFindFile=0x14370b8) returned 1 [0135.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x80 [0135.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x80 [0135.756] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd33b5198, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd33b5198, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd33b5198, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0135.757] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd33b5198, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd33b5198, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd33b5198, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.757] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd33b5198, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd33b5198, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd33b5198, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.758] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0135.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x78 [0135.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x78 [0135.758] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80235763, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80235763, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80235763, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374f8 [0135.759] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80235763, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80235763, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80235763, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.759] FindNextFileW (in: hFindFile=0x14374f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80235763, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80235763, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80235763, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.759] FindClose (in: hFindFile=0x14374f8 | out: hFindFile=0x14374f8) returned 1 [0135.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.759] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x74 [0135.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.759] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x74 [0135.759] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.15063.0_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb18f1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7cfb18f1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7cfb18f1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0135.760] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb18f1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7cfb18f1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7cfb18f1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.760] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb18f1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7cfb18f1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7cfb18f1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.760] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0135.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.761] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.CredDialogHost_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.CredDialogHost_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x75 [0135.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.761] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.CredDialogHost_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.CredDialogHost_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x75 [0135.761] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.CredDialogHost_10.0.15063.0_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7673c617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7673c617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7673c617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0135.761] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7673c617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7673c617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7673c617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.761] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7673c617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7673c617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7673c617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.761] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0135.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6e [0135.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6e [0135.762] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.15063.0_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b1e4202, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b1e4202, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b1e4202, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0135.763] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b1e4202, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b1e4202, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b1e4202, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.763] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b1e4202, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b1e4202, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b1e4202, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.763] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0135.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.763] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x74 [0135.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.763] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x74 [0135.763] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc0dcb3, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdbc0dcb3, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdbc0dcb3, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437478 [0135.764] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc0dcb3, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdbc0dcb3, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdbc0dcb3, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.764] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc0dcb3, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdbc0dcb3, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdbc0dcb3, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.764] FindClose (in: hFindFile=0x1437478 | out: hFindFile=0x1437478) returned 1 [0135.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.764] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.PPIProjection_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.PPIProjection_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7b [0135.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.764] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.PPIProjection_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.PPIProjection_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7b [0135.764] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.PPIProjection_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f5fd63a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f5fd63a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7f5fd63a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437738 [0135.765] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f5fd63a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f5fd63a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7f5fd63a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.765] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f5fd63a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f5fd63a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7f5fd63a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.765] FindClose (in: hFindFile=0x1437738 | out: hFindFile=0x1437738) returned 1 [0135.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.765] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Apprep.ChxApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Apprep.ChxApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x85 [0135.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.765] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Apprep.ChxApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Apprep.ChxApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x85 [0135.765] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Apprep.ChxApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77138478, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77138478, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77138478, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0135.766] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77138478, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77138478, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77138478, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.766] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77138478, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77138478, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77138478, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.766] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0135.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8d [0135.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8d [0135.767] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79521b5c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79521b5c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79521b5c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0135.767] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79521b5c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79521b5c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79521b5c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.767] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79521b5c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79521b5c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79521b5c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.768] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0135.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.768] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x89 [0135.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.768] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x89 [0135.768] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc62ee79, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xcc62ee79, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xcc62ee79, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0135.768] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc62ee79, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xcc62ee79, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xcc62ee79, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.768] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc62ee79, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xcc62ee79, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xcc62ee79, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.769] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0135.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.769] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8c [0135.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.769] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8c [0135.769] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd942a48, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdd942a48, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdd942a48, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437478 [0135.770] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd942a48, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdd942a48, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdd942a48, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.770] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd942a48, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdd942a48, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdd942a48, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.770] FindClose (in: hFindFile=0x1437478 | out: hFindFile=0x1437478) returned 1 [0135.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.770] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7d [0135.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.770] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7d [0135.770] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eb2cb6, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd9eb2cb6, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd9eb2cb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0135.771] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eb2cb6, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd9eb2cb6, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd9eb2cb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.771] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eb2cb6, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd9eb2cb6, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd9eb2cb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.771] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0135.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.771] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.HolographicFirstRun_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.HolographicFirstRun_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x89 [0135.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.771] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.HolographicFirstRun_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.HolographicFirstRun_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x89 [0135.772] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.HolographicFirstRun_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75db2f08, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x75db2f08, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x75db2f08, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0135.772] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75db2f08, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x75db2f08, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x75db2f08, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.773] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75db2f08, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x75db2f08, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x75db2f08, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.773] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0135.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.773] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ModalSharePickerHost_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ModalSharePickerHost_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8c [0135.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.773] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ModalSharePickerHost_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ModalSharePickerHost_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8c [0135.773] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ModalSharePickerHost_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x753b713c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x753b713c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x753b713c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370f8 [0135.774] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x753b713c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x753b713c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x753b713c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.774] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x753b713c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x753b713c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x753b713c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.774] FindClose (in: hFindFile=0x14370f8 | out: hFindFile=0x14370f8) returned 1 [0135.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.774] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x87 [0135.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.774] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x87 [0135.774] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.15063.0_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74a7a048, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x74a7a048, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x74a7a048, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0135.775] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74a7a048, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x74a7a048, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x74a7a048, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.775] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74a7a048, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x74a7a048, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x74a7a048, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.776] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0135.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x88 [0135.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x88 [0135.776] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.15063.0_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7407e16d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7407e16d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7407e16d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0135.777] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7407e16d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7407e16d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7407e16d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.777] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7407e16d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7407e16d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7407e16d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.777] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0135.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x88 [0135.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.778] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x88 [0135.778] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x733f9bba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x733f9bba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x733f9bba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0135.778] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x733f9bba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x733f9bba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x733f9bba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.778] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x733f9bba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x733f9bba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x733f9bba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.778] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0135.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecHealthUI_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecHealthUI_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x7a [0135.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecHealthUI_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecHealthUI_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x7a [0135.779] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecHealthUI_10.0.15063.0_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x725392b3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x725392b3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x725392b3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370f8 [0135.779] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x725392b3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x725392b3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x725392b3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.780] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x725392b3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x725392b3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x725392b3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.780] FindClose (in: hFindFile=0x14370f8 | out: hFindFile=0x14370f8) returned 1 [0135.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.780] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x82 [0135.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.780] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x82 [0135.780] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70d619bd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x70d619bd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x70d619bd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437478 [0135.781] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70d619bd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x70d619bd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x70d619bd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.781] FindNextFileW (in: hFindFile=0x1437478, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70d619bd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x70d619bd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x70d619bd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.781] FindClose (in: hFindFile=0x1437478 | out: hFindFile=0x1437478) returned 1 [0135.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecureAssessmentBrowser_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecureAssessmentBrowser_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8d [0135.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecureAssessmentBrowser_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecureAssessmentBrowser_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8d [0135.781] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecureAssessmentBrowser_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701e842d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x701e842d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x701e842d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437738 [0135.782] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701e842d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x701e842d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x701e842d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.782] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701e842d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x701e842d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x701e842d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.782] FindClose (in: hFindFile=0x1437738 | out: hFindFile=0x1437738) returned 1 [0135.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8b [0135.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8b [0135.782] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.15063.332_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd55d4d1e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd55d4d1e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd55d4d1e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0135.783] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd55d4d1e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd55d4d1e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd55d4d1e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.783] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd55d4d1e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd55d4d1e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd55d4d1e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.783] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0135.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.783] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.WindowPicker_10.0.15063.332_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.WindowPicker_10.0.15063.332_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x7d [0135.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.783] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.WindowPicker_10.0.15063.332_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.WindowPicker_10.0.15063.332_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x7d [0135.783] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.WindowPicker_10.0.15063.332_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71c4851d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x71c4851d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x71c4851d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0135.874] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71c4851d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x71c4851d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x71c4851d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.874] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71c4851d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x71c4851d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x71c4851d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.874] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0135.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x82 [0135.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x82 [0135.875] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f34dd66, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f34dd66, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f34dd66, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0135.876] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f34dd66, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f34dd66, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f34dd66, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.876] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f34dd66, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f34dd66, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f34dd66, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.876] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0135.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7a [0135.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7a [0135.876] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7871fddf, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7871fddf, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7871fddf, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0135.877] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7871fddf, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7871fddf, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7871fddf, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.877] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7871fddf, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7871fddf, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7871fddf, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.877] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0135.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.877] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7c [0135.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.878] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7c [0135.878] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd855dc57, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd855dc57, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd855dc57, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0135.878] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd855dc57, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd855dc57, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd855dc57, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.879] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd855dc57, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd855dc57, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd855dc57, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.879] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0135.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Ringtones", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Ringtones", lpFilePart=0x0) returned 0x39 [0135.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Ringtones", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Ringtones", lpFilePart=0x0) returned 0x39 [0135.879] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce2cb2cd, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce2cb2cd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0135.880] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce2cb2cd, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce2cb2cd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.880] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce2cb2cd, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce2cb2cd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.880] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0135.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0135.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0135.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0135.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Ringtones", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Ringtones", lpFilePart=0x0) returned 0x39 [0135.880] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce2cb2cd, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce2cb2cd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0135.880] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce2cb2cd, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce2cb2cd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.881] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce2cb2cd, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce2cb2cd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.881] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0135.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0135.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0135.881] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles", lpFilePart=0x0) returned 0x3c [0135.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.881] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles", lpFilePart=0x0) returned 0x3c [0135.881] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc86f09cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x440792d0, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0135.882] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc86f09cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x440792d0, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.882] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc86f09cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x440792d0, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.882] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0135.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0135.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0135.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0135.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles", lpFilePart=0x0) returned 0x3c [0135.882] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc86f09cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x440792d0, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0135.882] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc86f09cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x440792d0, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.883] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc86f09cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x440792d0, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.883] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0135.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0135.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0135.883] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync", lpFilePart=0x0) returned 0x3b [0135.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.883] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync", lpFilePart=0x0) returned 0x3b [0135.883] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdbe2f3df, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc86f1244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdbf3a457, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370b8 [0135.884] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdbe2f3df, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc86f1244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdbf3a457, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.884] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf3a457, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xeee51a18, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xeee51a18, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metastore", cAlternateFileName="METAST~1")) returned 1 [0135.884] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf3a457, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xeee51a18, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xeee51a18, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metastore", cAlternateFileName="METAST~1")) returned 0 [0135.884] FindClose (in: hFindFile=0x14370b8 | out: hFindFile=0x14370b8) returned 1 [0135.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0135.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0135.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0135.884] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync", lpFilePart=0x0) returned 0x3b [0135.885] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdbe2f3df, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc86f1244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdbf3a457, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14375b8 [0135.885] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdbe2f3df, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc86f1244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdbf3a457, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.885] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf3a457, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xeee51a18, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xeee51a18, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metastore", cAlternateFileName="METAST~1")) returned 1 [0135.885] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.885] FindClose (in: hFindFile=0x14375b8 | out: hFindFile=0x14375b8) returned 1 [0135.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0135.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0135.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore", lpFilePart=0x0) returned 0x45 [0135.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore", lpFilePart=0x0) returned 0x45 [0135.885] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf3a457, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xeee51a18, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xeee51a18, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0135.887] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf3a457, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xeee51a18, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xeee51a18, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.887] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcedfba4, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdcedfba4, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xdd784592, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0135.887] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbf606c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xe7daa5ce, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xaef28414, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0135.887] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbf606c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdbf606c9, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xe7e42f17, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0135.888] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbf606c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdcbe4e66, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xeeeea374, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00002.log", cAlternateFileName="")) returned 1 [0135.888] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcbe4e66, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdcbe4e66, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xdcbe4e66, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0135.888] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcbe4e66, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdcbe4e66, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xdce20ff6, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0135.888] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbf606c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xeee51a18, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xaef4e666, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0135.888] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddb8a55c, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xddb8a55c, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xaef28414, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x160000, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta.edb", cAlternateFileName="")) returned 1 [0135.888] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.888] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0135.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.889] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Shell", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Shell", lpFilePart=0x0) returned 0x35 [0135.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.889] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Shell", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Shell", lpFilePart=0x0) returned 0x35 [0135.889] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Shell\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc877b8ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a9bc987, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0135.890] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc877b8ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a9bc987, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.890] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21191ff2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21191ff2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1be33, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultLayouts.xml", cAlternateFileName="DEFAUL~1.XML")) returned 1 [0135.890] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.890] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0135.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0135.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0135.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0135.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Shell", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Shell", lpFilePart=0x0) returned 0x35 [0135.891] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Shell\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc877b8ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a9bc987, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0135.891] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc877b8ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a9bc987, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.891] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21191ff2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21191ff2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1be33, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultLayouts.xml", cAlternateFileName="DEFAUL~1.XML")) returned 1 [0135.891] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21191ff2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21191ff2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1be33, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultLayouts.xml", cAlternateFileName="DEFAUL~1.XML")) returned 0 [0135.891] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0135.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0135.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0135.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", lpFilePart=0x0) returned 0x48 [0135.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", lpFilePart=0x0) returned 0x48 [0135.892] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2dc) returned 1 [0135.894] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", lpFilePart=0x0) returned 0x34 [0135.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.894] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", lpFilePart=0x0) returned 0x34 [0135.894] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e2eece, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xb2e5e816, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xb2e5e816, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436f78 [0135.894] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e2eece, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xb2e5e816, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xb2e5e816, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.894] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e5e816, ftCreationTime.dwHighDateTime=0x1d5f12a, ftLastAccessTime.dwLowDateTime=0xb2e5e816, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xb2e5e816, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="UPPS.bin", cAlternateFileName="")) returned 1 [0135.895] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.895] FindClose (in: hFindFile=0x1436f78 | out: hFindFile=0x1436f78) returned 1 [0135.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0135.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0135.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0135.895] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", lpFilePart=0x0) returned 0x34 [0135.895] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e2eece, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xb2e5e816, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xb2e5e816, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0135.895] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e2eece, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xb2e5e816, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xb2e5e816, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.895] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e5e816, ftCreationTime.dwHighDateTime=0x1d5f12a, ftLastAccessTime.dwLowDateTime=0xb2e5e816, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xb2e5e816, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="UPPS.bin", cAlternateFileName="")) returned 1 [0135.896] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e5e816, ftCreationTime.dwHighDateTime=0x1d5f12a, ftLastAccessTime.dwLowDateTime=0xb2e5e816, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xb2e5e816, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="UPPS.bin", cAlternateFileName="")) returned 0 [0135.896] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0135.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0135.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0135.896] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache", lpFilePart=0x0) returned 0x38 [0135.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.896] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache", lpFilePart=0x0) returned 0x38 [0135.896] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x39f10df7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x6b89269d, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0x6b89269d, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0135.896] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x39f10df7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x6b89269d, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0x6b89269d, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.897] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43eaf750, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43eaf750, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44ae837b, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01.chk", cAlternateFileName="")) returned 1 [0135.897] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf4ccc1ad, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6c1d8a7e, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01.log", cAlternateFileName="")) returned 1 [0135.897] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7f98f9f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8f905a42, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0100047.log", cAlternateFileName="")) returned 1 [0135.897] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb7ffdaa6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x230ee41a, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0100048.log", cAlternateFileName="")) returned 1 [0135.897] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf3c8cc16, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6b89269d, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0100049.log", cAlternateFileName="")) returned 1 [0135.897] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43e89537, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43e89537, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43eaf750, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01res00001.jrs", cAlternateFileName="V01RES~1.JRS")) returned 1 [0135.898] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43eaf750, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43eaf750, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43eaf750, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01res00002.jrs", cAlternateFileName="V01RES~2.JRS")) returned 1 [0135.898] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf52c214c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x32367721, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01tmp.log", cAlternateFileName="")) returned 1 [0135.898] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ed59ae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43ed59ae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xba1315ed, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x2200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCacheV01.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 1 [0135.898] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce6d1255, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce6d1255, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x6c1b26d6, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCacheV01.jfm", cAlternateFileName="WEBCAC~1.JFM")) returned 1 [0135.898] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.898] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0135.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0135.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0135.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0135.899] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache", lpFilePart=0x0) returned 0x38 [0135.899] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x39f10df7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x6b89269d, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0x6b89269d, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0135.899] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x39f10df7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x6b89269d, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0x6b89269d, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.899] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43eaf750, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43eaf750, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44ae837b, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01.chk", cAlternateFileName="")) returned 1 [0135.899] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf4ccc1ad, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6c1d8a7e, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01.log", cAlternateFileName="")) returned 1 [0135.899] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7f98f9f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8f905a42, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0100047.log", cAlternateFileName="")) returned 1 [0135.900] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb7ffdaa6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x230ee41a, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0100048.log", cAlternateFileName="")) returned 1 [0135.900] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf3c8cc16, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6b89269d, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0100049.log", cAlternateFileName="")) returned 1 [0135.900] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43e89537, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43e89537, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43eaf750, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01res00001.jrs", cAlternateFileName="V01RES~1.JRS")) returned 1 [0135.900] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43eaf750, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43eaf750, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43eaf750, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01res00002.jrs", cAlternateFileName="V01RES~2.JRS")) returned 1 [0135.900] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf52c214c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x32367721, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01tmp.log", cAlternateFileName="")) returned 1 [0135.901] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ed59ae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43ed59ae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xba1315ed, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x2200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCacheV01.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 1 [0135.901] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce6d1255, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce6d1255, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x6c1b26d6, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCacheV01.jfm", cAlternateFileName="WEBCAC~1.JFM")) returned 1 [0135.901] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce6d1255, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce6d1255, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x6c1b26d6, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCacheV01.jfm", cAlternateFileName="WEBCAC~1.JFM")) returned 0 [0135.901] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0135.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0135.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0135.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x33 [0135.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.902] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x33 [0135.902] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa64c01, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0135.903] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa64c01, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.903] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa8ae29, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERC", cAlternateFileName="")) returned 1 [0135.903] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa8ae29, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERC", cAlternateFileName="")) returned 0 [0135.903] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0135.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0135.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0135.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0135.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x33 [0135.904] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa64c01, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0135.904] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa64c01, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.905] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa8ae29, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERC", cAlternateFileName="")) returned 1 [0135.905] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.905] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0135.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0135.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0135.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", lpFilePart=0x0) returned 0x37 [0135.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", lpFilePart=0x0) returned 0x37 [0135.906] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa8ae29, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0135.906] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa8ae29, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.906] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fa8ae29, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa8ae29, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa8ae29, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewedids.resp", cAlternateFileName="VIEWED~1.RES")) returned 1 [0135.906] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.907] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0135.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX", lpFilePart=0x0) returned 0x34 [0135.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX", lpFilePart=0x0) returned 0x34 [0135.907] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc87ee20a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0135.907] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc87ee20a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.908] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fcdc89b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fcdc89b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group1", cAlternateFileName="")) returned 1 [0135.908] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fdc1691, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fdc1691, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group2", cAlternateFileName="")) returned 1 [0135.908] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x71128d69, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71128d69, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group3", cAlternateFileName="")) returned 1 [0135.908] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x71128d69, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71128d69, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group3", cAlternateFileName="")) returned 0 [0135.908] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0135.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0135.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0135.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0135.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX", lpFilePart=0x0) returned 0x34 [0135.909] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc87ee20a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0135.909] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc87ee20a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.909] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fcdc89b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fcdc89b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group1", cAlternateFileName="")) returned 1 [0135.910] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fdc1691, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fdc1691, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group2", cAlternateFileName="")) returned 1 [0135.910] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x71128d69, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71128d69, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group3", cAlternateFileName="")) returned 1 [0135.910] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.910] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0135.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0135.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0135.910] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", lpFilePart=0x0) returned 0x3b [0135.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.911] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", lpFilePart=0x0) returned 0x3b [0135.911] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fcdc89b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fcdc89b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0135.911] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fcdc89b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fcdc89b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.911] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21191ff2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21191ff2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 - Desktop.lnk", cAlternateFileName="1-DESK~1.LNK")) returned 1 [0135.911] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x349ce1cf, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x349ce1cf, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.912] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.912] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0135.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", lpFilePart=0x0) returned 0x3b [0135.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", lpFilePart=0x0) returned 0x3b [0135.912] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fdc1691, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fdc1691, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0135.982] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fdc1691, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fdc1691, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.983] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21191ff2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21191ff2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 - Run.lnk", cAlternateFileName="1-RUN~1.LNK")) returned 1 [0135.983] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21191ff2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21191ff2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d67afb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 - Search.lnk", cAlternateFileName="2-SEAR~1.LNK")) returned 1 [0135.983] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21191ff2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21191ff2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="3 - Windows Explorer.lnk", cAlternateFileName="3-WIND~1.LNK")) returned 1 [0135.983] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21191ff2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21191ff2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d67afb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="4 - Control Panel.lnk", cAlternateFileName="4-CONT~1.LNK")) returned 1 [0135.983] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2116bd92, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2116bd92, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5 - Task Manager.lnk", cAlternateFileName="5-TASK~1.LNK")) returned 1 [0135.983] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x349a7f84, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x349a7f84, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.984] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.984] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0135.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.985] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", lpFilePart=0x0) returned 0x3b [0135.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0135.985] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", lpFilePart=0x0) returned 0x3b [0135.985] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x71128d69, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71128d69, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437738 [0135.987] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x71128d69, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71128d69, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.987] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2116bd92, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2116bd92, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61dda244, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="01 - Command Prompt.lnk", cAlternateFileName="01-COM~1.LNK")) returned 1 [0135.987] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2116bd92, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2116bd92, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d67afb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="01a - Windows PowerShell.lnk", cAlternateFileName="01A-WI~1.LNK")) returned 1 [0135.987] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2116bd92, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2116bd92, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61dda244, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x0, dwReserved1=0x0, cFileName="02 - Command Prompt.lnk", cAlternateFileName="02-COM~1.LNK")) returned 1 [0135.988] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2116bd92, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2116bd92, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="02a - Windows PowerShell.lnk", cAlternateFileName="02A-WI~1.LNK")) returned 1 [0135.988] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2116bd92, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2116bd92, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d67afb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="03 - Computer Management.lnk", cAlternateFileName="03-COM~1.LNK")) returned 1 [0135.988] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21145b33, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21145b33, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="04 - Disk Management.lnk", cAlternateFileName="04-DIS~1.LNK")) returned 1 [0135.988] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e390aa6, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3e390aa6, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="04-1 - Network Connections.lnk", cAlternateFileName="")) returned 1 [0135.988] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21145b33, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21145b33, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d67afb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e, dwReserved0=0x0, dwReserved1=0x0, cFileName="04-1 - NetworkStatus.lnk", cAlternateFileName="04-1-N~1.LNK")) returned 1 [0135.988] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21145b33, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21145b33, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x0, dwReserved1=0x0, cFileName="05 - Device Manager.lnk", cAlternateFileName="05-DEV~1.LNK")) returned 1 [0135.989] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e36a870, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3e36a870, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="06 - System.lnk", cAlternateFileName="")) returned 1 [0135.989] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21145b33, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21145b33, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x628, dwReserved0=0x0, dwReserved1=0x0, cFileName="06 - SystemAbout.lnk", cAlternateFileName="06-SYS~1.LNK")) returned 1 [0135.989] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21145b33, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21145b33, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="07 - Event Viewer.lnk", cAlternateFileName="07-EVE~1.LNK")) returned 1 [0135.989] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e36a870, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3e36a870, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x0, dwReserved1=0x0, cFileName="08 - Power Options.lnk", cAlternateFileName="")) returned 1 [0135.989] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21145b33, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21145b33, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62a, dwReserved0=0x0, dwReserved1=0x0, cFileName="08 - PowerAndSleep.lnk", cAlternateFileName="08-POW~1.LNK")) returned 1 [0135.989] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2111f8cb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2111f8cb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="09 - Mobility Center.lnk", cAlternateFileName="09-MOB~1.LNK")) returned 1 [0135.989] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2111f8cb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2111f8cb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62a, dwReserved0=0x0, dwReserved1=0x0, cFileName="10 - AppsAndFeatures.lnk", cAlternateFileName="10-APP~1.LNK")) returned 1 [0135.990] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e344624, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3e344624, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x0, dwReserved1=0x0, cFileName="10 - Programs and Features.lnk", cAlternateFileName="10-PRO~1.LNK")) returned 1 [0135.990] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3495bb0d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3495bb0d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.990] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.990] FindClose (in: hFindFile=0x1437738 | out: hFindFile=0x1437738) returned 1 [0135.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0135.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0135.991] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live", lpFilePart=0x0) returned 0x34 [0135.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0135.991] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live", lpFilePart=0x0) returned 0x34 [0135.991] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0135.992] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.992] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bici", cAlternateFileName="")) returned 1 [0135.993] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bici", cAlternateFileName="")) returned 0 [0135.993] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0135.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0135.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0135.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0135.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live", lpFilePart=0x0) returned 0x34 [0135.993] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0135.993] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.994] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bici", cAlternateFileName="")) returned 1 [0135.994] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.994] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0135.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0135.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0135.994] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici", lpFilePart=0x0) returned 0x39 [0135.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0135.994] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici", lpFilePart=0x0) returned 0x39 [0135.994] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0135.997] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.997] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe902d843, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0xe902d843, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xe902d843, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x594, dwReserved0=0x0, dwReserved1=0x0, cFileName="_00.sqm", cAlternateFileName="")) returned 1 [0135.997] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe98134fe, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0xe98134fe, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xe98134fe, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="_01.sqm", cAlternateFileName="")) returned 1 [0135.997] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b8cc706, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4b8cc706, ftLastAccessTime.dwHighDateTime=0x1d32747, ftLastWriteTime.dwLowDateTime=0x4b8cc706, ftLastWriteTime.dwHighDateTime=0x1d32747, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_02.sqm", cAlternateFileName="")) returned 1 [0135.997] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bc5ffac, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4bc5ffac, ftLastAccessTime.dwHighDateTime=0x1d32747, ftLastWriteTime.dwLowDateTime=0x4bc5ffac, ftLastWriteTime.dwHighDateTime=0x1d32747, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="_03.sqm", cAlternateFileName="")) returned 1 [0135.998] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79179b2, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x79179b2, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x79179b2, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="_04.sqm", cAlternateFileName="")) returned 1 [0135.998] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c128cb, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7c128cb, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x7c128cb, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="_05.sqm", cAlternateFileName="")) returned 1 [0135.998] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59bd19cf, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x59bd19cf, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x59bd19cf, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_06.sqm", cAlternateFileName="")) returned 1 [0135.998] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a1eda14, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x5a1eda14, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5a1eda14, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="_07.sqm", cAlternateFileName="")) returned 1 [0135.998] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1127b2b7, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x1127b2b7, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x1127b2b7, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="_08.sqm", cAlternateFileName="")) returned 1 [0135.998] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13b9f377, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x13b9f377, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x13b9f377, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="_09.sqm", cAlternateFileName="")) returned 1 [0135.998] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.999] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0135.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0135.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0135.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0135.999] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici", lpFilePart=0x0) returned 0x39 [0135.999] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374b8 [0136.000] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.001] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe902d843, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0xe902d843, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xe902d843, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x594, dwReserved0=0x0, dwReserved1=0x0, cFileName="_00.sqm", cAlternateFileName="")) returned 1 [0136.001] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe98134fe, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0xe98134fe, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xe98134fe, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="_01.sqm", cAlternateFileName="")) returned 1 [0136.001] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b8cc706, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4b8cc706, ftLastAccessTime.dwHighDateTime=0x1d32747, ftLastWriteTime.dwLowDateTime=0x4b8cc706, ftLastWriteTime.dwHighDateTime=0x1d32747, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_02.sqm", cAlternateFileName="")) returned 1 [0136.001] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bc5ffac, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4bc5ffac, ftLastAccessTime.dwHighDateTime=0x1d32747, ftLastWriteTime.dwLowDateTime=0x4bc5ffac, ftLastWriteTime.dwHighDateTime=0x1d32747, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="_03.sqm", cAlternateFileName="")) returned 1 [0136.001] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79179b2, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x79179b2, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x79179b2, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="_04.sqm", cAlternateFileName="")) returned 1 [0136.002] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c128cb, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7c128cb, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x7c128cb, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="_05.sqm", cAlternateFileName="")) returned 1 [0136.002] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59bd19cf, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x59bd19cf, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x59bd19cf, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_06.sqm", cAlternateFileName="")) returned 1 [0136.002] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a1eda14, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x5a1eda14, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5a1eda14, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="_07.sqm", cAlternateFileName="")) returned 1 [0136.002] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1127b2b7, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x1127b2b7, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x1127b2b7, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="_08.sqm", cAlternateFileName="")) returned 1 [0136.002] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13b9f377, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x13b9f377, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x13b9f377, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="_09.sqm", cAlternateFileName="")) returned 1 [0136.003] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13b9f377, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x13b9f377, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x13b9f377, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="_09.sqm", cAlternateFileName="")) returned 0 [0136.003] FindClose (in: hFindFile=0x14374b8 | out: hFindFile=0x14374b8) returned 1 [0136.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x37 [0136.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0136.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x37 [0136.004] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0136.004] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.005] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0136.005] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3495bb0d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3495bb0d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings (1).ini", cAlternateFileName="")) returned 1 [0136.005] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e344624, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3e344624, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings (2).ini", cAlternateFileName="")) returned 1 [0136.005] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2111f8cb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2111f8cb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5f90064, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0136.005] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.005] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0136.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0136.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0136.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0136.006] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x37 [0136.006] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437738 [0136.006] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.006] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0136.006] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3495bb0d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3495bb0d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings (1).ini", cAlternateFileName="")) returned 1 [0136.006] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e344624, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3e344624, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings (2).ini", cAlternateFileName="")) returned 1 [0136.007] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2111f8cb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2111f8cb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5f90064, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0136.007] FindNextFileW (in: hFindFile=0x1437738, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2111f8cb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2111f8cb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5f90064, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 0 [0136.007] FindClose (in: hFindFile=0x1437738 | out: hFindFile=0x1437738) returned 1 [0136.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0136.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0136.007] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x3f [0136.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.007] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x3f [0136.007] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0136.007] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.008] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0136.008] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0136.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.009] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x3f [0136.009] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374b8 [0136.009] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.009] FindNextFileW (in: hFindFile=0x14374b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0136.010] FindClose (in: hFindFile=0x14374b8 | out: hFindFile=0x14374b8) returned 1 [0136.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0136.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0136.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0136.010] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370f8 [0136.010] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.010] FindNextFileW (in: hFindFile=0x14370f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0136.010] FindClose (in: hFindFile=0x14370f8 | out: hFindFile=0x14370f8) returned 1 [0136.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0136.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0136.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0136.011] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0136.011] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436f78 [0136.011] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.011] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0136.011] FindClose (in: hFindFile=0x1436f78 | out: hFindFile=0x1436f78) returned 1 [0136.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0136.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0136.011] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", lpFilePart=0x0) returned 0x2b [0136.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0136.011] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", lpFilePart=0x0) returned 0x2b [0136.011] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0136.012] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.012] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedCacheContainers", cAlternateFileName="SHARED~1")) returned 1 [0136.012] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1 [0136.012] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 0 [0136.012] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0136.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0136.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0136.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0136.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", lpFilePart=0x0) returned 0x2b [0136.012] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0136.013] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.013] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedCacheContainers", cAlternateFileName="SHARED~1")) returned 1 [0136.013] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1 [0136.013] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.013] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0136.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0136.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0136.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", lpFilePart=0x0) returned 0x41 [0136.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0136.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", lpFilePart=0x0) returned 0x41 [0136.013] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0136.014] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.014] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_bingpagedata", cAlternateFileName="MICROS~4")) returned 1 [0136.015] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_DNTException", cAlternateFileName="MI18F7~1")) returned 1 [0136.015] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_EmieSiteList", cAlternateFileName="MICFB7~1")) returned 1 [0136.015] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_EmieUserList", cAlternateFileName="MI15A7~1")) returned 1 [0136.015] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_iecompat", cAlternateFileName="MICROS~1")) returned 1 [0136.015] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_iecompatua", cAlternateFileName="MICROS~2")) returned 1 [0136.015] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_ieflipahead", cAlternateFileName="MICROS~3")) returned 1 [0136.015] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_ieflipahead", cAlternateFileName="MICROS~3")) returned 0 [0136.015] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0136.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0136.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0136.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0136.016] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", lpFilePart=0x0) returned 0x41 [0136.016] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0136.017] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.017] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_bingpagedata", cAlternateFileName="MICROS~4")) returned 1 [0136.017] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_DNTException", cAlternateFileName="MI18F7~1")) returned 1 [0136.018] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_EmieSiteList", cAlternateFileName="MICFB7~1")) returned 1 [0136.018] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_EmieUserList", cAlternateFileName="MI15A7~1")) returned 1 [0136.018] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_iecompat", cAlternateFileName="MICROS~1")) returned 1 [0136.018] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_iecompatua", cAlternateFileName="MICROS~2")) returned 1 [0136.018] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_ieflipahead", cAlternateFileName="MICROS~3")) returned 1 [0136.018] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.018] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0136.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0136.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0136.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", lpFilePart=0x0) returned 0x5c [0136.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", lpFilePart=0x0) returned 0x5c [0136.019] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0136.021] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.021] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf98c6f7b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c6f7b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c6f7b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.021] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.021] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0136.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.021] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", lpFilePart=0x0) returned 0x5c [0136.021] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0136.021] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.022] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf98c6f7b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c6f7b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c6f7b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.022] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf98c6f7b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c6f7b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c6f7b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0136.022] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0136.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", lpFilePart=0x0) returned 0x5c [0136.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", lpFilePart=0x0) returned 0x5c [0136.022] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14375b8 [0136.022] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.022] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x909a2acc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x909a2acc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.023] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.023] FindClose (in: hFindFile=0x14375b8 | out: hFindFile=0x14375b8) returned 1 [0136.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.023] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", lpFilePart=0x0) returned 0x5c [0136.023] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0136.023] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.023] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x909a2acc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x909a2acc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.023] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x909a2acc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x909a2acc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0136.023] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0136.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", lpFilePart=0x0) returned 0x5c [0136.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", lpFilePart=0x0) returned 0x5c [0136.024] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370b8 [0136.024] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.024] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.024] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.024] FindClose (in: hFindFile=0x14370b8 | out: hFindFile=0x14370b8) returned 1 [0136.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", lpFilePart=0x0) returned 0x5c [0136.025] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0136.025] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.025] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.025] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0136.025] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0136.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", lpFilePart=0x0) returned 0x5c [0136.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", lpFilePart=0x0) returned 0x5c [0136.025] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0136.026] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.026] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92b04223, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92b04223, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.026] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.027] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0136.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", lpFilePart=0x0) returned 0x5c [0136.027] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14375b8 [0136.027] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.027] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92b04223, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92b04223, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.027] FindNextFileW (in: hFindFile=0x14375b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92b04223, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92b04223, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0136.027] FindClose (in: hFindFile=0x14375b8 | out: hFindFile=0x14375b8) returned 1 [0136.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", lpFilePart=0x0) returned 0x58 [0136.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", lpFilePart=0x0) returned 0x58 [0136.028] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437038 [0136.028] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.028] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf542405, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf542405, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf542405, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.028] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0889c9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x31bb6535, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x132e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatData.xml", cAlternateFileName="IECOMP~1.XML")) returned 1 [0136.124] FindNextFileW (in: hFindFile=0x1437038, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.124] FindClose (in: hFindFile=0x1437038 | out: hFindFile=0x1437038) returned 1 [0136.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", lpFilePart=0x0) returned 0x58 [0136.124] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0136.124] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.124] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf542405, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf542405, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf542405, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.125] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0889c9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x31bb6535, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x132e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatData.xml", cAlternateFileName="IECOMP~1.XML")) returned 1 [0136.125] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0889c9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x31bb6535, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x132e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatData.xml", cAlternateFileName="IECOMP~1.XML")) returned 0 [0136.125] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0136.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", lpFilePart=0x0) returned 0x5a [0136.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", lpFilePart=0x0) returned 0x5a [0136.125] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0136.126] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.126] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.126] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.126] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0136.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.126] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", lpFilePart=0x0) returned 0x5a [0136.126] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0136.126] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.126] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.127] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0136.127] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0136.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.127] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", lpFilePart=0x0) returned 0x5b [0136.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.127] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", lpFilePart=0x0) returned 0x5b [0136.127] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437538 [0136.127] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.127] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf58ffddd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.127] FindNextFileW (in: hFindFile=0x1437538, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.128] FindClose (in: hFindFile=0x1437538 | out: hFindFile=0x1437538) returned 1 [0136.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", lpFilePart=0x0) returned 0x5b [0136.128] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0136.128] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.128] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf58ffddd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0136.128] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf58ffddd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0136.128] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0136.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x30 [0136.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0136.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x30 [0136.129] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0136.130] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.130] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0136.130] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 0 [0136.131] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0136.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0136.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0136.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0136.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x30 [0136.131] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0136.131] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.131] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0136.131] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.131] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0136.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0136.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0136.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x38 [0136.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x38 [0136.131] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0136.132] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.132] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0136.132] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0136.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x38 [0136.132] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0136.132] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.133] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0136.133] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0136.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x25 [0136.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0136.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x25 [0136.133] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0136.133] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.133] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0136.133] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0136.133] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 0 [0136.134] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0136.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0136.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0136.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0136.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x25 [0136.134] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370b8 [0136.134] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.134] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0136.134] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0136.134] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.134] FindClose (in: hFindFile=0x14370b8 | out: hFindFile=0x14370b8) returned 1 [0136.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0136.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0136.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x2d [0136.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0136.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x2d [0136.135] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0136.135] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.135] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa92ca6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa92ca6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdd9723cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="postSigningData", cAlternateFileName="POSTSI~1")) returned 1 [0136.135] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0136.135] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0136.135] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0136.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0136.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0136.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0136.135] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x2d [0136.135] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371b8 [0136.135] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.135] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa92ca6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa92ca6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdd9723cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="postSigningData", cAlternateFileName="POSTSI~1")) returned 1 [0136.135] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0136.136] FindNextFileW (in: hFindFile=0x14371b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.136] FindClose (in: hFindFile=0x14371b8 | out: hFindFile=0x14371b8) returned 1 [0136.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0136.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0136.136] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x36 [0136.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.136] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x36 [0136.136] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376b8 [0136.137] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.137] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xb322ee0f, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0xb322ee0f, ftLastWriteTime.dwHighDateTime=0x1d5d80b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 1 [0136.137] FindNextFileW (in: hFindFile=0x14376b8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xb322ee0f, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0xb322ee0f, ftLastWriteTime.dwHighDateTime=0x1d5d80b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 0 [0136.378] FindClose (in: hFindFile=0x14376b8 | out: hFindFile=0x14376b8) returned 1 [0136.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x36 [0136.379] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14370b8 [0136.379] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.379] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xb322ee0f, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0xb322ee0f, ftLastWriteTime.dwHighDateTime=0x1d5d80b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 1 [0136.379] FindNextFileW (in: hFindFile=0x14370b8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.379] FindClose (in: hFindFile=0x14370b8 | out: hFindFile=0x14370b8) returned 1 [0136.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", lpFilePart=0x0) returned 0x47 [0136.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0136.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", lpFilePart=0x0) returned 0x47 [0136.379] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xb322ee0f, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0xb322ee0f, ftLastWriteTime.dwHighDateTime=0x1d5d80b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437638 [0136.381] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xb322ee0f, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0xb322ee0f, ftLastWriteTime.dwHighDateTime=0x1d5d80b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.381] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xaf5d7185, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0xaf5d7185, ftLastWriteTime.dwHighDateTime=0x1d5d80b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache2", cAlternateFileName="")) returned 1 [0136.381] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb177823c, ftCreationTime.dwHighDateTime=0x1d5d80b, ftLastAccessTime.dwLowDateTime=0xb177823c, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0xb177823c, ftLastWriteTime.dwHighDateTime=0x1d5d80b, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="directoryLinks.json", cAlternateFileName="DIRECT~1.JSO")) returned 1 [0136.382] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xf7dd7182, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0xf7dd7182, ftLastWriteTime.dwHighDateTime=0x1d5d80b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jumpListCache", cAlternateFileName="JUMPLI~1")) returned 1 [0136.382] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfcae9ac, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1 [0136.382] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3080cc6, ftCreationTime.dwHighDateTime=0x1d5d80b, ftLastAccessTime.dwLowDateTime=0xb3208b9d, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0xb3208b9d, ftLastWriteTime.dwHighDateTime=0x1d5d80b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~1")) returned 1 [0136.382] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4016fa00, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xb644042c, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0xb644042c, ftLastWriteTime.dwHighDateTime=0x1d5d80b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1 [0136.382] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe53ad66, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe53ad66, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe53ad66, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0136.382] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x481f73e1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1 [0136.382] FindNextFileW (in: hFindFile=0x1437638, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.382] FindClose (in: hFindFile=0x1437638 | out: hFindFile=0x1437638) returned 1 [0136.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0136.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0136.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x2d [0136.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0136.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x2d [0136.383] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14372f8 [0136.384] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.384] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="308046B0AF4A39CB", cAlternateFileName="308046~1")) returned 1 [0136.384] FindNextFileW (in: hFindFile=0x14372f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="308046B0AF4A39CB", cAlternateFileName="308046~1")) returned 0 [0136.384] FindClose (in: hFindFile=0x14372f8 | out: hFindFile=0x14372f8) returned 1 [0136.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0136.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0136.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0136.384] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x2d [0136.384] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373b8 [0136.384] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.384] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="308046B0AF4A39CB", cAlternateFileName="308046~1")) returned 1 [0136.384] FindNextFileW (in: hFindFile=0x14373b8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.384] FindClose (in: hFindFile=0x14373b8 | out: hFindFile=0x14373b8) returned 1 [0136.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0136.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0136.384] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB", lpFilePart=0x0) returned 0x3e [0136.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB", lpFilePart=0x0) returned 0x3e [0136.385] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14374f8 [0136.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0136.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0136.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0136.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0136.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0136.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0136.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0136.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0136.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0136.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0136.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0136.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0136.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0136.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0136.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0136.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0136.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0136.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0136.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0136.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0136.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0136.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0136.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0136.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0136.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0136.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0136.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0136.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0136.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0136.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0136.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0136.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0136.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0136.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0136.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0136.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0136.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.045] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.045] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.045] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.046] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.046] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x55 [0141.046] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.046] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.046] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.047] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.047] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x58 [0141.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.047] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x58 [0141.047] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.047] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.048] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.048] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.048] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x58 [0141.048] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.048] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.049] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.049] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.049] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x58 [0141.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.049] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x58 [0141.049] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.050] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.050] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.050] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x58 [0141.051] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0141.051] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.051] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.051] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0141.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5a [0141.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5a [0141.052] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0141.052] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.052] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.053] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0141.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.053] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5a [0141.053] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.054] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.054] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.054] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.054] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x56 [0141.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.054] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x56 [0141.054] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.055] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.055] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0141.055] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0141.055] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.056] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x56 [0141.056] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.056] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.056] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0141.057] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0141.057] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0141.057] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5b [0141.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5b [0141.058] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.058] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.058] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.058] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5b [0141.059] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.059] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.059] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.059] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.060] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x57 [0141.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.060] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x57 [0141.060] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.060] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.060] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.061] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.061] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x57 [0141.061] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.CredDialogHost_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.061] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.062] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767aed3b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x767aed3b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x767aed3b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.062] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x52 [0141.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0141.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x52 [0141.062] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.065] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.065] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0141.065] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0141.066] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0141.066] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0141.066] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0141.066] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0141.067] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0141.067] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0141.067] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0141.067] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0141.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0141.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0141.069] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x52 [0141.069] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.070] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.070] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0141.070] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0141.071] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0141.071] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0141.071] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0141.071] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0141.071] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0141.072] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0141.072] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.072] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0141.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0141.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x55 [0141.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x55 [0141.073] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0141.323] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.324] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0141.324] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0141.324] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0141.324] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0141.324] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0141.324] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0141.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.326] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x55 [0141.326] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.327] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.327] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0141.327] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0141.327] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0141.327] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0141.328] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.328] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5f [0141.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0141.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5f [0141.329] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.331] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.331] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.331] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0141.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0141.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x61 [0141.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0141.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x61 [0141.331] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.332] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.332] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.332] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0141.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0141.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x61 [0141.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0141.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x61 [0141.333] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0141.333] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.333] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.333] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0141.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0141.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0141.333] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5a [0141.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0141.333] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5a [0141.334] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.334] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.334] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe8f2692, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe8f2692, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe8f2692, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.335] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0141.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0141.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5a [0141.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5a [0141.335] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.336] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.336] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.336] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5a [0141.337] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.337] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.337] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.337] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5d [0141.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.338] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5d [0141.338] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.338] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.338] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.338] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.339] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5d [0141.339] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.339] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.339] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.339] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5d [0141.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5d [0141.340] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.340] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.340] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.340] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.341] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5d [0141.341] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.341] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.341] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.341] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5f [0141.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5f [0141.342] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0141.342] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.342] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.342] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0141.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.343] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5f [0141.343] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.343] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.343] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.343] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5b [0141.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5b [0141.344] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.344] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.344] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0141.344] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0141.345] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.345] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.345] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5b [0141.345] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.345] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.345] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0141.346] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0141.346] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0141.346] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.346] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x60 [0141.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.346] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x60 [0141.346] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.347] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.347] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.347] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x60 [0141.347] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.347] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.348] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.348] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5c [0141.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5c [0141.348] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.348] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.348] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.349] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.349] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5c [0141.349] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.349] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.349] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe87ff8e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.349] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x49 [0141.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0141.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x49 [0141.350] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388df267, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfd81bc01, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfd81bc01, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0141.352] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388df267, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfd81bc01, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfd81bc01, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.352] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x38951974, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3281324d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3281324d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0141.352] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74099, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0141.352] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa746ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0141.353] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388df267, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74ddb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x388df267, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0141.353] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa75343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0141.353] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7120db5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7120db5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0141.353] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67825a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd67825a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfd67825a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0141.353] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaafb076, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0141.353] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaafb076, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0141.354] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0141.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0141.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0141.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0141.355] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x49 [0141.355] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388df267, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfd81bc01, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfd81bc01, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.356] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388df267, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfd81bc01, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfd81bc01, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.356] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x38951974, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3281324d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3281324d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0141.356] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74099, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0141.356] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa746ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0141.356] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388df267, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74ddb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x388df267, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0141.356] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa75343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0141.357] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7120db5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7120db5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0141.357] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67825a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd67825a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfd67825a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0141.357] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaafb076, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0141.357] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.357] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0141.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0141.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4c [0141.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4c [0141.358] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x38951974, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3281324d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3281324d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.774] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x38951974, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3281324d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3281324d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.774] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa72db6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0141.775] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa731c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0141.775] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa73577, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0141.775] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa73a8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0141.775] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa73a8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0141.775] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4c [0141.776] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x38951974, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3281324d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3281324d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.777] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x38951974, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3281324d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3281324d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.777] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa72db6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0141.777] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa731c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0141.777] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa73577, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0141.777] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa73a8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0141.778] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.778] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.778] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x56 [0141.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0141.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x56 [0141.779] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa72db6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.780] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa72db6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.781] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa72db6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.781] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0141.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0141.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x58 [0141.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0141.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x58 [0141.781] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa731c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.781] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa731c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.781] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa731c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.781] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0141.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0141.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x58 [0141.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0141.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x58 [0141.782] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa73577, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.782] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa73577, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.782] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa73577, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.782] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0141.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0141.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x51 [0141.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0141.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x51 [0141.783] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa73a8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.783] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa73a8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.783] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38977bdf, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa73a8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x38977bdf, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.783] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0141.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0141.783] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x51 [0141.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.783] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x51 [0141.783] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74099, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.784] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74099, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.784] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74099, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.784] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x51 [0141.785] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74099, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.785] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74099, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.785] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74099, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.785] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x54 [0141.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x54 [0141.785] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa746ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.786] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa746ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.787] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa746ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.787] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.787] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x54 [0141.787] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa746ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.787] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa746ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.787] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa746ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.788] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.788] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x54 [0141.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.788] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x54 [0141.788] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388df267, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74ddb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x388df267, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.788] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388df267, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74ddb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x388df267, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.788] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388df267, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74ddb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x388df267, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.788] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.789] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x54 [0141.789] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388df267, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74ddb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x388df267, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.789] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388df267, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74ddb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x388df267, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.789] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388df267, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa74ddb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x388df267, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.789] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.789] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x56 [0141.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.789] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x56 [0141.789] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa75343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0141.792] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa75343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.792] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa75343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.792] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0141.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.792] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x56 [0141.792] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa75343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.793] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa75343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.793] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaa75343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.793] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x52 [0141.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x52 [0141.793] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7120db5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7120db5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0141.795] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7120db5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7120db5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.795] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3890844a, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0141.795] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfd67825a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0141.795] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbc583fcd, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0xbc583fcd, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xbc583fcd, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0141.795] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbc583fcd, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0xbc583fcd, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xbc583fcd, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0141.795] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.795] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0141.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.796] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x52 [0141.796] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7120db5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7120db5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.797] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7120db5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7120db5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.797] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3890844a, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0141.797] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfd67825a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0141.797] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbc583fcd, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0xbc583fcd, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xbc583fcd, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0141.797] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbc583fcd, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0xbc583fcd, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xbc583fcd, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0141.797] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbc583fcd, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0xbc583fcd, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xbc583fcd, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0141.797] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.798] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x57 [0141.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.798] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x57 [0141.798] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67825a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd67825a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfd67825a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.799] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67825a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd67825a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfd67825a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.799] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67825a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd67825a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfd67825a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.799] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.799] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x57 [0141.799] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67825a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd67825a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfd67825a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.799] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67825a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd67825a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfd67825a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.799] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67825a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd67825a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfd67825a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.799] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.799] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x53 [0141.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.799] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x53 [0141.799] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaafb076, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0141.800] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaafb076, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.800] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaafb076, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.800] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0141.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0141.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0141.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0141.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x53 [0141.800] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaafb076, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.800] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaafb076, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.800] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3890844a, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaafb076, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3890844a, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.800] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0141.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0141.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x46 [0141.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0141.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x46 [0141.801] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b44678d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0141.802] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b44678d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.802] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x695b3be8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x32a294bc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32a294bc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0141.802] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4e926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69567730, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0141.803] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f07a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0141.803] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f626, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0141.803] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4fd13, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0141.803] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7120db5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7120db5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0141.803] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b2c8ffc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b2c8ffc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0141.803] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcac1bf8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0141.803] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcac1bf8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0141.803] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0141.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0141.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0141.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0141.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x46 [0141.804] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b44678d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0141.805] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b44678d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.805] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x695b3be8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x32a294bc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32a294bc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4e926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69567730, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f07a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f626, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4fd13, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7120db5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7120db5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b2c8ffc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b2c8ffc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcac1bf8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.806] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0141.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0141.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0141.807] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x49 [0141.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0141.807] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x49 [0141.807] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x695b3be8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x32a294bc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32a294bc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.262] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x695b3be8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x32a294bc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32a294bc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.262] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafcd05, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0142.262] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafd21d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0142.262] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafd7c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0142.263] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4dc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.263] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4dc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0142.263] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x49 [0142.264] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x695b3be8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x32a294bc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32a294bc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.264] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x695b3be8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x32a294bc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32a294bc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.264] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafcd05, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0142.265] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafd21d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0142.265] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafd7c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0142.265] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4dc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.265] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.265] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x53 [0142.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x53 [0142.266] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafcd05, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.269] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafcd05, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.269] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafcd05, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.269] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.269] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x55 [0142.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.269] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x55 [0142.269] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafd21d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.270] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafd21d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.270] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafd21d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.270] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x55 [0142.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x55 [0142.270] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafd7c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.270] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafd7c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.270] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcaafd7c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.270] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.271] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x4e [0142.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.271] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x4e [0142.271] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4dc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.271] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4dc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.271] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696262c9, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4dc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x696262c9, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.272] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x4e [0142.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x4e [0142.272] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4e926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69567730, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.272] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4e926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69567730, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.272] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4e926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69567730, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.272] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x4e [0142.273] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4e926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69567730, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.273] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4e926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69567730, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.273] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4e926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69567730, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.273] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x51 [0142.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x51 [0142.273] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f07a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.274] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f07a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.274] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f07a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.274] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.274] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x51 [0142.274] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f07a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.274] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f07a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.274] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f07a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.274] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x51 [0142.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x51 [0142.275] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f626, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.275] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f626, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.275] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f626, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.275] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x51 [0142.276] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f626, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.276] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f626, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.276] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4f626, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.276] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x53 [0142.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x53 [0142.276] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4fd13, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.276] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4fd13, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.277] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4fd13, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.277] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x53 [0142.277] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4fd13, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.277] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4fd13, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.277] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcab4fd13, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.277] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x4f [0142.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x4f [0142.277] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7120db5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7120db5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.283] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7120db5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7120db5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.283] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x69567730, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x69567730, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0142.283] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd82ba8b0, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0142.283] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd81af838, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd81af838, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xd81af838, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0142.283] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd81af838, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd81af838, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xd81af838, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0142.283] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.283] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x4f [0142.284] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7120db5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7120db5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.285] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7120db5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7120db5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.285] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x69567730, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x69567730, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0142.286] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69567730, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd82ba8b0, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0142.286] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd81af838, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd81af838, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xd81af838, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0142.286] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd81af838, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd81af838, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xd81af838, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0142.286] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd81af838, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd81af838, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xd81af838, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0142.286] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x54 [0142.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x54 [0142.287] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b2c8ffc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b2c8ffc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.287] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b2c8ffc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b2c8ffc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.287] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b2c8ffc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b2c8ffc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.287] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x54 [0142.288] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b2c8ffc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b2c8ffc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.288] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b2c8ffc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b2c8ffc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.288] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b2c8ffc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b2c8ffc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b2c8ffc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.288] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x50 [0142.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x50 [0142.288] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcac1bf8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.288] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcac1bf8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.288] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcac1bf8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.288] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x50 [0142.289] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcac1bf8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.289] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcac1bf8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.289] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x695414de, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcac1bf8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x695414de, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.289] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x48 [0142.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0142.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x48 [0142.289] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfbf856cf, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbf856cf, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.289] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfbf856cf, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbf856cf, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.289] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352eddd8, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x32d4a634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32d4a634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0142.289] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3525549b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad7a98d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3525549b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0142.289] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351968ce, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x432e06f1, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x432e06f1, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0142.290] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x32e556a9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32e556a9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0142.290] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaddd25d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3517066f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0142.290] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351968ce, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x71233dac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71233dac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0142.290] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbc3e2f6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfbc3e2f6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbc3e2f6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0142.290] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x45c47a35, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x45c47a35, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0142.290] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x45c47a35, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x45c47a35, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0142.290] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0142.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0142.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0142.290] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x48 [0142.290] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfbf856cf, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbf856cf, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.290] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfbf856cf, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbf856cf, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.290] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352eddd8, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x32d4a634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32d4a634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0142.290] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3525549b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad7a98d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3525549b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0142.290] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351968ce, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x432e06f1, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x432e06f1, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0142.290] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x32e556a9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32e556a9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0142.291] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaddd25d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3517066f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0142.291] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351968ce, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x71233dac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71233dac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0142.291] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbc3e2f6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfbc3e2f6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbc3e2f6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0142.291] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x45c47a35, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x45c47a35, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0142.291] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.291] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0142.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0142.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4b [0142.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4b [0142.291] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352eddd8, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x32d4a634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32d4a634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.291] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352eddd8, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x32d4a634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32d4a634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.291] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x35314053, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x43eeca81, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x43eeca81, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0142.291] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x35314053, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcac7208c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3092ed16, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0142.291] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x35314053, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcac72437, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35314053, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0142.291] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x30f119eb, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0xcac7286c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x30f119eb, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0142.291] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352eddd8, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad79be4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352eddd8, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.292] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352eddd8, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad79be4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352eddd8, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0142.292] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.292] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4b [0142.292] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352eddd8, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x32d4a634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32d4a634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0142.292] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352eddd8, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x32d4a634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32d4a634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.292] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x35314053, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x43eeca81, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x43eeca81, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0142.292] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x35314053, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcac7208c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3092ed16, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0142.292] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x35314053, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcac72437, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35314053, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0142.292] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x30f119eb, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0xcac7286c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x30f119eb, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0142.292] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352eddd8, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad79be4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352eddd8, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.292] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.292] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0142.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.292] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x55 [0142.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.293] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x55 [0142.293] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x35314053, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x43eeca81, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x43eeca81, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0142.293] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x35314053, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x43eeca81, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x43eeca81, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.294] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x3086106f, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0x3086106f, ftLastAccessTime.dwHighDateTime=0x1d32719, ftLastWriteTime.dwLowDateTime=0x3086106f, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0142.294] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.294] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0142.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.296] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x57 [0142.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.296] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x57 [0142.296] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x35314053, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcac7208c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3092ed16, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0142.296] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x35314053, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcac7208c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3092ed16, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.296] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x3092ed16, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0x3092ed16, ftLastAccessTime.dwHighDateTime=0x1d32719, ftLastWriteTime.dwLowDateTime=0x3092ed16, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0142.296] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.296] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0142.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.296] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x57 [0142.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.296] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x57 [0142.296] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x35314053, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcac72437, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35314053, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.297] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x35314053, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcac72437, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35314053, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.297] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x35314053, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcac72437, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35314053, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.297] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.297] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\Microsoft", lpFilePart=0x0) returned 0x55 [0142.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.297] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\Microsoft", lpFilePart=0x0) returned 0x55 [0142.297] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\Microsoft\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x30f119eb, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0xcac7286c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x30f119eb, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.298] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x30f119eb, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0xcac7286c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x30f119eb, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.298] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x30f119eb, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0x30f119eb, ftLastAccessTime.dwHighDateTime=0x1d32719, ftLastWriteTime.dwLowDateTime=0x30f119eb, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0142.298] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x30f119eb, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0x30f119eb, ftLastAccessTime.dwHighDateTime=0x1d32719, ftLastWriteTime.dwLowDateTime=0x30f119eb, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 0 [0142.298] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x50 [0142.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x50 [0142.302] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352eddd8, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad79be4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352eddd8, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352eddd8, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad79be4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352eddd8, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.480] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352eddd8, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad79be4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352eddd8, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.480] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.480] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x50 [0142.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.480] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x50 [0142.480] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3525549b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad7a98d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3525549b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.481] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3525549b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad7a98d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3525549b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.481] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3525549b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad7a98d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3525549b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.481] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x50 [0142.481] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3525549b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad7a98d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3525549b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.481] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3525549b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad7a98d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3525549b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.481] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3525549b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcad7a98d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3525549b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.481] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.482] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x53 [0142.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.482] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x53 [0142.482] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351968ce, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x432e06f1, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x432e06f1, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.483] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351968ce, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x432e06f1, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x432e06f1, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.483] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41db781c, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x432ba5e8, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x432e06f1, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HasRegisteredAsDefaultApp.setting", cAlternateFileName="HASREG~1.SET")) returned 1 [0142.484] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44901b03, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x44901b03, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf175751c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessagingBackgroundTaskLog.etl", cAlternateFileName="MESSAG~1.ETL")) returned 1 [0142.484] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfefaf88c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xfefaf88c, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x68f09cc9, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessagingBackgroundTaskLog.last.etl", cAlternateFileName="MESSAG~2.ETL")) returned 1 [0142.484] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x477cbe66, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x47c90a09, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x47d29387, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivateTransportId.setting", cAlternateFileName="PRIVAT~1.SET")) returned 1 [0142.484] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51c28409, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51c28409, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51c28409, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x5, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportIdList.setting", cAlternateFileName="TRANSP~1.SET")) returned 1 [0142.484] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.484] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x53 [0142.485] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351968ce, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x432e06f1, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x432e06f1, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.485] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351968ce, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x432e06f1, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x432e06f1, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.486] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41db781c, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x432ba5e8, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x432e06f1, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HasRegisteredAsDefaultApp.setting", cAlternateFileName="HASREG~1.SET")) returned 1 [0142.486] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44901b03, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x44901b03, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf175751c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessagingBackgroundTaskLog.etl", cAlternateFileName="MESSAG~1.ETL")) returned 1 [0142.486] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfefaf88c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xfefaf88c, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x68f09cc9, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessagingBackgroundTaskLog.last.etl", cAlternateFileName="MESSAG~2.ETL")) returned 1 [0142.486] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x477cbe66, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x47c90a09, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x47d29387, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivateTransportId.setting", cAlternateFileName="PRIVAT~1.SET")) returned 1 [0142.486] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51c28409, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51c28409, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51c28409, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x5, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportIdList.setting", cAlternateFileName="TRANSP~1.SET")) returned 1 [0142.486] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51c28409, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51c28409, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51c28409, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x5, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportIdList.setting", cAlternateFileName="TRANSP~1.SET")) returned 0 [0142.486] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.487] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x53 [0142.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.487] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x53 [0142.487] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x32e556a9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32e556a9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.489] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x32e556a9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32e556a9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.489] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d98576a, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0xcaddc3d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2da533b7, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataRv", cAlternateFileName="")) returned 1 [0142.489] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x277eae51, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0xcaddcc98, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x278838e6, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RootTools", cAlternateFileName="ROOTTO~1")) returned 1 [0142.489] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29bd4d56, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0x29bd4d56, ftLastAccessTime.dwHighDateTime=0x1d32719, ftLastWriteTime.dwLowDateTime=0x29bd4d56, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="shared.lck", cAlternateFileName="")) returned 1 [0142.489] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b24e25c, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0x2b24e25c, ftLastAccessTime.dwHighDateTime=0x1d32719, ftLastWriteTime.dwLowDateTime=0x32771c19, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="shared.xml", cAlternateFileName="")) returned 1 [0142.489] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e6f4e10, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3e6f4e10, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x8b48dd70, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.log", cAlternateFileName="")) returned 1 [0142.489] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.489] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.490] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x53 [0142.490] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x32e556a9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32e556a9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0142.491] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x32e556a9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x32e556a9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.491] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d98576a, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0xcaddc3d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2da533b7, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataRv", cAlternateFileName="")) returned 1 [0142.491] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x277eae51, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0xcaddcc98, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x278838e6, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RootTools", cAlternateFileName="ROOTTO~1")) returned 1 [0142.491] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29bd4d56, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0x29bd4d56, ftLastAccessTime.dwHighDateTime=0x1d32719, ftLastWriteTime.dwLowDateTime=0x29bd4d56, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="shared.lck", cAlternateFileName="")) returned 1 [0142.491] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b24e25c, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0x2b24e25c, ftLastAccessTime.dwHighDateTime=0x1d32719, ftLastWriteTime.dwLowDateTime=0x32771c19, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="shared.xml", cAlternateFileName="")) returned 1 [0142.491] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e6f4e10, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3e6f4e10, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x8b48dd70, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.log", cAlternateFileName="")) returned 1 [0142.491] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e6f4e10, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3e6f4e10, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x8b48dd70, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.log", cAlternateFileName="")) returned 0 [0142.491] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0142.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState\\DataRv", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState\\DataRv", lpFilePart=0x0) returned 0x5a [0142.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState\\DataRv", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState\\DataRv", lpFilePart=0x0) returned 0x5a [0142.492] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState\\DataRv\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d98576a, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0xcaddc3d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2da533b7, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.494] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d98576a, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0xcaddc3d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2da533b7, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.494] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d9dbaf3, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0x2d9dbaf3, ftLastAccessTime.dwHighDateTime=0x1d32719, ftLastWriteTime.dwLowDateTime=0x74d6b97e, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0x200818, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline-storage-ecs.data", cAlternateFileName="OFFLIN~1.DAT")) returned 1 [0142.494] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da533b7, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0x2da533b7, ftLastAccessTime.dwHighDateTime=0x1d32719, ftLastWriteTime.dwLowDateTime=0x50cbc548, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0x300c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline-storage.data", cAlternateFileName="OFFLIN~2.DAT")) returned 1 [0142.495] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.495] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState\\RootTools", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState\\RootTools", lpFilePart=0x0) returned 0x5d [0142.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState\\RootTools", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState\\RootTools", lpFilePart=0x0) returned 0x5d [0142.495] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\LocalState\\RootTools\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x277eae51, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0xcaddcc98, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x278838e6, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0142.496] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x277eae51, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0xcaddcc98, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x278838e6, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.496] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x278838e6, ftCreationTime.dwHighDateTime=0x1d32719, ftLastAccessTime.dwLowDateTime=0x278838e6, ftLastAccessTime.dwHighDateTime=0x1d32719, ftLastWriteTime.dwLowDateTime=0x27b0c132, ftLastWriteTime.dwHighDateTime=0x1d32719, nFileSizeHigh=0x0, nFileSizeLow=0x4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="roottools.conf", cAlternateFileName="ROOTTO~1.CON")) returned 1 [0142.497] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.497] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0142.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.497] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x55 [0142.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.497] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x55 [0142.497] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaddd25d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3517066f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.498] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaddd25d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3517066f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.498] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaddd25d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3517066f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.498] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.498] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x55 [0142.498] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaddd25d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3517066f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.498] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaddd25d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3517066f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.498] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcaddd25d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3517066f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.498] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.498] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x51 [0142.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.498] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x51 [0142.498] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351968ce, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x71233dac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71233dac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.500] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351968ce, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x71233dac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71233dac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.500] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3525549b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3525549b, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x3525549b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0142.500] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x351bcb14, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf24bf83c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xf24bf83c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0142.500] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x42fd2d0e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x42fd2d0e, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x42fd2d0e, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0142.500] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x42ff8fca, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x42ff8fca, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x42ff8fca, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0142.500] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.500] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.501] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x51 [0142.501] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351968ce, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x71233dac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71233dac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0142.502] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351968ce, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x71233dac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71233dac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.502] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3525549b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3525549b, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x3525549b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0142.502] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x351bcb14, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf24bf83c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xf24bf83c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0142.502] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x42fd2d0e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x42fd2d0e, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x42fd2d0e, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0142.502] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x42ff8fca, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x42ff8fca, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x42ff8fca, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0142.502] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x42ff8fca, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x42ff8fca, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x42ff8fca, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0142.502] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0142.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.503] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x56 [0142.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.503] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x56 [0142.503] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbc3e2f6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfbc3e2f6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbc3e2f6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.504] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbc3e2f6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfbc3e2f6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbc3e2f6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.504] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbc3e2f6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfbc3e2f6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbc3e2f6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.504] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.504] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x56 [0142.504] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbc3e2f6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfbc3e2f6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbc3e2f6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.504] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbc3e2f6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfbc3e2f6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbc3e2f6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.504] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbc3e2f6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfbc3e2f6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbc3e2f6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.505] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x52 [0142.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x52 [0142.505] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x45c47a35, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x45c47a35, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.505] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x45c47a35, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x45c47a35, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.505] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x45c47a35, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x45c47a35, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.505] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x52 [0142.505] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Messaging_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x45c47a35, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x45c47a35, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.505] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x45c47a35, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x45c47a35, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.506] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3517066f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x45c47a35, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x45c47a35, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.506] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x50 [0142.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0142.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x50 [0142.506] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.508] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.508] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0142.508] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0142.508] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x410, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0142.508] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0142.508] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0142.508] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0142.508] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0142.508] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0142.508] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0142.508] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0142.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0142.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0142.509] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x50 [0142.509] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.510] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.510] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0142.510] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0142.510] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x410, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0142.510] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0142.510] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0142.510] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0142.510] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0142.510] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0142.510] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.510] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0142.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0142.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x53 [0142.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x53 [0142.511] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0142.514] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.514] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0142.514] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0142.514] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0142.514] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.514] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0142.514] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0142.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x53 [0142.515] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.516] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.516] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0142.516] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0142.516] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0142.516] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.516] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.516] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.517] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5d [0142.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.517] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5d [0142.517] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.788] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.791] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.791] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5f [0142.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5f [0142.804] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.809] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.814] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.820] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.822] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5f [0142.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.825] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5f [0142.826] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.838] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.841] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.842] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x58 [0142.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x58 [0142.842] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.843] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.843] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55962, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9f55962, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9f55962, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.843] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x58 [0142.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.844] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x58 [0142.844] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.844] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.845] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.845] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.845] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x58 [0142.845] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0142.845] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.845] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.845] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0142.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5b [0142.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5b [0142.846] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0142.846] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.847] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.847] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0142.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.847] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5b [0142.847] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.847] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.848] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.848] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5b [0142.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5b [0142.848] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.849] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.849] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.849] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.849] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5b [0142.849] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.850] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.850] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.850] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.850] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5d [0142.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.850] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5d [0142.851] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.851] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.851] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.851] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5d [0142.852] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0142.852] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.852] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.852] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0142.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.853] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x59 [0142.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.853] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x59 [0142.853] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0142.853] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.853] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0142.853] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0142.854] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.854] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0142.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.854] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x59 [0142.854] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.854] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.855] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0142.855] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0142.855] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0142.855] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5e [0142.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5e [0142.856] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.856] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.856] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.857] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.857] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5e [0142.857] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0142.857] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.857] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.858] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0142.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.858] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5a [0142.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.858] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5a [0142.858] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.858] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.859] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.859] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.859] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5a [0142.859] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0142.859] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.860] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ee3238, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf9ee3238, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xf9ee3238, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.860] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0142.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.860] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4c [0142.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0142.860] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4c [0142.860] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a401dd0, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdc92abfb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc92abfb, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.861] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a401dd0, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdc92abfb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc92abfb, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.861] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a49a72f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x987efe85, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x987efe85, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0142.861] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a44e278, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x332cdbf2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x332cdbf2, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0142.861] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a428010, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcd4e0f7a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a428010, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0142.861] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a401dd0, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x333666b9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x333666b9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0142.862] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a401dd0, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcd4e21af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a401dd0, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0142.862] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a428010, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x71233dac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71233dac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0142.862] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc4fe9ef, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdc4fe9ef, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc4fe9ef, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0142.862] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a401dd0, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc702c704, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc702c704, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0142.863] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a401dd0, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc702c704, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc702c704, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0142.863] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0142.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0142.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0142.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4c [0142.863] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a401dd0, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdc92abfb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc92abfb, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.863] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a401dd0, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdc92abfb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc92abfb, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.867] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0142.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0142.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4f [0142.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0142.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4f [0142.867] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a49a72f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x987efe85, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x987efe85, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.870] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0142.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0142.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0142.871] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4f [0142.871] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a49a72f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x987efe85, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x987efe85, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0142.873] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0142.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0142.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0142.873] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001", lpFilePart=0x0) returned 0x55 [0142.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.873] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001", lpFilePart=0x0) returned 0x55 [0142.874] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa79661, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcafaf3be, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x124e2b77, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.876] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002", lpFilePart=0x0) returned 0x55 [0142.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002", lpFilePart=0x0) returned 0x55 [0142.876] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x12803cff, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcc74b84d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1318d398, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0142.878] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0142.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0142.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0142.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!006", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!006", lpFilePart=0x0) returned 0x55 [0142.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0142.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!006", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!006", lpFilePart=0x0) returned 0x55 [0142.879] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!006\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x926657f3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9268ba69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9268ba69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0143.207] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0143.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0143.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0143.208] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!121", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!121", lpFilePart=0x0) returned 0x55 [0143.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0143.209] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!121", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!121", lpFilePart=0x0) returned 0x55 [0143.209] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!121\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x987efe85, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9af0a0eb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9af0a0eb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0143.212] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0143.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0143.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0143.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0143.213] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6a49a72f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xccdf6895, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a49a72f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0143.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0143.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0143.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0143.215] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6a49a72f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xccdf70e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a49a72f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0143.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0143.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0143.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0143.216] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6a49a72f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xccdf7d9c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a49a72f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0143.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0143.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0143.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0143.216] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf07d8a0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcce3d76e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf8d9fb88, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0143.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0143.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0143.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0143.218] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2b9c81, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x902a1a6b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x902a1a6b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0143.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0143.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0143.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0143.220] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a49a72f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x371986aa, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x371986aa, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0143.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0143.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0143.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0143.221] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a44e278, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x332cdbf2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x332cdbf2, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0143.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0143.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0143.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0143.222] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a44e278, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x332cdbf2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x332cdbf2, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0143.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0143.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0143.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0143.222] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd59f82c3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xcd455dd5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd59ff7ff, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0143.225] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a428010, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcd4e0f7a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a428010, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0143.226] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a428010, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcd4e0f7a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a428010, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0143.226] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a401dd0, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x333666b9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x333666b9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0143.227] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a401dd0, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x333666b9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x333666b9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0143.228] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x132e491b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xcd4e1bc5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x132e491b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0143.231] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a401dd0, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcd4e21af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a401dd0, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0143.232] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a401dd0, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcd4e21af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a401dd0, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0143.232] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a428010, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x71233dac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71233dac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0143.236] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a428010, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x71233dac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71233dac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0143.239] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc4fe9ef, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdc4fe9ef, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc4fe9ef, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0143.239] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc4fe9ef, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdc4fe9ef, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc4fe9ef, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0148.009] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.009] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0148.009] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0148.009] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0148.009] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0148.009] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.009] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x52 [0148.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.011] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x52 [0148.011] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.012] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.013] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.013] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x54 [0148.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x54 [0148.013] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.014] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.014] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.014] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x54 [0148.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x54 [0148.014] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.015] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.015] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.015] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.015] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x4d [0148.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.015] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x4d [0148.015] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.016] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.016] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc66f4772, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc66f4772, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc66f4772, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.016] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.016] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x4d [0148.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.017] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x4d [0148.017] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.017] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.017] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.017] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x4d [0148.018] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.018] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.018] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.018] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x50 [0148.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x50 [0148.019] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65c3617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65c3617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.020] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65c3617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65c3617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.020] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65c3617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65c3617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.020] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.020] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x50 [0148.021] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65c3617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65c3617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0148.021] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65c3617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65c3617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.021] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65c3617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65c3617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.021] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0148.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.021] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x50 [0148.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.021] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x50 [0148.021] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6065f77, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc6065f77, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc6065f77, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.022] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6065f77, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc6065f77, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc6065f77, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.022] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6065f77, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc6065f77, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc6065f77, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.022] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x50 [0148.022] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6065f77, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc6065f77, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc6065f77, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.023] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6065f77, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc6065f77, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc6065f77, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.023] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6065f77, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc6065f77, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc6065f77, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.023] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.023] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x52 [0148.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.023] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x52 [0148.023] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6065f77, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc6065f77, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc6065f77, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.023] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6065f77, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc6065f77, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc6065f77, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.024] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6065f77, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc6065f77, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc6065f77, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.024] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x52 [0148.024] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6065f77, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc6065f77, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc6065f77, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.024] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6065f77, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc6065f77, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc6065f77, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.025] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6065f77, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc6065f77, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc6065f77, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.025] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x4e [0148.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x4e [0148.025] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.026] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.026] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0148.026] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0148.026] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.026] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.026] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x4e [0148.026] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.027] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.027] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0148.027] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0148.027] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0148.027] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x53 [0148.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x53 [0148.028] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.028] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.028] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.028] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x53 [0148.029] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.029] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.029] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65e974f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65e974f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65e974f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.029] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x4f [0148.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x4f [0148.029] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65c3617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65c3617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.030] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65c3617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65c3617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.030] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65c3617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65c3617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.030] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x4f [0148.030] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Wallet_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65c3617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65c3617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0148.030] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65c3617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65c3617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.031] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc65c3617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc65c3617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc65c3617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.031] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0148.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.031] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x54 [0148.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0148.031] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x54 [0148.031] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.035] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.036] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x772696ba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772696ba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0148.036] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0148.036] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0148.036] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0148.036] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0148.036] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771f6fb5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0148.037] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0148.037] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0148.037] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0148.037] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0148.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0148.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0148.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x54 [0148.038] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.039] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.039] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x772696ba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772696ba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0148.039] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0148.039] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0148.039] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0148.040] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0148.040] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771f6fb5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0148.040] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0148.040] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0148.040] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.040] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0148.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0148.041] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x57 [0148.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.041] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x57 [0148.041] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x772696ba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772696ba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.090] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x772696ba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772696ba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.090] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0148.090] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x772696ba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x772696ba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772696ba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0148.090] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0148.090] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0148.091] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0148.091] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.092] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x57 [0148.092] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x772696ba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772696ba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.093] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x772696ba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772696ba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.093] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0148.093] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x772696ba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x772696ba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772696ba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0148.093] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0148.093] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0148.094] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.094] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x61 [0148.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x61 [0148.181] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.182] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.182] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.183] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x63 [0148.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x63 [0148.183] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x772696ba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x772696ba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772696ba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.184] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x772696ba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x772696ba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772696ba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.184] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x772696ba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x772696ba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x772696ba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.184] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x63 [0148.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x63 [0148.184] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.185] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.185] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.185] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5c [0148.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5c [0148.188] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.189] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.189] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77243451, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77243451, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77243451, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.189] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5c [0148.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5c [0148.189] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.190] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.190] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.190] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5c [0148.190] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.190] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.191] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.191] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5f [0148.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5f [0148.191] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.192] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.192] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.192] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.192] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5f [0148.192] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.193] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.193] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.193] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5f [0148.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5f [0148.193] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0148.194] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.194] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.194] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0148.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5f [0148.194] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.194] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.194] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.195] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.195] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x61 [0148.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.195] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x61 [0148.195] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.195] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.195] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.195] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x61 [0148.196] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.196] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.196] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.196] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5d [0148.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5d [0148.196] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771f6fb5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.197] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771f6fb5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.197] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771f6fb5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771f6fb5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771f6fb5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0148.197] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0148.197] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.197] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.197] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5d [0148.197] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771f6fb5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.197] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771f6fb5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771f6fb5, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771f6fb5, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771f6fb5, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0148.198] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x62 [0148.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x62 [0148.198] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.198] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.199] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.199] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x62 [0148.199] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.199] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.199] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5e [0148.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5e [0148.200] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.200] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.200] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.200] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5e [0148.200] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.201] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.201] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771d0d50, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x771d0d50, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x771d0d50, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.201] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.201] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x5c [0148.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0148.201] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x5c [0148.201] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7975de94, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.203] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7975de94, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.203] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6c02bacc, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x3620a676, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3620a676, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0148.203] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13d33b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0148.203] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13dbc5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0148.203] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13e364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0148.204] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ea5f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0148.204] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x712a64ad, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x712a64ad, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0148.204] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7962cbd4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7962cbd4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0148.204] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf1e0bc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0148.204] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf1e0bc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0148.204] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0148.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0148.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0148.205] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x5c [0148.205] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7975de94, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.206] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7975de94, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.206] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6c02bacc, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x3620a676, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3620a676, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0148.206] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13d33b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0148.206] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13dbc5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0148.207] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13e364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0148.207] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ea5f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0148.207] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x712a64ad, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x712a64ad, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0148.207] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7962cbd4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7962cbd4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0148.207] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf1e0bc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0148.207] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.207] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0148.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0148.208] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x5f [0148.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.208] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x5f [0148.208] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6c02bacc, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x3620a676, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3620a676, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.210] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6c02bacc, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x3620a676, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3620a676, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.211] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ad23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0148.211] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ba18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0148.211] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13c26a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0148.211] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ca54, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0148.211] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ca54, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0148.211] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.212] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x5f [0148.212] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6c02bacc, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x3620a676, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3620a676, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.213] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6c02bacc, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x3620a676, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3620a676, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.213] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ad23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0148.213] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ba18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0148.213] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13c26a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0148.213] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ca54, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0148.213] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.214] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.214] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x69 [0148.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.214] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x69 [0148.214] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ad23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0148.216] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ad23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.216] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ad23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.216] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0148.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x6b [0148.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x6b [0148.216] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ba18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0148.322] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ba18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.323] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ba18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.323] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0148.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.324] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x6b [0148.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.325] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x6b [0148.325] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13c26a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.328] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13c26a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.336] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13c26a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.342] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x64 [0148.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x64 [0148.342] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ca54, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.342] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ca54, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.343] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c051d3e, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ca54, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c051d3e, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.343] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.343] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x64 [0148.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.343] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x64 [0148.343] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13d33b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.345] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13d33b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.345] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13d33b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.346] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.346] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x64 [0148.346] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13d33b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.346] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13d33b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.346] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13d33b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.346] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x67 [0148.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x67 [0148.347] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13dbc5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.347] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13dbc5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.347] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13dbc5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.347] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x67 [0148.348] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13dbc5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.348] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13dbc5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.348] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13dbc5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.348] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x67 [0148.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.349] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x67 [0148.349] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13e364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.349] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13e364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.349] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13e364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.349] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.349] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x67 [0148.349] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13e364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.350] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13e364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.350] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13e364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.350] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x69 [0148.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x69 [0148.350] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ea5f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.352] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ea5f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.352] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ea5f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.352] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.352] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x69 [0148.352] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ea5f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.353] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ea5f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.353] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfb93d2, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf13ea5f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfb93d2, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.353] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.353] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x65 [0148.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.353] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x65 [0148.353] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x712a64ad, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x712a64ad, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.355] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x712a64ad, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x712a64ad, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.355] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6bfdf615, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0148.355] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd8e0dbaa, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0148.355] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd83ebb87, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd83ebb87, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xd83ebb87, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0148.355] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd83ebb87, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd83ebb87, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xd83ebb87, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0148.355] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.355] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x65 [0148.357] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x712a64ad, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x712a64ad, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0148.358] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x712a64ad, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x712a64ad, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.358] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6bfdf615, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0148.358] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd8e0dbaa, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0148.358] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd83ebb87, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd83ebb87, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xd83ebb87, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0148.358] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd83ebb87, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd83ebb87, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xd83ebb87, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0148.358] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd83ebb87, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd83ebb87, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xd83ebb87, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0148.358] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0148.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x6a [0148.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x6a [0148.359] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7962cbd4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7962cbd4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0148.360] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7962cbd4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7962cbd4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.360] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7962cbd4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7962cbd4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.360] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0148.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x6a [0148.360] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7962cbd4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7962cbd4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0148.361] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7962cbd4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7962cbd4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.361] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7962cbd4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7962cbd4, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7962cbd4, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.361] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0148.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x66 [0148.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x66 [0148.361] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf1e0bc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.361] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf1e0bc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.361] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf1e0bc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.361] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.362] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x66 [0148.362] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf1e0bc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.362] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf1e0bc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.362] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bfdf615, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf1e0bc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6bfdf615, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.362] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.362] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", lpFilePart=0x0) returned 0x5a [0148.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0148.362] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", lpFilePart=0x0) returned 0x5a [0148.362] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd05a99ea, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd05a99ea, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.363] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd05a99ea, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd05a99ea, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.363] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x36446b0c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x36446b0c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0148.363] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf231a5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0148.363] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf23226b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0148.363] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2329b5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0148.363] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2331d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0148.363] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcfcdeeec, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xcfcdeeec, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0148.363] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffd9e09, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xcffd9e09, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xcffd9e09, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0148.363] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2c54cb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0148.363] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2c54cb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0148.363] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0148.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0148.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0148.364] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", lpFilePart=0x0) returned 0x5a [0148.364] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd05a99ea, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd05a99ea, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.364] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd05a99ea, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd05a99ea, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.364] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x36446b0c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x36446b0c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0148.364] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf231a5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0148.364] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf23226b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0148.364] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2329b5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0148.364] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2331d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0148.364] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcfcdeeec, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xcfcdeeec, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0148.364] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffd9e09, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xcffd9e09, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xcffd9e09, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0148.364] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2c54cb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0148.365] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.365] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0148.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0148.365] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x5d [0148.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.365] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x5d [0148.365] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x36446b0c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x36446b0c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.366] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x36446b0c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x36446b0c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.367] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf22f4e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0148.367] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf22ff25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0148.367] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf230693, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0148.367] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf230fa0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0148.367] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf230fa0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0148.367] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x5d [0148.368] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x36446b0c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x36446b0c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.369] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x36446b0c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x36446b0c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.369] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf22f4e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0148.369] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf22ff25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0148.369] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf230693, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0148.369] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf230fa0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0148.369] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.369] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x67 [0148.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x67 [0148.371] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf22f4e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.372] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf22f4e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.373] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf22f4e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.373] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x69 [0148.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x69 [0148.373] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf22ff25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0148.374] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf22ff25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.374] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf22ff25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.374] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0148.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x69 [0148.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x69 [0148.374] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf230693, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.375] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf230693, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.375] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf230693, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.375] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x62 [0148.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0148.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x62 [0148.441] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf230fa0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.449] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf230fa0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.450] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74c17df3, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf230fa0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74c17df3, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.837] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0148.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0148.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x62 [0148.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x62 [0148.837] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf231a5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0148.837] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf231a5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.837] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf231a5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.837] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0148.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x62 [0148.838] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf231a5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.838] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf231a5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.838] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf231a5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.838] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x65 [0148.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x65 [0148.838] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf23226b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.839] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf23226b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.839] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf23226b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.839] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0148.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x65 [0148.839] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf23226b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0148.839] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf23226b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.839] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74bcb92d, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf23226b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74bcb92d, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.839] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0148.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x65 [0148.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x65 [0148.839] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2329b5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0148.840] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2329b5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.840] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2329b5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.840] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0148.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x65 [0148.841] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2329b5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0148.841] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2329b5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.841] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2329b5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.841] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0148.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x67 [0148.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x67 [0148.841] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2331d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0148.841] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2331d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.841] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2331d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.841] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0148.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x67 [0148.842] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2331d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0148.842] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74ba56ed, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcf2331d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74ba56ed, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0148.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0148.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0148.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0148.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0148.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0148.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0153.150] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed5fe7b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed646ee, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbed69507, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0153.150] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed5fe7b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed646ee, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbed69507, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.150] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbed69507, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed69507, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbed69507, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0153.150] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbed646ee, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed646ee, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0153.151] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.151] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0153.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0153.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0153.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0153.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5a [0153.151] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed5fe7b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed646ee, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbed69507, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0153.151] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed5fe7b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed646ee, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbed69507, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.151] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbed69507, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed69507, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbed69507, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0153.152] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbed646ee, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed646ee, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0153.152] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbed646ee, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed646ee, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55d5013a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0153.152] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0153.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0153.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0153.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5f [0153.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0153.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5f [0153.152] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed6335f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed6335f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbed6335f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0153.153] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed6335f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed6335f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbed6335f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.153] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed6335f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed6335f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbed6335f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.153] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0153.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0153.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0153.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0153.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5f [0153.153] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed6335f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed6335f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbed6335f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0153.153] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed6335f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed6335f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbed6335f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.154] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed6335f, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbed6335f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbed6335f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.154] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0153.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0153.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0153.154] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5b [0153.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0153.154] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5b [0153.154] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed5aaa6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd1a53e18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed5aaa6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0153.154] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed5aaa6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd1a53e18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed5aaa6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.155] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed5aaa6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd1a53e18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed5aaa6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.155] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0153.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0153.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0153.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0153.155] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5b [0153.155] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed5aaa6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd1a53e18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed5aaa6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0153.155] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed5aaa6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd1a53e18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed5aaa6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.155] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbed5aaa6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd1a53e18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed5aaa6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.156] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0153.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0153.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0153.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4a [0153.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0153.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4a [0153.156] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xbd8024eb, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd8024eb, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0153.158] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xbd8024eb, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd8024eb, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.158] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe27bb52, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x38b51312, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x38b51312, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0153.158] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe22f6ae, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5abf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe22f6ae, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0153.158] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5f4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0153.158] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab6289, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0153.159] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab67a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0153.159] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7133ee1b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7133ee1b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0153.159] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2f14b6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbd2f14b6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd2f14b6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0153.159] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1b326c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0153.159] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1b326c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0153.159] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0153.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0153.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0153.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0153.160] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4a [0153.160] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xbd8024eb, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd8024eb, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0153.161] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xbd8024eb, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd8024eb, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.162] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe27bb52, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x38b51312, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x38b51312, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0153.162] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe22f6ae, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5abf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe22f6ae, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0153.162] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5f4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0153.162] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab6289, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0153.162] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab67a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0153.162] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7133ee1b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7133ee1b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0153.162] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2f14b6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbd2f14b6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd2f14b6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0153.163] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1b326c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0153.163] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.163] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0153.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0153.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0153.164] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4d [0153.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0153.164] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4d [0153.164] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe27bb52, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x38b51312, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x38b51312, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0153.167] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe27bb52, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x38b51312, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x38b51312, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.167] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab3531, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0153.167] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab3f21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0153.167] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab4a84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0153.167] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab537f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0153.168] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab537f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0153.168] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0153.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0153.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0153.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0153.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4d [0153.169] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe27bb52, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x38b51312, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x38b51312, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0153.170] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe27bb52, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x38b51312, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x38b51312, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.170] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab3531, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0153.170] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab3f21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0153.170] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab4a84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0153.170] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab537f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0153.171] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.171] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0153.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0153.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0153.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x57 [0153.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0153.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x57 [0153.172] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab3531, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0153.232] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab3531, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.232] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab3531, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.236] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0153.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0153.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0153.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x59 [0153.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0153.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x59 [0153.252] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab3f21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0153.254] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab3f21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.254] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab3f21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.254] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0153.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0153.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0153.254] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x59 [0153.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0153.254] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x59 [0153.254] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab4a84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0153.255] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab4a84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.255] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab4a84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.255] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0153.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0153.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0153.255] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x52 [0153.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0153.255] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x52 [0153.255] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab537f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0153.256] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab537f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.256] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2a1d9f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab537f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe2a1d9f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.256] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0153.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0153.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0153.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x52 [0153.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0153.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x52 [0153.256] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe22f6ae, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5abf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe22f6ae, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0153.257] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe22f6ae, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5abf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe22f6ae, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.257] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe22f6ae, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5abf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe22f6ae, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.257] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0153.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0153.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0153.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0153.258] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x52 [0153.258] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe22f6ae, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5abf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe22f6ae, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0153.258] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe22f6ae, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5abf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe22f6ae, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.258] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe22f6ae, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5abf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe22f6ae, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.258] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0153.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0153.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0153.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x55 [0153.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0153.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x55 [0153.259] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5f4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0153.260] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5f4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.260] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5f4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.261] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0153.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0153.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0153.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0153.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x55 [0153.261] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5f4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0153.261] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5f4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.261] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab5f4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.261] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0153.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0153.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0153.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x55 [0153.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0153.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x55 [0153.262] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab6289, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0153.262] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab6289, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.262] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab6289, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.262] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0153.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0153.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0153.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0153.263] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x55 [0153.263] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab6289, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0153.263] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab6289, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.263] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab6289, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.263] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0153.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0153.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0153.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x57 [0153.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0153.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x57 [0153.264] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab67a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0153.264] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab67a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.265] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab67a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.265] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0153.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0153.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0153.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0153.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x57 [0153.265] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab67a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0153.265] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab67a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.266] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ab67a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.266] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0153.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0153.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0153.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x53 [0153.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0153.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x53 [0153.266] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7133ee1b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7133ee1b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0153.268] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7133ee1b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7133ee1b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.268] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe22f6ae, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe22f6ae, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xe22f6ae, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0153.268] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe196d39, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xbd2f14b6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0153.268] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6428f7dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x6428f7dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x6428f7dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0153.268] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6445067e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x6445067e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x6445067e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0153.269] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.269] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0153.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0153.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0153.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0153.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x53 [0153.270] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7133ee1b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7133ee1b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0153.271] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7133ee1b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7133ee1b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.271] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe22f6ae, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe22f6ae, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xe22f6ae, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0153.271] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe196d39, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xbd2f14b6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0153.271] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6428f7dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x6428f7dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x6428f7dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0153.271] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6445067e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x6445067e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x6445067e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0153.272] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6445067e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x6445067e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x6445067e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0153.272] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0153.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0153.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0153.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x58 [0153.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0153.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x58 [0153.273] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2f14b6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbd2f14b6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd2f14b6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0153.274] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2f14b6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbd2f14b6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd2f14b6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.274] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2f14b6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbd2f14b6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd2f14b6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.274] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0153.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0153.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0153.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0153.274] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x58 [0153.275] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2f14b6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbd2f14b6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd2f14b6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0153.275] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2f14b6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbd2f14b6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd2f14b6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.275] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2f14b6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbd2f14b6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd2f14b6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.275] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0153.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0153.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0153.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x54 [0153.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0153.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x54 [0153.275] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1b326c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0153.276] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1b326c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.276] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1b326c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.276] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0153.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0153.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0153.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0153.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x54 [0153.277] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1b326c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0153.277] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1b326c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.277] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe170ad7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1b326c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe170ad7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.277] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0153.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0153.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0153.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4b [0153.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0153.278] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4b [0153.278] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb907b89d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0153.283] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb907b89d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.283] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9750aec, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x38ee4cbd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x38ee4cbd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0153.283] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9704670, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9704670, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0153.283] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba32b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0153.284] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3847, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0153.284] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3f2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0153.284] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7136507a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7136507a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0153.284] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb907b89d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb907b89d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0153.284] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1a14e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0153.284] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1a14e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0153.285] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0153.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0153.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0153.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0153.285] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4b [0153.286] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb907b89d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0153.286] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb907b89d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.287] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9750aec, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x38ee4cbd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x38ee4cbd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0153.287] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9704670, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9704670, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0153.287] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba32b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0153.287] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3847, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0153.287] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3f2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0153.287] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7136507a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7136507a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0153.287] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb907b89d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb907b89d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0153.287] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1a14e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0153.287] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.288] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0153.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0153.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0153.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4e [0153.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0153.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4e [0153.289] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9750aec, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x38ee4cbd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x38ee4cbd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.185] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9750aec, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x38ee4cbd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x38ee4cbd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.185] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba0882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0154.185] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba130d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0154.186] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba1b08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0154.186] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba21f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0154.186] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba21f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0154.186] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.187] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4e [0154.187] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9750aec, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x38ee4cbd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x38ee4cbd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.188] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9750aec, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x38ee4cbd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x38ee4cbd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.188] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba0882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0154.188] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba130d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0154.188] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba1b08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0154.189] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba21f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0154.189] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.189] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x58 [0154.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x58 [0154.190] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba0882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.193] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba0882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.194] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba0882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.194] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5a [0154.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5a [0154.194] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba130d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.195] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba130d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.195] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba130d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.195] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.195] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5a [0154.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.195] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5a [0154.195] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba1b08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.196] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba1b08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.197] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba1b08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.198] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x53 [0154.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x53 [0154.200] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba21f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0154.204] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba21f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.205] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9776d2f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba21f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9776d2f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.207] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0154.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.209] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x53 [0154.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.209] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x53 [0154.211] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9704670, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9704670, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.211] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9704670, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9704670, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.212] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9704670, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9704670, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.212] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.212] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x53 [0154.212] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9704670, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9704670, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0154.213] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9704670, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9704670, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.213] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9704670, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9704670, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.213] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0154.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.213] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x56 [0154.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.214] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x56 [0154.214] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba32b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.215] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba32b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.215] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba32b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.215] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.215] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x56 [0154.215] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba32b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.216] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba32b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.216] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba32b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.216] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x56 [0154.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.217] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x56 [0154.217] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3847, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.218] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3847, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.218] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3847, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.218] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.218] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x56 [0154.218] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3847, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.219] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3847, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.219] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3847, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.219] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.219] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x58 [0154.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.219] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x58 [0154.219] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3f2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.220] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3f2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.220] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3f2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.220] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x58 [0154.220] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3f2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.220] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3f2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.221] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1ba3f2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.221] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x54 [0154.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x54 [0154.221] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7136507a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7136507a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0154.401] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7136507a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7136507a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.401] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9704670, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x9704670, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x9704670, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0154.402] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0154.402] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5d8e4b9d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x5d8e4b9d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x5d8e4b9d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0154.402] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5d8e4b9d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x5d8e4b9d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x5d8e4b9d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0154.402] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.402] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0154.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x54 [0154.403] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7136507a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7136507a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.404] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7136507a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7136507a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.404] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9704670, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x9704670, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x9704670, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0154.404] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0154.405] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5d8e4b9d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x5d8e4b9d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x5d8e4b9d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0154.405] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5d8e4b9d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x5d8e4b9d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x5d8e4b9d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0154.405] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5d8e4b9d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x5d8e4b9d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x5d8e4b9d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0154.405] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x59 [0154.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x59 [0154.406] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb907b89d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb907b89d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.408] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb907b89d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb907b89d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.408] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb907b89d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb907b89d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.408] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x59 [0154.408] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb907b89d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb907b89d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.409] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb907b89d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb907b89d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.409] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb907b89d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb907b89d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xb907b89d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.409] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x55 [0154.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x55 [0154.409] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1a14e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.410] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1a14e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.410] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1a14e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.410] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.414] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x55 [0154.414] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1a14e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.415] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1a14e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.415] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9645a4f, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1a14e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9645a4f, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.415] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.415] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x53 [0154.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0154.415] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x53 [0154.415] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6670683, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x9690fc23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x96d8829d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.420] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6670683, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x9690fc23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x96d8829d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.420] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x67c7ba3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x391dfc11, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x391dfc11, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0154.420] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a1999, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67a1999, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0154.420] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cab3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0154.421] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6670683, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cea1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6670683, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0154.421] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66968cc, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1d2d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66968cc, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0154.421] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7136507a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7136507a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0154.421] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9690fc23, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x9690fc23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9690fc23, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0154.421] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c9c773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0154.421] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c9c773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0154.422] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0154.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0154.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0154.423] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x53 [0154.423] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6670683, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x9690fc23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x96d8829d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.423] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6670683, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x9690fc23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x96d8829d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.424] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x67c7ba3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x391dfc11, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x391dfc11, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0154.424] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a1999, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67a1999, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0154.424] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cab3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0154.424] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6670683, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cea1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6670683, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0154.424] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66968cc, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1d2d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66968cc, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0154.424] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7136507a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7136507a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0154.424] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9690fc23, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x9690fc23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9690fc23, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0154.425] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c9c773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0154.425] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.425] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0154.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0154.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x56 [0154.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x56 [0154.428] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x67c7ba3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x391dfc11, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x391dfc11, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0154.432] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x67c7ba3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x391dfc11, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x391dfc11, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.432] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1b57a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0154.432] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1b98c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0154.432] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1bda6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0154.433] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c1bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0154.433] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c1bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0154.433] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0154.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.434] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x56 [0154.434] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x67c7ba3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x391dfc11, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x391dfc11, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0154.435] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x67c7ba3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x391dfc11, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x391dfc11, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.435] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1b57a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0154.435] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1b98c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0154.435] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1bda6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0154.435] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c1bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0154.435] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.436] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0154.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x60 [0154.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x60 [0154.437] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1b57a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0154.441] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1b57a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.441] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1b57a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.441] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0154.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x62 [0154.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x62 [0154.442] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1b98c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0154.442] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1b98c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.442] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1b98c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.442] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0154.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x62 [0154.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x62 [0154.443] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1bda6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.443] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1bda6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.443] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1bda6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.443] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5b [0154.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5b [0154.444] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c1bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.444] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c1bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.444] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ede02, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c1bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67ede02, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.444] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5b [0154.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5b [0154.444] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a1999, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67a1999, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0154.446] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a1999, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67a1999, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.447] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a1999, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67a1999, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.447] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0154.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.447] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5b [0154.447] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a1999, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67a1999, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.447] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a1999, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67a1999, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.447] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a1999, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1c652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x67a1999, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.448] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.448] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5e [0154.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.448] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5e [0154.448] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cab3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0154.448] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cab3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.448] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cab3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.449] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0154.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.449] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5e [0154.449] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cab3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.449] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cab3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.449] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cab3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.449] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.450] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5e [0154.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.450] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5e [0154.450] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6670683, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cea1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6670683, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0154.450] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6670683, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cea1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6670683, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.450] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6670683, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cea1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6670683, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.450] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0154.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.451] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5e [0154.451] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6670683, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cea1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6670683, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.451] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6670683, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cea1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6670683, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.451] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6670683, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1cea1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6670683, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.451] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.452] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x60 [0154.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.452] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x60 [0154.452] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66968cc, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1d2d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66968cc, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0154.452] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66968cc, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1d2d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66968cc, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.452] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66968cc, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1d2d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66968cc, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.453] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0154.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.453] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x60 [0154.453] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66968cc, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1d2d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66968cc, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437438 [0154.453] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66968cc, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1d2d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66968cc, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.453] FindNextFileW (in: hFindFile=0x1437438, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66968cc, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c1d2d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66968cc, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.453] FindClose (in: hFindFile=0x1437438 | out: hFindFile=0x1437438) returned 1 [0154.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.453] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5c [0154.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.454] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5c [0154.454] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7136507a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7136507a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.884] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7136507a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7136507a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.884] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a1999, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x67a1999, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x67a1999, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0154.884] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x968e9a4a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0154.885] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5b325360, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x5b325360, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x5b325360, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0154.885] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5b325360, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x5b325360, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x5b325360, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0154.885] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.885] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.886] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5c [0154.886] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7136507a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7136507a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0154.887] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7136507a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7136507a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.887] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a1999, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x67a1999, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x67a1999, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0154.887] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x968e9a4a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0154.887] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5b325360, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x5b325360, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x5b325360, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0154.887] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5b325360, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x5b325360, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x5b325360, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0154.887] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5b325360, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x5b325360, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x5b325360, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0154.888] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0154.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.889] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x61 [0154.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.889] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x61 [0154.889] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9690fc23, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x9690fc23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9690fc23, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.889] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9690fc23, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x9690fc23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9690fc23, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.890] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9690fc23, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x9690fc23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9690fc23, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.890] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.890] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x61 [0154.890] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9690fc23, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x9690fc23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9690fc23, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.890] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9690fc23, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x9690fc23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9690fc23, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.890] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9690fc23, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x9690fc23, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9690fc23, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.890] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5d [0154.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5d [0154.891] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c9c773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.891] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c9c773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.891] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c9c773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.891] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5d [0154.891] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c9c773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0154.892] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c9c773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.892] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66bcb41, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1c9c773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x66bcb41, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.892] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0154.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4b [0154.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0154.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4b [0154.892] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xef8b4999, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef8b4999, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.892] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xef8b4999, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef8b4999, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.893] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3957349d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3957349d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0154.893] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40e351b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f214ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40e351b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0154.893] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda90ec4a, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xda90ec4a, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0154.893] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f86969, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0154.893] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f8706e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0154.893] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7138b2cd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7138b2cd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0154.893] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef652437, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xef652437, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef652437, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0154.893] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2080ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40bd2b0, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0154.894] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2080ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40bd2b0, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0154.894] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0154.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0154.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0154.894] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4b [0154.894] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xef8b4999, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef8b4999, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.894] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xef8b4999, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef8b4999, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.894] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3957349d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3957349d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0154.894] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40e351b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f214ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40e351b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0154.894] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda90ec4a, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xda90ec4a, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0154.895] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f86969, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0154.895] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f8706e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0154.895] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7138b2cd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7138b2cd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0154.895] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef652437, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xef652437, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef652437, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0154.895] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2080ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40bd2b0, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0154.895] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.895] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0154.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0154.895] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4e [0154.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.895] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4e [0154.895] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3957349d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3957349d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.896] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3957349d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3957349d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.896] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfdd9a6b0, ftLastAccessTime.dwHighDateTime=0x1d39f5c, ftLastWriteTime.dwLowDateTime=0xfdd9a6b0, ftLastWriteTime.dwHighDateTime=0x1d39f5c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0154.896] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42147ef, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1d440c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x88ced4a1, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0154.896] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1d44c20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x41ee58e, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0154.896] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x8addc228, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0xd1da511e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8addc228, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0154.896] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f20fd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x41ee58e, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0154.896] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f20fd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x41ee58e, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0154.897] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.897] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4e [0154.897] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3957349d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3957349d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0154.897] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3957349d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3957349d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.897] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfdd9a6b0, ftLastAccessTime.dwHighDateTime=0x1d39f5c, ftLastWriteTime.dwLowDateTime=0xfdd9a6b0, ftLastWriteTime.dwHighDateTime=0x1d39f5c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0154.897] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42147ef, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1d440c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x88ced4a1, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0154.897] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1d44c20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x41ee58e, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0154.897] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x8addc228, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0xd1da511e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8addc228, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0154.897] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f20fd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x41ee58e, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0154.897] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.897] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0154.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.898] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x58 [0154.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.898] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x58 [0154.898] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfdd9a6b0, ftLastAccessTime.dwHighDateTime=0x1d39f5c, ftLastWriteTime.dwLowDateTime=0xfdd9a6b0, ftLastWriteTime.dwHighDateTime=0x1d39f5c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0154.899] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xfdd9a6b0, ftLastAccessTime.dwHighDateTime=0x1d39f5c, ftLastWriteTime.dwLowDateTime=0xfdd9a6b0, ftLastWriteTime.dwHighDateTime=0x1d39f5c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.899] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88ced4a1, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0x88ced4a1, ftLastAccessTime.dwHighDateTime=0x1d32716, ftLastWriteTime.dwLowDateTime=0x88ced4a1, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0154.899] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.900] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0154.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.900] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5a [0154.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.900] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5a [0154.901] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42147ef, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1d440c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x88ced4a1, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.901] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42147ef, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1d440c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x88ced4a1, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.901] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88ced4a1, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0x88ced4a1, ftLastAccessTime.dwHighDateTime=0x1d32716, ftLastWriteTime.dwLowDateTime=0x88ced4a1, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0154.901] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.901] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5a [0154.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5a [0154.901] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1d44c20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x41ee58e, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.902] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1d44c20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x41ee58e, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.902] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1d44c20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x41ee58e, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.902] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.902] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft", lpFilePart=0x0) returned 0x58 [0154.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.902] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft", lpFilePart=0x0) returned 0x58 [0154.902] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x8addc228, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0xd1da511e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8addc228, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.903] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x8addc228, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0xd1da511e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8addc228, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.903] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x8addc228, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0x8addc228, ftLastAccessTime.dwHighDateTime=0x1d32716, ftLastWriteTime.dwLowDateTime=0x8addc228, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0154.903] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x8addc228, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0x8addc228, ftLastAccessTime.dwHighDateTime=0x1d32716, ftLastWriteTime.dwLowDateTime=0x8addc228, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 0 [0154.903] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x53 [0154.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x53 [0154.903] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f20fd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x41ee58e, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.904] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f20fd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x41ee58e, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.904] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41ee58e, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f20fd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x41ee58e, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.904] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x53 [0154.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x53 [0154.904] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40e351b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f214ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40e351b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.904] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40e351b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f214ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40e351b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.904] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40e351b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f214ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40e351b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.904] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x53 [0154.905] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40e351b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f214ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40e351b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.905] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40e351b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f214ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40e351b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.905] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40e351b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f214ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40e351b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.905] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x56 [0154.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x56 [0154.905] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda90ec4a, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xda90ec4a, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0154.906] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda90ec4a, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xda90ec4a, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.906] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8890d676, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0x8890d676, ftLastAccessTime.dwHighDateTime=0x1d32716, ftLastWriteTime.dwLowDateTime=0x88b23828, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x52b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nexus.json", cAlternateFileName="NEXUS~1.JSO")) returned 1 [0154.906] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda90ec4a, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xda90ec4a, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xe1510392, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="perUserCache_0", cAlternateFileName="PERUSE~1")) returned 1 [0154.906] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda90ec4a, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xda90ec4a, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xe1510392, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="perUserCache_0", cAlternateFileName="PERUSE~1")) returned 0 [0154.906] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0154.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.906] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x56 [0154.906] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda90ec4a, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xda90ec4a, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.906] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda90ec4a, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xda90ec4a, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.906] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8890d676, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0x8890d676, ftLastAccessTime.dwHighDateTime=0x1d32716, ftLastWriteTime.dwLowDateTime=0x88b23828, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x52b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nexus.json", cAlternateFileName="NEXUS~1.JSO")) returned 1 [0154.907] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda90ec4a, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xda90ec4a, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xe1510392, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="perUserCache_0", cAlternateFileName="PERUSE~1")) returned 1 [0154.907] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.907] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\perUserCache_0", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\perUserCache_0", lpFilePart=0x0) returned 0x65 [0154.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0154.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\perUserCache_0", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\perUserCache_0", lpFilePart=0x0) returned 0x65 [0154.907] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\perUserCache_0\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda90ec4a, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xda90ec4a, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xe1510392, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.911] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda90ec4a, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xda90ec4a, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xe1510392, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.911] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc478053, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xdc478053, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xdc5108ea, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1183, dwReserved0=0x0, dwReserved1=0x0, cFileName="1bae5997-e878-4247-b7f8-d49affc6cff5", cAlternateFileName="1BAE59~1")) returned 1 [0154.912] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0cb888e, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xe0cb888e, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xe0d2af1c, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x2b694, dwReserved0=0x0, dwReserved1=0x0, cFileName="1bec6d4a-6687-4295-b59f-5b3c048ab97c", cAlternateFileName="1BEC6D~1")) returned 1 [0154.912] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1510392, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xe1510392, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xe1582a0b, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1af8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="1dcea220-55cd-470a-a680-6d186485df4e", cAlternateFileName="1DCEA2~1")) returned 1 [0154.912] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd062fb2, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xdd062fb2, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xdd062fb2, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="1fc7d273-b221-48f6-9872-22321b90204a", cAlternateFileName="1FC7D2~1")) returned 1 [0154.912] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd016b57, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xdd016b57, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xdd0af547, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="564654d8-f181-4d50-84f0-95228e86ec66", cAlternateFileName="564654~1")) returned 1 [0154.912] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc478053, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xdc478053, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xdc58317b, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ac60a78-519d-4397-8cfd-8288aad6ad67", cAlternateFileName="6AC60A~1")) returned 1 [0154.912] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc478053, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xdc478053, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xdc4ea6a3, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="816b519f-6aae-4806-a871-9e26a12741ef", cAlternateFileName="816B51~1")) returned 1 [0154.912] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde328425, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xde328425, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xde328425, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x12a32, dwReserved0=0x0, dwReserved1=0x0, cFileName="af440790-6f0a-42ac-b8a5-e53856d9d828", cAlternateFileName="AF4407~1")) returned 1 [0154.912] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd062fb2, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xdd062fb2, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xdd206830, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1dd87, dwReserved0=0x0, dwReserved1=0x0, cFileName="bba8ff68-64fb-4605-ae42-fe59570f7bb7", cAlternateFileName="BBA8FF~1")) returned 1 [0154.912] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc4059cc, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xdc4059cc, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xdc478053, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x3ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cf305046-df1e-43ca-88e4-ce3ad1b7bfa9", cAlternateFileName="CF3050~1")) returned 1 [0154.912] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc641aa1, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xdc641aa1, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xe1726223, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1da5, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0154.912] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.912] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0154.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0154.913] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x56 [0154.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.913] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x56 [0154.913] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f86969, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0154.913] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f86969, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.913] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f86969, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.913] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0154.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.914] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x56 [0154.914] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f86969, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.914] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f86969, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.914] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f86969, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.914] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.914] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x58 [0154.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.914] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x58 [0154.914] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f8706e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0154.914] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f8706e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.914] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f8706e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.914] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0154.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0154.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0154.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0154.915] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x58 [0154.915] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f8706e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0154.915] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f8706e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.915] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4097064, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd1f8706e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4097064, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.915] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0154.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0154.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0154.915] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x54 [0154.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0154.915] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x54 [0154.915] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7138b2cd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7138b2cd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0155.009] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7138b2cd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7138b2cd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.009] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4109748, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x4109748, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x4109748, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0155.009] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40e351b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x1984b4a8, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1984b4a8, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0155.009] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x87e78d6e, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0x87e78d6e, ftLastAccessTime.dwHighDateTime=0x1d32716, ftLastWriteTime.dwLowDateTime=0x87e78d6e, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0155.009] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x87e78d6e, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0x87e78d6e, ftLastAccessTime.dwHighDateTime=0x1d32716, ftLastWriteTime.dwLowDateTime=0x87e78d6e, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0155.009] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.009] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0155.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x54 [0155.010] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7138b2cd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7138b2cd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.011] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7138b2cd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7138b2cd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.011] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4109748, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x4109748, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x4109748, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0155.011] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40e351b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x1984b4a8, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1984b4a8, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0155.011] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x87e78d6e, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0x87e78d6e, ftLastAccessTime.dwHighDateTime=0x1d32716, ftLastWriteTime.dwLowDateTime=0x87e78d6e, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0155.011] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x87e78d6e, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0x87e78d6e, ftLastAccessTime.dwHighDateTime=0x1d32716, ftLastWriteTime.dwLowDateTime=0x87e78d6e, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0155.012] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x87e78d6e, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0x87e78d6e, ftLastAccessTime.dwHighDateTime=0x1d32716, ftLastWriteTime.dwLowDateTime=0x87e78d6e, ftLastWriteTime.dwHighDateTime=0x1d32716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0155.012] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0155.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0155.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x59 [0155.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x59 [0155.013] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef652437, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xef652437, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef652437, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.013] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef652437, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xef652437, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef652437, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.013] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef652437, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xef652437, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef652437, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.013] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x59 [0155.013] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef652437, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xef652437, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef652437, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.013] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef652437, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xef652437, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef652437, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.013] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef652437, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xef652437, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef652437, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.014] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0155.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0155.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x55 [0155.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x55 [0155.014] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2080ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40bd2b0, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.014] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2080ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40bd2b0, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.014] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2080ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40bd2b0, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.014] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x55 [0155.014] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2080ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40bd2b0, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.015] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2080ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40bd2b0, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.015] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40bd2b0, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2080ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x40bd2b0, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.015] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0155.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0155.015] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x46 [0155.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0155.015] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x46 [0155.015] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x94eafafc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x950534fc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.017] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x94eafafc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x950534fc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.018] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x15f8ed9, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3981f155, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3981f155, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0155.018] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15aca2b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd20858aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15aca2b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0155.018] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2086018, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15867c3, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0155.018] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2086a4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15867c3, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0155.018] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2087373, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15867c3, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0155.018] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7138b2cd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7138b2cd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0155.018] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94eafafc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x94eafafc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x94eafafc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0155.018] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd21f4513, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15867c3, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0155.018] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd21f4513, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15867c3, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0155.018] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0155.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0155.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0155.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x46 [0155.019] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x94eafafc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x950534fc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.020] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x94eafafc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x950534fc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.020] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x15f8ed9, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3981f155, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3981f155, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0155.020] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15aca2b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd20858aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15aca2b, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0155.020] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2086018, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15867c3, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0155.020] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2086a4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15867c3, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0155.020] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd2087373, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15867c3, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0155.020] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15867c3, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x7138b2cd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7138b2cd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0155.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0155.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0155.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0155.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0155.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0155.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0155.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0155.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0155.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0155.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0155.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0155.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0155.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0155.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0155.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0155.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0155.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0155.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0155.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0155.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.585] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", lpFilePart=0x0) returned 0x2b [0155.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0155.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", lpFilePart=0x0) returned 0x2b [0155.586] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.586] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.586] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x8e73b662, ftLastAccessTime.dwHighDateTime=0x1d5d80d, ftLastWriteTime.dwLowDateTime=0x8e73b662, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database", cAlternateFileName="")) returned 1 [0155.789] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x8e73b662, ftLastAccessTime.dwHighDateTime=0x1d5d80d, ftLastWriteTime.dwLowDateTime=0x8e73b662, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database", cAlternateFileName="")) returned 0 [0155.791] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0155.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0155.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0155.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", lpFilePart=0x0) returned 0x2b [0155.793] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.796] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.798] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x8e73b662, ftLastAccessTime.dwHighDateTime=0x1d5d80d, ftLastWriteTime.dwLowDateTime=0x8e73b662, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database", cAlternateFileName="")) returned 1 [0155.798] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.800] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0155.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0155.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database", lpFilePart=0x0) returned 0x34 [0155.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0155.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database", lpFilePart=0x0) returned 0x34 [0155.800] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x8e73b662, ftLastAccessTime.dwHighDateTime=0x1d5d80d, ftLastWriteTime.dwLowDateTime=0x8e73b662, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.801] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x8e73b662, ftLastAccessTime.dwHighDateTime=0x1d5d80d, ftLastWriteTime.dwLowDateTime=0x8e73b662, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.801] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1eb87d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d1eb87d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xb200efd9, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB.chk", cAlternateFileName="")) returned 1 [0155.801] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3cdbf8a7, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xb200efd9, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB.log", cAlternateFileName="")) returned 1 [0155.801] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcb6e1300, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x8e7618cf, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB00006.log", cAlternateFileName="")) returned 1 [0155.801] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1c563b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d1c563b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3d1c563b, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0155.801] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1eb87d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d1eb87d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3d1eb87d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0155.802] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3cffbae0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xe332f20e, ftLastWriteTime.dwHighDateTime=0x1d327e6, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBtmp.log", cAlternateFileName="")) returned 1 [0155.802] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d532a92, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d532a92, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xb32d6c34, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x110000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vedatamodel.edb", cAlternateFileName="VEDATA~1.EDB")) returned 1 [0155.802] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc21df919, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc21df919, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xb1fe8cde, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vedatamodel.jfm", cAlternateFileName="VEDATA~1.JFM")) returned 1 [0155.802] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.802] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0155.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0155.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0155.803] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database", lpFilePart=0x0) returned 0x34 [0155.803] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x8e73b662, ftLastAccessTime.dwHighDateTime=0x1d5d80d, ftLastWriteTime.dwLowDateTime=0x8e73b662, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.803] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x8e73b662, ftLastAccessTime.dwHighDateTime=0x1d5d80d, ftLastWriteTime.dwLowDateTime=0x8e73b662, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.803] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1eb87d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d1eb87d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xb200efd9, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB.chk", cAlternateFileName="")) returned 1 [0155.804] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3cdbf8a7, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xb200efd9, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB.log", cAlternateFileName="")) returned 1 [0155.804] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcb6e1300, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x8e7618cf, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB00006.log", cAlternateFileName="")) returned 1 [0155.804] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1c563b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d1c563b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3d1c563b, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0155.804] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1eb87d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d1eb87d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3d1eb87d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0155.805] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3cffbae0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xe332f20e, ftLastWriteTime.dwHighDateTime=0x1d327e6, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBtmp.log", cAlternateFileName="")) returned 1 [0155.805] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d532a92, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d532a92, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xb32d6c34, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x110000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vedatamodel.edb", cAlternateFileName="VEDATA~1.EDB")) returned 1 [0155.805] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc21df919, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc21df919, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xb1fe8cde, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vedatamodel.jfm", cAlternateFileName="VEDATA~1.JFM")) returned 1 [0155.805] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc21df919, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc21df919, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xb1fe8cde, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vedatamodel.jfm", cAlternateFileName="VEDATA~1.JFM")) returned 0 [0155.805] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0155.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0155.806] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\UNP", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\UNP", lpFilePart=0x0) returned 0x21 [0155.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0155.806] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\UNP", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\UNP", lpFilePart=0x0) returned 0x21 [0155.806] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\UNP\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.808] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.808] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xf56c97e4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".{91be532c-f9f1-406a-9858-43697c6f437a}_uxlock", cAlternateFileName="{91BE5~1")) returned 1 [0155.809] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.809] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0155.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0155.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0155.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\UNP", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\UNP", lpFilePart=0x0) returned 0x21 [0155.809] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\UNP\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0155.809] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.810] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xf56c97e4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".{91be532c-f9f1-406a-9858-43697c6f437a}_uxlock", cAlternateFileName="{91BE5~1")) returned 1 [0155.810] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xf56c97e4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".{91be532c-f9f1-406a-9858-43697c6f437a}_uxlock", cAlternateFileName="{91BE5~1")) returned 0 [0155.810] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0155.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0155.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0155.810] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x2a [0155.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0155.810] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x2a [0155.810] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0155.811] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.811] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.811] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0155.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0155.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0155.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0155.812] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x2a [0155.812] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.812] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.812] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.812] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0155.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0155.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f408) returned 1 [0155.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x614eebc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0155.813] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\*", lpFindFileData=0x614f130 | out: lpFindFileData=0x614f130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe94d08ef, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe94d08ef, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0155.813] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe94d08ef, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe94d08ef, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.814] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918b0a80, ftCreationTime.dwHighDateTime=0x1d5e7d0, ftLastAccessTime.dwLowDateTime=0x18e919d0, ftLastAccessTime.dwHighDateTime=0x1d5e331, ftLastWriteTime.dwLowDateTime=0x18e919d0, ftLastWriteTime.dwHighDateTime=0x1d5e331, nFileSizeHigh=0x0, nFileSizeLow=0x9eea, dwReserved0=0x0, dwReserved1=0x0, cFileName="1apAO.mp3", cAlternateFileName="")) returned 1 [0155.814] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10aa2430, ftCreationTime.dwHighDateTime=0x1d5e647, ftLastAccessTime.dwLowDateTime=0x852e02b0, ftLastAccessTime.dwHighDateTime=0x1d5eb4a, ftLastWriteTime.dwLowDateTime=0x852e02b0, ftLastWriteTime.dwHighDateTime=0x1d5eb4a, nFileSizeHigh=0x0, nFileSizeLow=0x4bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5gQnHpAB3ylGhO.png", cAlternateFileName="5GQNHP~1.PNG")) returned 1 [0155.814] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c69ee70, ftCreationTime.dwHighDateTime=0x1d5e611, ftLastAccessTime.dwLowDateTime=0xf8df0ac0, ftLastAccessTime.dwHighDateTime=0x1d5e1fd, ftLastWriteTime.dwLowDateTime=0xf8df0ac0, ftLastWriteTime.dwHighDateTime=0x1d5e1fd, nFileSizeHigh=0x0, nFileSizeLow=0x3fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="6D6wTFodxMJRJG8l.png", cAlternateFileName="6D6WTF~1.PNG")) returned 1 [0155.814] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0155.815] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc863d00, ftCreationTime.dwHighDateTime=0x1d5ec3a, ftLastAccessTime.dwLowDateTime=0x49f454e0, ftLastAccessTime.dwHighDateTime=0x1d5e7af, ftLastWriteTime.dwLowDateTime=0x49f454e0, ftLastWriteTime.dwHighDateTime=0x1d5e7af, nFileSizeHigh=0x0, nFileSizeLow=0x12d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bj7ZgdR6.mp3", cAlternateFileName="")) returned 1 [0155.815] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d83360, ftCreationTime.dwHighDateTime=0x1d5e164, ftLastAccessTime.dwLowDateTime=0x3c80f00, ftLastAccessTime.dwHighDateTime=0x1d5ea9f, ftLastWriteTime.dwLowDateTime=0x3c80f00, ftLastWriteTime.dwHighDateTime=0x1d5ea9f, nFileSizeHigh=0x0, nFileSizeLow=0xfe64, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_143_VM.mp4", cAlternateFileName="")) returned 1 [0155.815] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9266be20, ftCreationTime.dwHighDateTime=0x1d5e7c8, ftLastAccessTime.dwLowDateTime=0xb76dd800, ftLastAccessTime.dwHighDateTime=0x1d5eba8, ftLastWriteTime.dwLowDateTime=0xb76dd800, ftLastWriteTime.dwHighDateTime=0x1d5eba8, nFileSizeHigh=0x0, nFileSizeLow=0x89ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="diDgTtTCYBvHrCGp-B.gif", cAlternateFileName="DIDGTT~1.GIF")) returned 1 [0155.815] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb87d040, ftCreationTime.dwHighDateTime=0x1d5e480, ftLastAccessTime.dwLowDateTime=0x94e408f0, ftLastAccessTime.dwHighDateTime=0x1d5e6b1, ftLastWriteTime.dwLowDateTime=0x94e408f0, ftLastWriteTime.dwHighDateTime=0x1d5e6b1, nFileSizeHigh=0x0, nFileSizeLow=0x1412a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FyA7ybETOa26t.flv", cAlternateFileName="FYA7YB~1.FLV")) returned 1 [0155.815] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa76610, ftCreationTime.dwHighDateTime=0x1d5e6c9, ftLastAccessTime.dwLowDateTime=0xf9668ff0, ftLastAccessTime.dwHighDateTime=0x1d5e800, ftLastWriteTime.dwLowDateTime=0xf9668ff0, ftLastWriteTime.dwHighDateTime=0x1d5e800, nFileSizeHigh=0x0, nFileSizeLow=0x112b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="gAV_.bmp", cAlternateFileName="")) returned 1 [0155.816] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d39360, ftCreationTime.dwHighDateTime=0x1d5ef57, ftLastAccessTime.dwLowDateTime=0x141ba690, ftLastAccessTime.dwHighDateTime=0x1d5ec21, ftLastWriteTime.dwLowDateTime=0x141ba690, ftLastWriteTime.dwHighDateTime=0x1d5ec21, nFileSizeHigh=0x0, nFileSizeLow=0x17dd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gU4F9ELCzLbmw.ots", cAlternateFileName="GU4F9E~1.OTS")) returned 1 [0155.816] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd67ff150, ftCreationTime.dwHighDateTime=0x1d5e7df, ftLastAccessTime.dwLowDateTime=0xcbe47ac0, ftLastAccessTime.dwHighDateTime=0x1d5f0ab, ftLastWriteTime.dwLowDateTime=0xcbe47ac0, ftLastWriteTime.dwHighDateTime=0x1d5f0ab, nFileSizeHigh=0x0, nFileSizeLow=0xf393, dwReserved0=0x0, dwReserved1=0x0, cFileName="G_MisQW8nklumaTGw.png", cAlternateFileName="G_MISQ~1.PNG")) returned 1 [0155.816] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fdcbb80, ftCreationTime.dwHighDateTime=0x1d5e3f7, ftLastAccessTime.dwLowDateTime=0x43f9d160, ftLastAccessTime.dwHighDateTime=0x1d5e14b, ftLastWriteTime.dwLowDateTime=0x43f9d160, ftLastWriteTime.dwHighDateTime=0x1d5e14b, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOAabqWEZieTloF1FJya.wav", cAlternateFileName="HOAABQ~1.WAV")) returned 1 [0155.816] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fa9b50, ftCreationTime.dwHighDateTime=0x1d5e6b1, ftLastAccessTime.dwLowDateTime=0x41ba0270, ftLastAccessTime.dwHighDateTime=0x1d5eb2e, ftLastWriteTime.dwLowDateTime=0x41ba0270, ftLastWriteTime.dwHighDateTime=0x1d5eb2e, nFileSizeHigh=0x0, nFileSizeLow=0x3827, dwReserved0=0x0, dwReserved1=0x0, cFileName="IeOPkB3s7m.m4a", cAlternateFileName="IEOPKB~1.M4A")) returned 1 [0155.816] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1faa5b0, ftCreationTime.dwHighDateTime=0x1d5e6cc, ftLastAccessTime.dwLowDateTime=0x63bb1000, ftLastAccessTime.dwHighDateTime=0x1d5e802, ftLastWriteTime.dwLowDateTime=0x63bb1000, ftLastWriteTime.dwHighDateTime=0x1d5e802, nFileSizeHigh=0x0, nFileSizeLow=0x9711, dwReserved0=0x0, dwReserved1=0x0, cFileName="jRgC-hCRN7pFTUfSK-x.mp3", cAlternateFileName="JRGC-H~1.MP3")) returned 1 [0155.817] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3106d00, ftCreationTime.dwHighDateTime=0x1d5ea9f, ftLastAccessTime.dwLowDateTime=0x498e3520, ftLastAccessTime.dwHighDateTime=0x1d5f128, ftLastWriteTime.dwLowDateTime=0x498e3520, ftLastWriteTime.dwHighDateTime=0x1d5f128, nFileSizeHigh=0x0, nFileSizeLow=0x162f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JXaXx.mkv", cAlternateFileName="")) returned 1 [0155.817] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4bc340, ftCreationTime.dwHighDateTime=0x1d5f099, ftLastAccessTime.dwLowDateTime=0x6faa4470, ftLastAccessTime.dwHighDateTime=0x1d5f005, ftLastWriteTime.dwLowDateTime=0x6faa4470, ftLastWriteTime.dwHighDateTime=0x1d5f005, nFileSizeHigh=0x0, nFileSizeLow=0x120a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="K8-7Q 9JhQ.png", cAlternateFileName="K8-7Q9~1.PNG")) returned 1 [0155.817] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7b94f0, ftCreationTime.dwHighDateTime=0x1d5e763, ftLastAccessTime.dwLowDateTime=0x23601c90, ftLastAccessTime.dwHighDateTime=0x1d5e275, ftLastWriteTime.dwLowDateTime=0x23601c90, ftLastWriteTime.dwHighDateTime=0x1d5e275, nFileSizeHigh=0x0, nFileSizeLow=0x11eed, dwReserved0=0x0, dwReserved1=0x0, cFileName="lEoPE.flv", cAlternateFileName="")) returned 1 [0155.817] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1 [0155.817] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6e3d60, ftCreationTime.dwHighDateTime=0x1d5e626, ftLastAccessTime.dwLowDateTime=0xba9defd0, ftLastAccessTime.dwHighDateTime=0x1d5e1c4, ftLastWriteTime.dwLowDateTime=0xba9defd0, ftLastWriteTime.dwHighDateTime=0x1d5e1c4, nFileSizeHigh=0x0, nFileSizeLow=0xa5df, dwReserved0=0x0, dwReserved1=0x0, cFileName="MBtjxCC.bmp", cAlternateFileName="")) returned 1 [0155.818] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce8b51a0, ftCreationTime.dwHighDateTime=0x1d5e493, ftLastAccessTime.dwLowDateTime=0xa492a200, ftLastAccessTime.dwHighDateTime=0x1d5ecd5, ftLastWriteTime.dwLowDateTime=0xa492a200, ftLastWriteTime.dwHighDateTime=0x1d5ecd5, nFileSizeHigh=0x0, nFileSizeLow=0xc023, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mfc_7Ulq_Ws.mkv", cAlternateFileName="MFC_7U~1.MKV")) returned 1 [0155.818] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3653b623, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3653b623, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0155.818] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0155.818] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5755440, ftCreationTime.dwHighDateTime=0x1d5e6f7, ftLastAccessTime.dwLowDateTime=0xd1f489c0, ftLastAccessTime.dwHighDateTime=0x1d5e974, ftLastWriteTime.dwLowDateTime=0xd1f489c0, ftLastWriteTime.dwHighDateTime=0x1d5e974, nFileSizeHigh=0x0, nFileSizeLow=0x5bd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="nRKGN.mp3", cAlternateFileName="")) returned 1 [0155.818] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65414620, ftCreationTime.dwHighDateTime=0x1d5eb08, ftLastAccessTime.dwLowDateTime=0x5ad61070, ftLastAccessTime.dwHighDateTime=0x1d5e343, ftLastWriteTime.dwLowDateTime=0x5ad61070, ftLastWriteTime.dwHighDateTime=0x1d5e343, nFileSizeHigh=0x0, nFileSizeLow=0x15b7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="O1sIspXZtKtpzkGJbOkv.mkv", cAlternateFileName="O1SISP~1.MKV")) returned 1 [0155.819] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xceae4bf0, ftCreationTime.dwHighDateTime=0x1d5e430, ftLastAccessTime.dwLowDateTime=0xbcea2a70, ftLastAccessTime.dwHighDateTime=0x1d5e7fe, ftLastWriteTime.dwLowDateTime=0xbcea2a70, ftLastWriteTime.dwHighDateTime=0x1d5e7fe, nFileSizeHigh=0x0, nFileSizeLow=0x146c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OeoSaiZJ9vWDTnHG.mp4", cAlternateFileName="OEOSAI~1.MP4")) returned 1 [0155.819] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2342aec0, ftCreationTime.dwHighDateTime=0x1d5e8f2, ftLastAccessTime.dwLowDateTime=0xeaca3330, ftLastAccessTime.dwHighDateTime=0x1d5edae, ftLastWriteTime.dwLowDateTime=0xeaca3330, ftLastWriteTime.dwHighDateTime=0x1d5edae, nFileSizeHigh=0x0, nFileSizeLow=0x15ab1, dwReserved0=0x0, dwReserved1=0x0, cFileName="OniDzHDLiVZgmun31.ppt", cAlternateFileName="ONIDZH~1.PPT")) returned 1 [0155.819] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x261f99e0, ftCreationTime.dwHighDateTime=0x1d5e948, ftLastAccessTime.dwLowDateTime=0xc34be9a0, ftLastAccessTime.dwHighDateTime=0x1d5ed01, ftLastWriteTime.dwLowDateTime=0xc34be9a0, ftLastWriteTime.dwHighDateTime=0x1d5ed01, nFileSizeHigh=0x0, nFileSizeLow=0x17536, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ost3szm9HDP2PsBr.mkv", cAlternateFileName="OST3SZ~1.MKV")) returned 1 [0155.819] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914d9a60, ftCreationTime.dwHighDateTime=0x1d5eb54, ftLastAccessTime.dwLowDateTime=0xcf978e70, ftLastAccessTime.dwHighDateTime=0x1d5eccb, ftLastWriteTime.dwLowDateTime=0xcf978e70, ftLastWriteTime.dwHighDateTime=0x1d5eccb, nFileSizeHigh=0x0, nFileSizeLow=0x11989, dwReserved0=0x0, dwReserved1=0x0, cFileName="p-HDe.odt", cAlternateFileName="")) returned 1 [0155.819] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25675920, ftCreationTime.dwHighDateTime=0x1d5f069, ftLastAccessTime.dwLowDateTime=0xad4b5cc0, ftLastAccessTime.dwHighDateTime=0x1d5e1c2, ftLastWriteTime.dwLowDateTime=0xad4b5cc0, ftLastWriteTime.dwHighDateTime=0x1d5e1c2, nFileSizeHigh=0x0, nFileSizeLow=0x9fef, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnS3dDKF6TDv3M6 MR0M.flv", cAlternateFileName="PNS3DD~1.FLV")) returned 1 [0155.820] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b3dfd0, ftCreationTime.dwHighDateTime=0x1d5efb2, ftLastAccessTime.dwLowDateTime=0x6cd6ecb0, ftLastAccessTime.dwHighDateTime=0x1d5e0fd, ftLastWriteTime.dwLowDateTime=0x6cd6ecb0, ftLastWriteTime.dwHighDateTime=0x1d5e0fd, nFileSizeHigh=0x0, nFileSizeLow=0xa7d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUqACZ.mp3", cAlternateFileName="")) returned 1 [0155.820] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd270b1c0, ftCreationTime.dwHighDateTime=0x1d5e60a, ftLastAccessTime.dwLowDateTime=0x6f5fcbb0, ftLastAccessTime.dwHighDateTime=0x1d5e6f6, ftLastWriteTime.dwLowDateTime=0x6f5fcbb0, ftLastWriteTime.dwHighDateTime=0x1d5e6f6, nFileSizeHigh=0x0, nFileSizeLow=0xe18b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QV14KxgNb1qk7.flv", cAlternateFileName="QV14KX~1.FLV")) returned 1 [0155.820] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x218195e0, ftCreationTime.dwHighDateTime=0x1d5eaf7, ftLastAccessTime.dwLowDateTime=0x943155c0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x943155c0, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xcb33, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdJ M n8eVB.avi", cAlternateFileName="SDJMN8~1.AVI")) returned 1 [0155.820] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype", cAlternateFileName="")) returned 1 [0155.820] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0155.821] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7af8b200, ftCreationTime.dwHighDateTime=0x1d5f026, ftLastAccessTime.dwLowDateTime=0x6d55a9f0, ftLastAccessTime.dwHighDateTime=0x1d5ec7f, ftLastWriteTime.dwLowDateTime=0x6d55a9f0, ftLastWriteTime.dwHighDateTime=0x1d5ec7f, nFileSizeHigh=0x0, nFileSizeLow=0xd76a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TG7ttwE WYuL.ots", cAlternateFileName="TG7TTW~1.OTS")) returned 1 [0155.821] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49983430, ftCreationTime.dwHighDateTime=0x1d5e8f9, ftLastAccessTime.dwLowDateTime=0xfe73ec90, ftLastAccessTime.dwHighDateTime=0x1d5f08e, ftLastWriteTime.dwLowDateTime=0xfe73ec90, ftLastWriteTime.dwHighDateTime=0x1d5f08e, nFileSizeHigh=0x0, nFileSizeLow=0xa8e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="TKR33bLnw03eG.bmp", cAlternateFileName="TKR33B~1.BMP")) returned 1 [0155.821] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b25870, ftCreationTime.dwHighDateTime=0x1d5ef67, ftLastAccessTime.dwLowDateTime=0x257354b0, ftLastAccessTime.dwHighDateTime=0x1d5e4b0, ftLastWriteTime.dwLowDateTime=0x257354b0, ftLastWriteTime.dwHighDateTime=0x1d5e4b0, nFileSizeHigh=0x0, nFileSizeLow=0x2360, dwReserved0=0x0, dwReserved1=0x0, cFileName="VTxeJQP.wav", cAlternateFileName="")) returned 1 [0155.821] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb540b0, ftCreationTime.dwHighDateTime=0x1d5ef67, ftLastAccessTime.dwLowDateTime=0x1fe32330, ftLastAccessTime.dwHighDateTime=0x1d5e588, ftLastWriteTime.dwLowDateTime=0x1fe32330, ftLastWriteTime.dwHighDateTime=0x1d5e588, nFileSizeHigh=0x0, nFileSizeLow=0x7851, dwReserved0=0x0, dwReserved1=0x0, cFileName="wqZdkRCg7L5wILcH.gif", cAlternateFileName="WQZDKR~1.GIF")) returned 1 [0155.821] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cdf9630, ftCreationTime.dwHighDateTime=0x1d5f07c, ftLastAccessTime.dwLowDateTime=0x1d5cf80, ftLastAccessTime.dwHighDateTime=0x1d5f07f, ftLastWriteTime.dwLowDateTime=0x1d5cf80, ftLastWriteTime.dwHighDateTime=0x1d5f07f, nFileSizeHigh=0x0, nFileSizeLow=0xe1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="x2suqlKVKCdicp.pdf", cAlternateFileName="X2SUQL~1.PDF")) returned 1 [0155.822] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f546650, ftCreationTime.dwHighDateTime=0x1d5ec62, ftLastAccessTime.dwLowDateTime=0x51fd2b30, ftLastAccessTime.dwHighDateTime=0x1d5e59d, ftLastWriteTime.dwLowDateTime=0x51fd2b30, ftLastWriteTime.dwHighDateTime=0x1d5e59d, nFileSizeHigh=0x0, nFileSizeLow=0x11c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="YN--LHNCgLT.swf", cAlternateFileName="YN--LH~1.SWF")) returned 1 [0155.822] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5772fd90, ftCreationTime.dwHighDateTime=0x1d5e36a, ftLastAccessTime.dwLowDateTime=0xdd298280, ftLastAccessTime.dwHighDateTime=0x1d5e8fe, ftLastWriteTime.dwLowDateTime=0xdd298280, ftLastWriteTime.dwHighDateTime=0x1d5e8fe, nFileSizeHigh=0x0, nFileSizeLow=0x144da, dwReserved0=0x0, dwReserved1=0x0, cFileName="YNigbv5nS-u.mkv", cAlternateFileName="YNIGBV~1.MKV")) returned 1 [0155.822] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe27308c0, ftCreationTime.dwHighDateTime=0x1d5e26d, ftLastAccessTime.dwLowDateTime=0x52230620, ftLastAccessTime.dwHighDateTime=0x1d5e291, ftLastWriteTime.dwLowDateTime=0x52230620, ftLastWriteTime.dwHighDateTime=0x1d5e291, nFileSizeHigh=0x0, nFileSizeLow=0xf6cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="zldYixn2tGBN85eiP.wav", cAlternateFileName="ZLDYIX~1.WAV")) returned 1 [0155.823] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f13c | out: lpFindFileData=0x614f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe27308c0, ftCreationTime.dwHighDateTime=0x1d5e26d, ftLastAccessTime.dwLowDateTime=0x52230620, ftLastAccessTime.dwHighDateTime=0x1d5e291, ftLastWriteTime.dwLowDateTime=0x52230620, ftLastWriteTime.dwHighDateTime=0x1d5e291, nFileSizeHigh=0x0, nFileSizeLow=0xf6cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="zldYixn2tGBN85eiP.wav", cAlternateFileName="ZLDYIX~1.WAV")) returned 0 [0155.823] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0155.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c4) returned 1 [0155.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3d0) returned 1 [0155.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x25 [0155.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0155.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x25 [0155.823] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0155.825] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.826] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0155.826] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0155.826] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0155.826] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0155.826] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0155.827] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 1 [0155.827] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 0 [0155.827] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0155.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0155.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0155.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0155.828] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x25 [0155.828] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.829] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.830] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0155.830] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0155.830] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0155.830] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0155.830] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0155.830] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 1 [0155.831] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.831] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0155.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0155.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2d [0155.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0155.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2d [0155.832] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0155.834] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.834] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0155.835] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0155.835] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0155.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0155.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0155.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0155.835] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2d [0155.835] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.835] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.836] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0155.836] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.836] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0155.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0155.836] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x30 [0155.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.836] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x30 [0155.836] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.837] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.837] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0155.837] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0155.837] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd82b1d84, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSCache", cAlternateFileName="")) returned 1 [0155.916] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0155.917] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0155.917] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.917] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x30 [0155.917] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.918] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.918] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0155.918] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0155.918] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd82b1d84, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSCache", cAlternateFileName="")) returned 1 [0155.918] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0155.918] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.919] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0155.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0155.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", lpFilePart=0x0) returned 0x37 [0155.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0155.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", lpFilePart=0x0) returned 0x37 [0155.919] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0155.920] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.920] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.921] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0155.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0155.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0155.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", lpFilePart=0x0) returned 0x36 [0155.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0155.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", lpFilePart=0x0) returned 0x36 [0155.921] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0155.921] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.922] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.922] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0155.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0155.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0155.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", lpFilePart=0x0) returned 0x38 [0155.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0155.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", lpFilePart=0x0) returned 0x38 [0155.929] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.930] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.931] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636b588b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x636b588b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x636b588b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x16, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobData", cAlternateFileName="")) returned 1 [0155.931] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89495bf, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe89495bf, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobSettings", cAlternateFileName="GLOBSE~1")) returned 1 [0155.931] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.931] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0155.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0155.932] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", lpFilePart=0x0) returned 0x39 [0155.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0155.932] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", lpFilePart=0x0) returned 0x39 [0155.932] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0155.932] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.932] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c7194c4, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c78bbf1, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1ebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0155.932] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0155.933] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0 [0155.933] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0155.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0155.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0155.933] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x32 [0155.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0155.933] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x32 [0155.933] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0155.933] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.934] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0155.934] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1 [0155.934] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 0 [0155.934] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0155.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0155.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0155.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0155.935] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x32 [0155.935] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.935] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.935] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0155.935] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1 [0155.935] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.936] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0155.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0155.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x3d [0155.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x3d [0155.936] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.938] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.938] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 1 [0155.938] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 0 [0155.938] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x3d [0155.939] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.939] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.939] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 1 [0155.939] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.939] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0155.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0155.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", lpFilePart=0x0) returned 0x46 [0155.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0155.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", lpFilePart=0x0) returned 0x46 [0155.940] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.940] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.940] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.940] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0155.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0155.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpFilePart=0x0) returned 0x3e [0155.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpFilePart=0x0) returned 0x3e [0155.941] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0155.941] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.941] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 1 [0155.941] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.941] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0155.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.942] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpFilePart=0x0) returned 0x3e [0155.942] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.942] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.942] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 1 [0155.942] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 0 [0155.943] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0155.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0155.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x30 [0155.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0155.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x30 [0155.943] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.944] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.944] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.944] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0155.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0155.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0155.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x30 [0155.945] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.945] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.945] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.945] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0155.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0155.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x31 [0155.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0155.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x31 [0155.945] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.946] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.946] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.946] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0155.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0155.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0155.946] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x31 [0155.946] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.947] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.947] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.947] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0155.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0155.947] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x33 [0155.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0155.947] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x33 [0155.948] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.948] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.948] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0155.948] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 1 [0155.948] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.948] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0155.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0155.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0155.948] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x33 [0155.948] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0155.949] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.949] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0155.949] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 1 [0155.949] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 0 [0155.949] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0155.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0155.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0155.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpFilePart=0x0) returned 0x38 [0155.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpFilePart=0x0) returned 0x38 [0155.949] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.953] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.953] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.953] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.953] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpFilePart=0x0) returned 0x38 [0155.953] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.954] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.954] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.954] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0155.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0155.954] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", lpFilePart=0x0) returned 0x2b [0155.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0155.954] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", lpFilePart=0x0) returned 0x2b [0155.954] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.955] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.955] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 1 [0155.955] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 0 [0155.955] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0155.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0155.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0155.956] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", lpFilePart=0x0) returned 0x2b [0155.956] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.956] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.956] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 1 [0155.956] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.956] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0155.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0155.956] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpFilePart=0x0) returned 0x34 [0155.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.957] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpFilePart=0x0) returned 0x34 [0155.957] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.957] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.957] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 1 [0155.957] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.957] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0155.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0155.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0155.957] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpFilePart=0x0) returned 0x34 [0155.958] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.958] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.958] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 1 [0155.958] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 0 [0155.958] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0155.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0155.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x2a [0155.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0155.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x2a [0155.959] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.959] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.959] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0155.959] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0 [0155.959] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0155.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0155.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0155.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x2a [0155.959] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.960] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.960] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0155.960] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.960] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0155.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0155.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x37 [0155.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0155.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x37 [0155.960] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0155.961] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.961] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0155.961] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0155.961] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0 [0155.961] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0155.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0155.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0155.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0155.961] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x37 [0155.961] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0155.962] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.962] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0155.962] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0155.962] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.962] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0155.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0155.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0155.962] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x46 [0155.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0155.962] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x46 [0155.962] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0156.067] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.067] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 1 [0156.067] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 0 [0156.067] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0156.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0156.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0156.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0156.090] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x46 [0156.090] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0156.091] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.091] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 1 [0156.091] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.091] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0156.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0156.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0156.091] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", lpFilePart=0x0) returned 0x4f [0156.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0156.091] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", lpFilePart=0x0) returned 0x4f [0156.091] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0156.092] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.092] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#AppContainer", cAlternateFileName="#APPCO~1")) returned 1 [0156.092] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#AppContainer", cAlternateFileName="#APPCO~1")) returned 0 [0156.093] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0156.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0156.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0156.093] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x46 [0156.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0156.093] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x46 [0156.093] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0156.093] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.093] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0156.093] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0 [0156.093] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0156.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0156.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0156.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0156.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x46 [0156.094] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14373f8 [0156.094] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.094] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0156.094] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.094] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0156.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0156.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0156.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x614ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x4e [0156.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0156.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x614ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x4e [0156.094] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x614efd0 | out: lpFindFileData=0x614efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0156.095] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.095] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0156.095] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0 [0156.095] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0156.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0156.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0156.095] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x29 [0156.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0156.095] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x29 [0156.095] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3653b623, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3653b623, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0156.095] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3653b623, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3653b623, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.095] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x33c5d8bc, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208511b9, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x208511b9, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x208511b9, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0f124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d0f124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2d35364, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd370742a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39c1605f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789ca310, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789ca310, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3653b623, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3653b623, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x365619cd, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x3b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctfmom.exe", cAlternateFileName="")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32ff935, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32ff935, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x32ff935, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208e9b07, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3800a8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputMethod", cAlternateFileName="INPUTM~1")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34791fac, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xabc78877, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabc78877, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc79a26a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc79a26a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc79a26a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab3fa09c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab3fa09c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f2525a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x15925c1b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x15925c1b, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b1656b, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa8b1656b, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd629eb7, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b00229f, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1b00229f, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1b00229f, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f58c1c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x6f58c1c, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x6f58c1c, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b7903de, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b7903de, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x422eea37, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x422eea37, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x422eea37, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0156.096] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xde511f85, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1 [0156.097] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38fae20, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38fae20, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38fae20, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Signatures", cAlternateFileName="SIGNAT~1")) returned 1 [0156.097] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0156.097] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38d4b92, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38d4b92, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38d4b92, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0156.097] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab505145, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab505145, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0156.097] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacdbc5f1, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe3719c0d, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xf50bbe18, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0156.097] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0156.097] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3bb556b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfaff70b, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0156.097] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd65f9933, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xd65f9933, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0156.097] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0156.097] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3653b623, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3653b623, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3653b623, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CL_02f3a8c9sy", cAlternateFileName="_CL_02~1")) returned 1 [0156.097] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.097] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0156.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0156.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0156.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0156.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x29 [0156.097] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3653b623, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3653b623, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0156.098] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3653b623, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3653b623, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.098] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x33c5d8bc, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0156.098] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208511b9, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x208511b9, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x208511b9, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0156.098] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0f124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d0f124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2d35364, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0156.098] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd370742a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39c1605f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0156.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0156.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0156.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0156.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0156.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0156.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0156.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0156.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0156.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0156.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0156.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0156.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0156.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0156.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0156.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0156.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0156.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0156.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0156.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0156.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0156.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0156.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0156.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0156.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0156.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0156.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0156.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0156.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0156.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0156.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0156.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0156.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0156.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0156.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0156.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0156.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0156.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0156.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0156.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0156.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0156.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0156.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0156.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0156.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0156.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0156.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0156.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0156.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0156.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0156.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0156.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0156.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0156.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0156.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0156.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0156.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0156.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0156.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0156.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0156.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0156.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0156.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0156.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0156.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0156.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0156.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0156.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0156.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0156.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0156.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0156.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0156.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0156.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0156.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0156.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0156.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0156.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0156.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0156.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0156.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0156.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0156.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0156.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0156.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0156.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2a8) returned 1 [0156.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0156.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0156.358] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143f0f49, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x143f0f49, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x621cbf79, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecurityPreloadState.txt", cAlternateFileName="SECURI~1.TXT")) returned 1 [0156.358] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6143ca20, ftCreationTime.dwHighDateTime=0x1d5d80c, ftLastAccessTime.dwLowDateTime=0x622b0e6b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0x622b0e6b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionCheckpoints.json", cAlternateFileName="SESSIO~1.JSO")) returned 1 [0156.359] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6368e07, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4d50d96b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0x4d50d96b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore-backups", cAlternateFileName="SESSIO~1")) returned 1 [0156.359] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61593d36, ftCreationTime.dwHighDateTime=0x1d5d80c, ftLastAccessTime.dwLowDateTime=0x61593d36, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0x61593d36, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1 [0156.359] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143f0f49, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x143f0f49, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x621cbf79, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x895, dwReserved0=0x0, dwReserved1=0x0, cFileName="SiteSecurityServiceState.txt", cAlternateFileName="SITESE~1.TXT")) returned 1 [0156.359] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c1abf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x23c1abf, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x23c2e4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="storage", cAlternateFileName="")) returned 1 [0156.359] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f76d02, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1f76d02, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x22b9f22, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="storage.sqlite", cAlternateFileName="STORAG~1.SQL")) returned 1 [0156.360] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1 [0156.360] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd1119, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2bd1119, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb8239875, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1 [0156.360] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dd66857, ftCreationTime.dwHighDateTime=0x1d5d80c, ftLastAccessTime.dwLowDateTime=0x6228ac02, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0x6228ac02, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="xulstore.json", cAlternateFileName="XULSTO~1.JSO")) returned 1 [0156.360] FindNextFileW (in: hFindFile=0x14373f8, lpFindFileData=0x614efdc | out: lpFindFileData=0x614efdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.360] FindClose (in: hFindFile=0x14373f8 | out: hFindFile=0x14373f8) returned 1 [0156.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f264) returned 1 [0156.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f270) returned 1 [0156.362] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype", lpFilePart=0x0) returned 0x25 [0156.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0156.362] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype", lpFilePart=0x0) returned 0x25 [0156.362] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1437278 [0156.363] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.363] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RootTools", cAlternateFileName="ROOTTO~1")) returned 1 [0156.363] FindNextFileW (in: hFindFile=0x1437278, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RootTools", cAlternateFileName="ROOTTO~1")) returned 0 [0156.363] FindClose (in: hFindFile=0x1437278 | out: hFindFile=0x1437278) returned 1 [0156.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0156.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0156.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0156.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype", lpFilePart=0x0) returned 0x25 [0156.364] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0156.364] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.364] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RootTools", cAlternateFileName="ROOTTO~1")) returned 1 [0156.364] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.364] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0156.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0156.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0156.365] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype\\RootTools", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype\\RootTools", lpFilePart=0x0) returned 0x2f [0156.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0156.365] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype\\RootTools", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype\\RootTools", lpFilePart=0x0) returned 0x2f [0156.365] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype\\RootTools\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0156.365] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.366] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="roottools.conf", cAlternateFileName="ROOTTO~1.CON")) returned 1 [0156.366] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.366] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0156.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0156.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0156.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0156.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype\\RootTools", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype\\RootTools", lpFilePart=0x0) returned 0x2f [0156.366] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Skype\\RootTools\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0156.367] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.367] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="roottools.conf", cAlternateFileName="ROOTTO~1.CON")) returned 1 [0156.367] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="roottools.conf", cAlternateFileName="ROOTTO~1.CON")) returned 0 [0156.367] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0156.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0156.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0156.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun", nBufferLength=0x105, lpBuffer=0x614eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun", lpFilePart=0x0) returned 0x23 [0156.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3f8) returned 1 [0156.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun", nBufferLength=0x105, lpBuffer=0x614eeac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun", lpFilePart=0x0) returned 0x23 [0156.368] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\*", lpFindFileData=0x614f120 | out: lpFindFileData=0x614f120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0156.368] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.368] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0156.368] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f12c | out: lpFindFileData=0x614f12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0156.369] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0156.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3b4) returned 1 [0156.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3c0) returned 1 [0156.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f398) returned 1 [0156.369] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun", nBufferLength=0x105, lpBuffer=0x614ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun", lpFilePart=0x0) returned 0x23 [0156.369] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\*", lpFindFileData=0x614f0c0 | out: lpFindFileData=0x614f0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436fb8 [0156.370] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.370] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0156.370] FindNextFileW (in: hFindFile=0x1436fb8, lpFindFileData=0x614f0cc | out: lpFindFileData=0x614f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.370] FindClose (in: hFindFile=0x1436fb8 | out: hFindFile=0x1436fb8) returned 1 [0156.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f354) returned 1 [0156.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f360) returned 1 [0156.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x614ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java", lpFilePart=0x0) returned 0x28 [0156.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f388) returned 1 [0156.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x614ee3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java", lpFilePart=0x0) returned 0x28 [0156.371] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java\\*", lpFindFileData=0x614f0b0 | out: lpFindFileData=0x614f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0156.371] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.371] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0156.371] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f0bc | out: lpFindFileData=0x614f0bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 0 [0156.372] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0156.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f344) returned 1 [0156.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f350) returned 1 [0156.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f328) returned 1 [0156.372] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x614eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java", lpFilePart=0x0) returned 0x28 [0156.372] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java\\*", lpFindFileData=0x614f050 | out: lpFindFileData=0x614f050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0156.372] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.372] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0156.373] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614f05c | out: lpFindFileData=0x614f05c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.373] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0156.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e4) returned 1 [0156.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2f0) returned 1 [0156.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x614ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x33 [0156.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f318) returned 1 [0156.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x614edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x33 [0156.373] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java\\Deployment\\*", lpFindFileData=0x614f040 | out: lpFindFileData=0x614f040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14376f8 [0156.374] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.374] FindNextFileW (in: hFindFile=0x14376f8, lpFindFileData=0x614f04c | out: lpFindFileData=0x614f04c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.374] FindClose (in: hFindFile=0x14376f8 | out: hFindFile=0x14376f8) returned 1 [0156.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d4) returned 1 [0156.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2e0) returned 1 [0156.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2b8) returned 1 [0156.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x614ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x33 [0156.374] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Sun\\Java\\Deployment\\*", lpFindFileData=0x614efe0 | out: lpFindFileData=0x614efe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x14371f8 [0156.375] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.375] FindNextFileW (in: hFindFile=0x14371f8, lpFindFileData=0x614efec | out: lpFindFileData=0x614efec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.375] FindClose (in: hFindFile=0x14371f8 | out: hFindFile=0x14371f8) returned 1 [0156.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f274) returned 1 [0156.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f280) returned 1 [0156.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", nBufferLength=0x105, lpBuffer=0x614ef4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", lpFilePart=0x0) returned 0x58 [0156.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", nBufferLength=0x105, lpBuffer=0x614ef40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", lpFilePart=0x0) returned 0x49 [0156.518] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", nBufferLength=0x105, lpBuffer=0x614ef1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", lpFilePart=0x0) returned 0x51 [0156.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f3d0) returned 1 [0156.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), fInfoLevelId=0x0, lpFileInformation=0x614f44c | out: lpFileInformation=0x614f44c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6922fa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe6922fa, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x621f2203, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0156.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f3cc) returned 1 [0156.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", nBufferLength=0x105, lpBuffer=0x614eecc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", lpFilePart=0x0) returned 0x51 [0156.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_13.8143122+02_0088", nBufferLength=0x105, lpBuffer=0x614eecc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_13.8143122+02_0088", lpFilePart=0x0) returned 0x52 [0156.543] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_13.8143122+02_0088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-09-27t10_51_13.8143122+02_0088"), bFailIfExists=0) returned 1 [0158.982] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x1460988 [0158.985] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x1460b20 [0159.263] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_13.8143122+02_0088", nBufferLength=0x105, lpBuffer=0x614eebc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_13.8143122+02_0088", lpFilePart=0x0) returned 0x52 [0159.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f370) returned 1 [0159.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_13.8143122+02_0088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-09-27t10_51_13.8143122+02_0088"), fInfoLevelId=0x0, lpFileInformation=0x614f3ec | out: lpFileInformation=0x614f3ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad6f080, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x5ad6f080, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x621f2203, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0159.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f36c) returned 1 [0159.277] GetCurrentProcessId () returned 0x760 [0159.278] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll", nBufferLength=0x105, lpBuffer=0x614e71c, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll", lpFilePart=0x0) returned 0x63 [0159.278] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll", nBufferLength=0x105, lpBuffer=0x614e694, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll", lpFilePart=0x0) returned 0x63 [0159.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="System.Data.1", cchWideChar=13, lpMultiByteStr=0x614ebdc, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="System.Data.1\x89\x08mBKþ%ðù°sÀì\x14\x06tì\x14\x06$S¼s", lpUsedDefaultChar=0x0) returned 13 [0159.388] CoTaskMemAlloc (cb=0x32) returned 0x13c9920 [0159.388] CoTaskMemAlloc (cb=0xc8) returned 0x146d0c8 [0159.388] CoTaskMemFree (pv=0x13c9920) [0159.388] CoTaskMemFree (pv=0x146d0c8) [0159.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_13.8143122+02_0088", nBufferLength=0x105, lpBuffer=0x614ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_13.8143122+02_0088", lpFilePart=0x0) returned 0x52 [0159.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f2dc) returned 1 [0159.555] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_13.8143122+02_0088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-09-27t10_51_13.8143122+02_0088"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x628 [0159.555] GetFileType (hFile=0x628) returned 0x1 [0159.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f2d8) returned 1 [0159.555] GetFileType (hFile=0x628) returned 0x1 [0159.555] GetFileSize (in: hFile=0x628, lpFileSizeHigh=0x614f3c0 | out: lpFileSizeHigh=0x614f3c0*=0x0) returned 0x4000 [0159.555] ReadFile (in: hFile=0x628, lpBuffer=0x2ff3a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x614f374, lpOverlapped=0x0 | out: lpBuffer=0x2ff3a10*, lpNumberOfBytesRead=0x614f374*=0x1000, lpOverlapped=0x0) returned 1 [0159.556] ReadFile (in: hFile=0x628, lpBuffer=0x2ff3a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x614f374, lpOverlapped=0x0 | out: lpBuffer=0x2ff3a10*, lpNumberOfBytesRead=0x614f374*=0x1000, lpOverlapped=0x0) returned 1 [0159.556] ReadFile (in: hFile=0x628, lpBuffer=0x2ff3a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x614f374, lpOverlapped=0x0 | out: lpBuffer=0x2ff3a10*, lpNumberOfBytesRead=0x614f374*=0x1000, lpOverlapped=0x0) returned 1 [0159.556] ReadFile (in: hFile=0x628, lpBuffer=0x2ff3a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x614f374, lpOverlapped=0x0 | out: lpBuffer=0x2ff3a10*, lpNumberOfBytesRead=0x614f374*=0x1000, lpOverlapped=0x0) returned 1 [0159.556] CloseHandle (hObject=0x628) returned 1 [0160.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", nBufferLength=0x105, lpBuffer=0x614ee84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", lpFilePart=0x0) returned 0x55 [0160.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_17.9247429+02_0088", nBufferLength=0x105, lpBuffer=0x614ee84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_17.9247429+02_0088", lpFilePart=0x0) returned 0x52 [0160.640] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\logins.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_17.9247429+02_0088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-09-27t10_51_17.9247429+02_0088"), bFailIfExists=0) returned 0 [0160.640] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\logins.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0160.827] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db", nBufferLength=0x105, lpBuffer=0x614eecc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db", lpFilePart=0x0) returned 0x51 [0160.827] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_18.1123442+02_0088", nBufferLength=0x105, lpBuffer=0x614eecc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_18.1123442+02_0088", lpFilePart=0x0) returned 0x52 [0160.828] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key4.db"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-09-27T10_51_18.1123442+02_0088" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-09-27t10_51_18.1123442+02_0088"), bFailIfExists=0) returned 0 [0160.828] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key4.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0160.830] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Gecko Logins.txt", nBufferLength=0x105, lpBuffer=0x614efc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Gecko Logins.txt", lpFilePart=0x0) returned 0x75 [0160.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f474) returned 1 [0160.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Gecko Logins.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\gecko logins.txt"), fInfoLevelId=0x0, lpFileInformation=0x614f4f0 | out: lpFileInformation=0x614f4f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0160.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f470) returned 1 [0161.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x614ef64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x38 [0161.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f414) returned 1 [0161.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x614f490 | out: lpFileInformation=0x614f490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0161.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f410) returned 1 [0161.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f494) returned 1 [0161.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x614ef48, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x38 [0161.220] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x614f1bc | out: lpFindFileData=0x614f1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13c99a0 [0161.220] FindNextFileW (in: hFindFile=0x13c99a0, lpFindFileData=0x614f1c8 | out: lpFindFileData=0x614f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.220] FindNextFileW (in: hFindFile=0x13c99a0, lpFindFileData=0x614f1c8 | out: lpFindFileData=0x614f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6236fa1e, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0x6236fa1e, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 1 [0161.221] FindNextFileW (in: hFindFile=0x13c99a0, lpFindFileData=0x614f1c8 | out: lpFindFileData=0x614f1c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0161.221] FindClose (in: hFindFile=0x13c99a0 | out: hFindFile=0x13c99a0) returned 1 [0161.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f450) returned 1 [0161.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f45c) returned 1 [0161.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", nBufferLength=0x105, lpBuffer=0x614ef6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", lpFilePart=0x0) returned 0x55 [0161.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f420) returned 1 [0161.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\logins.json"), fInfoLevelId=0x0, lpFileInformation=0x614f49c | out: lpFileInformation=0x614f49c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0161.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f41c) returned 1 [0161.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db", nBufferLength=0x105, lpBuffer=0x614ef6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db", lpFilePart=0x0) returned 0x51 [0161.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f420) returned 1 [0161.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key4.db"), fInfoLevelId=0x0, lpFileInformation=0x614f49c | out: lpFileInformation=0x614f49c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0161.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f41c) returned 1 [0161.222] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.SQLiteHandler", nBufferLength=0x105, lpBuffer=0x614ef6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.SQLiteHandler", lpFilePart=0x0) returned 0x5e [0161.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x614f420) returned 1 [0161.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.SQLiteHandler" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\places.sqlitehandler"), fInfoLevelId=0x0, lpFileInformation=0x614f49c | out: lpFileInformation=0x614f49c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0161.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x614f41c) returned 1 [0161.270] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.371] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.481] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.653] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.778] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.892] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.000] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.262] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.465] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.560] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.653] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.699] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.746] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0163.310] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0164.112] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0164.323] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0164.769] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.092] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.240] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.340] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.433] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.604] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.886] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0166.042] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0166.715] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 Thread: id = 29 os_tid = 0x6ec [0105.811] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0105.812] CoGetContextToken (in: pToken=0x628f324 | out: pToken=0x628f324) returned 0x0 [0105.812] CObjectContext::QueryInterface () returned 0x0 [0105.812] IComThreadingInfo:GetCurrentThreadType (in: This=0x13dcc0c, pThreadType=0x628f374 | out: pThreadType=0x628f374*=0) returned 0x0 [0105.812] IUnknown:Release (This=0x13dcc0c) returned 0x1 [0105.812] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0105.812] CoUninitialize () [0105.812] RoInitialize () returned 0x1 [0105.812] RoUninitialize () returned 0x0 [0106.048] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Wallets\\", nBufferLength=0x105, lpBuffer=0x628e890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Wallets\\", lpFilePart=0x0) returned 0x6d [0106.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628eccc) returned 1 [0106.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Wallets\\" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\wallets"), fInfoLevelId=0x0, lpFileInformation=0x628ed48 | out: lpFileInformation=0x628ed48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ecc8) returned 1 [0106.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628eccc) returned 1 [0106.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Wallets" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\wallets"), fInfoLevelId=0x0, lpFileInformation=0x628ed48 | out: lpFileInformation=0x628ed48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ecc8) returned 1 [0106.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628eccc) returned 1 [0106.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0"), fInfoLevelId=0x0, lpFileInformation=0x628ed48 | out: lpFileInformation=0x628ed48*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x39d98f6f, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3aa1d4a0, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3aa1d4a0, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ecc8) returned 1 [0106.049] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Wallets" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\wallets"), lpSecurityAttributes=0x0) returned 1 [0106.054] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zcash", nBufferLength=0x105, lpBuffer=0x628e878, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zcash", lpFilePart=0x0) returned 0x25 [0106.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed28) returned 1 [0106.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zcash" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\zcash"), fInfoLevelId=0x0, lpFileInformation=0x628eda4 | out: lpFileInformation=0x628eda4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed24) returned 1 [0106.054] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Armory", nBufferLength=0x105, lpBuffer=0x628e878, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Armory", lpFilePart=0x0) returned 0x26 [0106.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed28) returned 1 [0106.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Armory" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\armory"), fInfoLevelId=0x0, lpFileInformation=0x628eda4 | out: lpFileInformation=0x628eda4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed24) returned 1 [0106.054] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\bytecoin", nBufferLength=0x105, lpBuffer=0x628e878, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\bytecoin", lpFilePart=0x0) returned 0x28 [0106.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed28) returned 1 [0106.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\bytecoin" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\bytecoin"), fInfoLevelId=0x0, lpFileInformation=0x628eda4 | out: lpFileInformation=0x628eda4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed24) returned 1 [0106.055] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\com.liberty.jaxx\\IndexedDB\\file__0.indexeddb.leveldb", nBufferLength=0x105, lpBuffer=0x628e878, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\com.liberty.jaxx\\IndexedDB\\file__0.indexeddb.leveldb", lpFilePart=0x0) returned 0x54 [0106.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed28) returned 1 [0106.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\com.liberty.jaxx\\IndexedDB\\file__0.indexeddb.leveldb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\com.liberty.jaxx\\indexeddb\\file__0.indexeddb.leveldb"), fInfoLevelId=0x0, lpFileInformation=0x628eda4 | out: lpFileInformation=0x628eda4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed24) returned 1 [0106.055] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Exodus\\exodus.wallet", nBufferLength=0x105, lpBuffer=0x628e878, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Exodus\\exodus.wallet", lpFilePart=0x0) returned 0x34 [0106.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed28) returned 1 [0106.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Exodus\\exodus.wallet" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\exodus\\exodus.wallet"), fInfoLevelId=0x0, lpFileInformation=0x628eda4 | out: lpFileInformation=0x628eda4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed24) returned 1 [0106.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Ethereum\\keystore", nBufferLength=0x105, lpBuffer=0x628e878, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Ethereum\\keystore", lpFilePart=0x0) returned 0x31 [0106.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed28) returned 1 [0106.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Ethereum\\keystore" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ethereum\\keystore"), fInfoLevelId=0x0, lpFileInformation=0x628eda4 | out: lpFileInformation=0x628eda4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed24) returned 1 [0106.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Electrum\\wallets", nBufferLength=0x105, lpBuffer=0x628e878, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Electrum\\wallets", lpFilePart=0x0) returned 0x30 [0106.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed28) returned 1 [0106.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Electrum\\wallets" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\electrum\\wallets"), fInfoLevelId=0x0, lpFileInformation=0x628eda4 | out: lpFileInformation=0x628eda4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed24) returned 1 [0106.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\atomic\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x628e878, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\atomic\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x3c [0106.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed28) returned 1 [0106.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\atomic\\Local Storage\\leveldb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\atomic\\local storage\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x628eda4 | out: lpFileInformation=0x628eda4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed24) returned 1 [0106.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Guarda\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x628e878, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Guarda\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x3c [0106.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed28) returned 1 [0106.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Guarda\\Local Storage\\leveldb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\guarda\\local storage\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x628eda4 | out: lpFileInformation=0x628eda4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed24) returned 1 [0106.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Coinomi\\Coinomi\\wallets", nBufferLength=0x105, lpBuffer=0x628e878, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Coinomi\\Coinomi\\wallets", lpFilePart=0x0) returned 0x35 [0106.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed28) returned 1 [0106.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Coinomi\\Coinomi\\wallets" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\coinomi\\coinomi\\wallets"), fInfoLevelId=0x0, lpFileInformation=0x628eda4 | out: lpFileInformation=0x628eda4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed24) returned 1 [0106.066] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software", ulOptions=0x0, samDesired=0x20019, phkResult=0x628ed84 | out: phkResult=0x628ed84*=0x5c8) returned 0x0 [0106.067] RegOpenKeyExW (in: hKey=0x5c8, lpSubKey="Litecoin", ulOptions=0x0, samDesired=0x20019, phkResult=0x628ed84 | out: phkResult=0x628ed84*=0x0) returned 0x2 [0106.068] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software", ulOptions=0x0, samDesired=0x20019, phkResult=0x628ed84 | out: phkResult=0x628ed84*=0x5c4) returned 0x0 [0106.069] RegOpenKeyExW (in: hKey=0x5c4, lpSubKey="Dash", ulOptions=0x0, samDesired=0x20019, phkResult=0x628ed84 | out: phkResult=0x628ed84*=0x0) returned 0x2 [0106.069] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software", ulOptions=0x0, samDesired=0x20019, phkResult=0x628ed84 | out: phkResult=0x628ed84*=0x5e0) returned 0x0 [0106.069] RegOpenKeyExW (in: hKey=0x5e0, lpSubKey="Bitcoin", ulOptions=0x0, samDesired=0x20019, phkResult=0x628ed84 | out: phkResult=0x628ed84*=0x0) returned 0x2 [0106.070] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Wallets\\", nBufferLength=0x105, lpBuffer=0x628e8b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Wallets\\", lpFilePart=0x0) returned 0x6d [0106.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed5c) returned 1 [0106.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Wallets\\" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\wallets"), fInfoLevelId=0x0, lpFileInformation=0x628edd8 | out: lpFileInformation=0x628edd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cbb44de, ftCreationTime.dwHighDateTime=0x1d694ab, ftLastAccessTime.dwLowDateTime=0x3cbb44de, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x3cbb44de, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed58) returned 1 [0106.071] RemoveDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\Wallets\\" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\wallets")) returned 1 [0106.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Authy Desktop\\Local Storage\\leveldb\\", nBufferLength=0x105, lpBuffer=0x628e8bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Authy Desktop\\Local Storage\\leveldb\\", lpFilePart=0x0) returned 0x44 [0106.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed6c) returned 1 [0106.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Authy Desktop\\Local Storage\\leveldb\\" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\authy desktop\\local storage\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x628ede8 | out: lpFileInformation=0x628ede8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed68) returned 1 [0113.490] GetSystemMetrics (nIndex=76) returned 0 [0113.490] GetSystemMetrics (nIndex=77) returned 0 [0113.490] GetSystemMetrics (nIndex=78) returned 1440 [0113.490] GetSystemMetrics (nIndex=79) returned 900 [0113.490] GetSystemMetrics (nIndex=76) returned 0 [0113.490] GetSystemMetrics (nIndex=77) returned 0 [0113.490] GetSystemMetrics (nIndex=78) returned 1440 [0113.490] GetSystemMetrics (nIndex=79) returned 900 [0113.490] GetSystemMetrics (nIndex=76) returned 0 [0113.490] GetSystemMetrics (nIndex=77) returned 0 [0113.490] GetSystemMetrics (nIndex=78) returned 1440 [0113.490] GetSystemMetrics (nIndex=79) returned 900 [0113.490] GetSystemMetrics (nIndex=76) returned 0 [0113.490] GetSystemMetrics (nIndex=77) returned 0 [0113.490] GetSystemMetrics (nIndex=78) returned 1440 [0113.490] GetSystemMetrics (nIndex=79) returned 900 [0113.784] GdiplusStartup (in: token=0x5d214e8, input=0x628e2f0, output=0x628e340 | out: token=0x5d214e8, output=0x628e340) returned 0x0 [0113.829] GdipCreateBitmapFromScan0 (width=1440, height=900, stride=0, format=0x26200a, scan0=0x0, bitmap=0x628edf8) returned 0x0 [0115.064] GdipGetImagePixelFormat (image=0x5a51f08, format=0x628edfc) returned 0x0 [0115.065] GdipGetImageGraphicsContext (image=0x5a51f08, graphics=0x628ee08) returned 0x0 [0115.093] GdipGetImageWidth (image=0x5a51f08, width=0x628edfc) returned 0x0 [0115.093] GdipGetImageHeight (image=0x5a51f08, height=0x628edfc) returned 0x0 [0117.026] GetDC (hWnd=0x0) returned 0x10105d6 [0117.032] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0117.033] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0117.033] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0xffffffffbe050509 [0117.033] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0117.035] GdipGetDC (graphics=0x5a52408, hdc=0x628ed90) returned 0x0 [0118.024] BitBlt (hdc=0x72010535, x=0, y=0, cx=1440, cy=900, hdcSrc=0x10105d6, x1=0, y1=0, rop=0xcc0020) returned 1 [0118.746] GdipReleaseDC (graphics=0x5a52408, hdc=0x72010535) returned 0x0 [0118.892] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0118.898] GdipGetImageEncodersSize (numEncoders=0x628edb0, size=0x628edac) returned 0x0 [0118.898] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x1461308 [0118.899] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x1461308 | out: encoders=0x1461308) returned 0x0 [0118.905] LocalFree (hMem=0x1461308) returned 0x0 [0118.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\screen.jpeg", nBufferLength=0x105, lpBuffer=0x628e7f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\screen.jpeg", lpFilePart=0x0) returned 0x70 [0118.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\screen.jpeg", nBufferLength=0x105, lpBuffer=0x628e7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\screen.jpeg", lpFilePart=0x0) returned 0x70 [0118.908] GdipSaveImageToFile (image=0x5a51f08, filename="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\screen.jpeg", clsidEncoder=0x628edc4*(Data1=0x557cf401, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0 [0119.467] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.497] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.539] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.671] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.733] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.793] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.888] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0120.013] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0120.068] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0120.184] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0120.308] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.331] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.369] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.396] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.400] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.405] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.432] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.434] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.435] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.437] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.441] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.448] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.516] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.595] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.524] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.707] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.821] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.897] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.020] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.115] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.222] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.306] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.410] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.476] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.880] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.009] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.115] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.393] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.485] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.599] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.651] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.757] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.878] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.089] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.184] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.293] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.398] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.470] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.563] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.640] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0128.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x628e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x48 [0128.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed64) returned 1 [0128.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x628ede0 | out: lpFileInformation=0x628ede0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52319328, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52319328, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1 [0129.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed60) returned 1 [0129.780] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x628e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x48 [0129.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ece4) returned 1 [0129.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x628ed60 | out: lpFileInformation=0x628ed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52319328, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52319328, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1 [0129.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ece0) returned 1 [0130.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x628e7c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x48 [0130.598] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x628e7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x48 [0130.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x628e780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x48 [0130.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ec34) returned 1 [0130.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x628ecb0 | out: lpFileInformation=0x628ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52319328, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52319328, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1 [0130.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ec30) returned 1 [0130.925] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x628e698, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x48 [0130.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ebdc) returned 1 [0130.925] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6d8 [0130.925] GetFileType (hFile=0x6d8) returned 0x1 [0130.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ebd8) returned 1 [0130.925] GetFileType (hFile=0x6d8) returned 0x1 [0130.950] GetFileSize (in: hFile=0x6d8, lpFileSizeHigh=0x628ed90 | out: lpFileSizeHigh=0x628ed90*=0x0) returned 0x4800 [0131.324] ReadFile (in: hFile=0x6d8, lpBuffer=0x3151a38, nNumberOfBytesToRead=0x4800, lpNumberOfBytesRead=0x628ecac, lpOverlapped=0x0 | out: lpBuffer=0x3151a38*, lpNumberOfBytesRead=0x628ecac*=0x4800, lpOverlapped=0x0) returned 1 [0131.457] CloseHandle (hObject=0x6d8) returned 1 [0131.464] VarDecCmp (pdecLeft=0x628edcc, pdecRight=0x628edbc) returned 0x2 [0131.870] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.870] VarDecRound (in: pdecIn=0x628e410, cDecimals=0, pdecResult=0x628e3f0 | out: pdecResult=0x628e3f0) returned 0x0 [0131.870] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.870] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.887] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.887] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.887] VarDecRound (in: pdecIn=0x628e410, cDecimals=0, pdecResult=0x628e3f0 | out: pdecResult=0x628e3f0) returned 0x0 [0131.888] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.888] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.888] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.888] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.888] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.888] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.888] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.888] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.888] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.888] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.888] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.888] VarDecRound (in: pdecIn=0x628e410, cDecimals=0, pdecResult=0x628e3f0 | out: pdecResult=0x628e3f0) returned 0x0 [0131.888] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.889] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.889] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.889] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.889] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.889] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.889] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.890] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.890] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.890] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.890] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.890] VarDecRound (in: pdecIn=0x628e410, cDecimals=0, pdecResult=0x628e3f0 | out: pdecResult=0x628e3f0) returned 0x0 [0131.890] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.890] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.890] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.890] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.890] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.890] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.890] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.890] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.890] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.890] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.890] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.890] VarDecRound (in: pdecIn=0x628e410, cDecimals=0, pdecResult=0x628e3f0 | out: pdecResult=0x628e3f0) returned 0x0 [0131.890] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.890] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.890] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.890] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecRound (in: pdecIn=0x628e410, cDecimals=0, pdecResult=0x628e3f0 | out: pdecResult=0x628e3f0) returned 0x0 [0131.891] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecRound (in: pdecIn=0x628e410, cDecimals=0, pdecResult=0x628e3f0 | out: pdecResult=0x628e3f0) returned 0x0 [0131.891] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.891] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.892] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.892] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.892] VarDecRound (in: pdecIn=0x628e410, cDecimals=0, pdecResult=0x628e3f0 | out: pdecResult=0x628e3f0) returned 0x0 [0131.892] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.892] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.892] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.892] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.892] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.892] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.892] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.892] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.892] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.892] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.892] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.892] VarDecRound (in: pdecIn=0x628e410, cDecimals=0, pdecResult=0x628e3f0 | out: pdecResult=0x628e3f0) returned 0x0 [0131.892] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.892] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.892] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.892] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.892] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0131.892] VarDecCmp (pdecLeft=0x628e430, pdecRight=0x628e420) returned 0x1 [0131.892] VarDecRound (in: pdecIn=0x628e3e8, cDecimals=0, pdecResult=0x628e3f8 | out: pdecResult=0x628e3f8) returned 0x0 [0132.687] VarDecRound (in: pdecIn=0x628e780, cDecimals=0, pdecResult=0x628e790 | out: pdecResult=0x628e790) returned 0x0 [0132.687] VarDecRound (in: pdecIn=0x628e780, cDecimals=0, pdecResult=0x628e790 | out: pdecResult=0x628e790) returned 0x0 [0132.835] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x628e8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0132.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed88) returned 1 [0132.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data"), fInfoLevelId=0x0, lpFileInformation=0x628ee04 | out: lpFileInformation=0x628ee04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x51b5f84c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0132.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed84) returned 1 [0132.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x628e85c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0132.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ed10) returned 1 [0132.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data"), fInfoLevelId=0x0, lpFileInformation=0x628ed8c | out: lpFileInformation=0x628ed8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x51b5f84c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0132.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ed0c) returned 1 [0132.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x628e7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0132.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x628e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0132.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x628e7ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0132.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ec60) returned 1 [0132.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data"), fInfoLevelId=0x0, lpFileInformation=0x628ecdc | out: lpFileInformation=0x628ecdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x51b5f84c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0132.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ec5c) returned 1 [0132.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x628e6c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0132.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x628ec08) returned 1 [0132.852] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x5e0 [0132.852] GetFileType (hFile=0x5e0) returned 0x1 [0132.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x628ec04) returned 1 [0132.853] GetFileType (hFile=0x5e0) returned 0x1 [0132.853] GetFileSize (in: hFile=0x5e0, lpFileSizeHigh=0x628edbc | out: lpFileSizeHigh=0x628edbc*=0x0) returned 0x10000 [0132.855] ReadFile (in: hFile=0x5e0, lpBuffer=0x311d4cc, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x628ecd8, lpOverlapped=0x0 | out: lpBuffer=0x311d4cc*, lpNumberOfBytesRead=0x628ecd8*=0x10000, lpOverlapped=0x0) returned 1 [0133.407] CloseHandle (hObject=0x5e0) returned 1 [0133.408] VarDecCmp (pdecLeft=0x628edf8, pdecRight=0x628ede8) returned 0x2 [0133.408] VarDecRound (in: pdecIn=0x628e414, cDecimals=0, pdecResult=0x628e424 | out: pdecResult=0x628e424) returned 0x0 [0133.408] VarDecRound (in: pdecIn=0x628e43c, cDecimals=0, pdecResult=0x628e41c | out: pdecResult=0x628e41c) returned 0x0 [0133.408] VarDecRound (in: pdecIn=0x628e414, cDecimals=0, pdecResult=0x628e424 | out: pdecResult=0x628e424) returned 0x0 [0133.408] VarDecCmp (pdecLeft=0x628e45c, pdecRight=0x628e44c) returned 0x1 [0133.408] VarDecMul (in: pdecLeft=0x628e45c, pdecRight=0x628e44c, pdecResult=0x628e41c | out: pdecResult=0x628e41c) returned 0x0 [0133.408] VarDecRound (in: pdecIn=0x628e43c, cDecimals=0, pdecResult=0x628e41c | out: pdecResult=0x628e41c) returned 0x0 [0133.408] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.408] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.408] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.408] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.408] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.408] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.409] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.409] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.409] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.424] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.424] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.424] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.424] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.424] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.424] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.424] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.424] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.424] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.424] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.424] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.424] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.424] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.424] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.424] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.424] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.424] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.424] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.424] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.424] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.424] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.425] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.425] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.425] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.425] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.425] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.425] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.425] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.425] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.425] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.425] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.425] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.425] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.425] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.425] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.425] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.425] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.425] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.425] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.425] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.425] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.425] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.425] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.426] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.426] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.426] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.426] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.427] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.427] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628e414, cDecimals=0, pdecResult=0x628e424 | out: pdecResult=0x628e424) returned 0x0 [0133.427] VarDecCmp (pdecLeft=0x628e45c, pdecRight=0x628e44c) returned 0x1 [0133.427] VarDecMul (in: pdecLeft=0x628e45c, pdecRight=0x628e44c, pdecResult=0x628e41c | out: pdecResult=0x628e41c) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628e43c, cDecimals=0, pdecResult=0x628e41c | out: pdecResult=0x628e41c) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.427] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.427] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.427] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.428] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.428] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.428] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.428] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.428] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.429] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.429] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.429] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.430] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.430] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecRound (in: pdecIn=0x628e414, cDecimals=0, pdecResult=0x628e424 | out: pdecResult=0x628e424) returned 0x0 [0133.430] VarDecMul (in: pdecLeft=0x628e45c, pdecRight=0x628e44c, pdecResult=0x628e41c | out: pdecResult=0x628e41c) returned 0x0 [0133.430] VarDecRound (in: pdecIn=0x628e43c, cDecimals=0, pdecResult=0x628e41c | out: pdecResult=0x628e41c) returned 0x0 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.430] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.430] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.430] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.431] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.431] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.431] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.431] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.431] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.431] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.431] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.431] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.431] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.431] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.431] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.431] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.431] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.431] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.431] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.431] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.431] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.431] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.441] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.441] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.442] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.442] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.442] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.442] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.442] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.443] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.443] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.443] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.443] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.443] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.444] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x2 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecRound (in: pdecIn=0x628dac8, cDecimals=0, pdecResult=0x628daa8 | out: pdecResult=0x628daa8) returned 0x0 [0133.444] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.444] VarDecCmp (pdecLeft=0x628dae8, pdecRight=0x628dad8) returned 0x1 [0133.444] VarDecRound (in: pdecIn=0x628daa0, cDecimals=0, pdecResult=0x628dab0 | out: pdecResult=0x628dab0) returned 0x0 [0133.445] VarDecRound (in: pdecIn=0x628e7ac, cDecimals=0, pdecResult=0x628e7bc | out: pdecResult=0x628e7bc) returned 0x0 [0133.445] VarDecRound (in: pdecIn=0x628e7ac, cDecimals=0, pdecResult=0x628e7bc | out: pdecResult=0x628e7bc) returned 0x0 [0133.446] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0133.578] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0133.704] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0135.050] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0135.607] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0135.705] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0135.784] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0135.887] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0135.982] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.123] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.510] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.769] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0137.067] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0137.458] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0137.795] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0138.450] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.126] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.304] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.606] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.749] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.920] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0140.070] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0140.758] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0141.177] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0141.476] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.247] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.357] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.481] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.652] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.778] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.892] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.000] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.262] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.465] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.559] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.652] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.699] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.746] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0163.310] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0164.112] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0164.323] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0164.769] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 Thread: id = 31 os_tid = 0xdfc [0108.400] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0108.401] CoGetContextToken (in: pToken=0x652f694 | out: pToken=0x652f694) returned 0x0 [0108.401] CObjectContext::QueryInterface () returned 0x0 [0108.401] IComThreadingInfo:GetCurrentThreadType (in: This=0x13dcc0c, pThreadType=0x652f6e4 | out: pThreadType=0x652f6e4*=0) returned 0x0 [0108.401] IUnknown:Release (This=0x13dcc0c) returned 0x1 [0108.401] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0108.401] CoUninitialize () [0108.401] RoInitialize () returned 0x1 [0108.401] RoUninitialize () returned 0x0 [0108.427] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", nBufferLength=0x105, lpBuffer=0x652ec2c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", lpFilePart=0x0) returned 0x3e [0108.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652f0dc) returned 1 [0108.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\discord\\local storage\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x652f158 | out: lpFileInformation=0x652f158*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0108.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652f0d8) returned 1 [0108.558] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x652ea2c | out: lpLuid=0x652ea2c*(LowPart=0x14, HighPart=0)) returned 1 [0108.569] GetCurrentProcess () returned 0xffffffff [0108.569] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x652ea28 | out: TokenHandle=0x652ea28*=0x640) returned 1 [0108.570] AdjustTokenPrivileges (in: TokenHandle=0x640, DisableAllPrivileges=0, NewState=0x3098ce0*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0108.570] CloseHandle (hObject=0x640) returned 1 [0110.043] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3fc98e8, Length=0x20000, ResultLength=0x652f114 | out: SystemInformation=0x3fc98e8, ResultLength=0x652f114*=0x250b8) returned 0xc0000004 [0110.068] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3fe9908, Length=0x278b8, ResultLength=0x652f114 | out: SystemInformation=0x3fe9908, ResultLength=0x652f114*=0x1aea8) returned 0x0 [0110.312] CoTaskMemAlloc (cb=0x20c) returned 0x1444738 [0110.312] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x1444738 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x0 [0110.312] CoTaskMemFree (pv=0x1444738) [0110.312] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x652d3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0110.315] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\.purple\\accounts.xml", nBufferLength=0x105, lpBuffer=0x652ec3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\.purple\\accounts.xml", lpFilePart=0x0) returned 0x34 [0110.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652f0f0) returned 1 [0110.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\.purple\\accounts.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\.purple\\accounts.xml"), fInfoLevelId=0x0, lpFileInformation=0x652f16c | out: lpFileInformation=0x652f16c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0110.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652f0ec) returned 1 [0110.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Psi+\\profiles\\default\\", nBufferLength=0x105, lpBuffer=0x652ec20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Psi+\\profiles\\default\\", lpFilePart=0x0) returned 0x36 [0110.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652f138) returned 1 [0110.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Psi+\\profiles\\default\\", nBufferLength=0x105, lpBuffer=0x652ebec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Psi+\\profiles\\default\\", lpFilePart=0x0) returned 0x36 [0110.329] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Psi+\\profiles\\default\\*", lpFindFileData=0x652ee60 | out: lpFindFileData=0x652ee60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0110.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652f0fc) returned 1 [0110.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Psi\\profiles\\default\\", nBufferLength=0x105, lpBuffer=0x652ec20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Psi\\profiles\\default\\", lpFilePart=0x0) returned 0x35 [0110.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652f138) returned 1 [0110.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Psi\\profiles\\default\\", nBufferLength=0x105, lpBuffer=0x652ebec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Psi\\profiles\\default\\", lpFilePart=0x0) returned 0x35 [0110.336] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Psi\\profiles\\default\\*", lpFindFileData=0x652ee60 | out: lpFindFileData=0x652ee60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0110.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652f0fc) returned 1 [0110.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Skype for Desktop", nBufferLength=0x105, lpBuffer=0x652ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Skype for Desktop", lpFilePart=0x0) returned 0x3b [0110.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652f0d8) returned 1 [0110.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Skype for Desktop" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\skype for desktop"), fInfoLevelId=0x0, lpFileInformation=0x652f154 | out: lpFileInformation=0x652f154*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0110.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652f0d4) returned 1 [0110.345] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0110.488] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0110.658] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0110.843] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0110.918] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.001] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.057] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.120] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.260] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.322] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.364] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0111.730] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.326] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.347] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.349] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.359] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.365] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.367] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.372] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0112.973] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.002] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.035] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.418] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.510] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.571] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.639] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.663] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.742] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.753] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.806] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.831] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.535] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.805] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.868] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.888] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.893] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.898] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.903] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.906] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.908] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.910] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.916] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.918] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.924] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.926] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.928] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.933] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.941] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.943] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.949] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.143] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x652eb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x38 [0129.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652efe0) returned 1 [0129.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x652f05c | out: lpFileInformation=0x652f05c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0129.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652efdc) returned 1 [0129.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652f060) returned 1 [0129.312] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x652eb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x38 [0129.312] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x652ed88 | out: lpFindFileData=0x652ed88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1436f78 [0129.312] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x652ed94 | out: lpFindFileData=0x652ed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.312] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x652ed94 | out: lpFindFileData=0x652ed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6236fa1e, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0x6236fa1e, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 1 [0129.312] FindNextFileW (in: hFindFile=0x1436f78, lpFindFileData=0x652ed94 | out: lpFindFileData=0x652ed94*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.313] FindClose (in: hFindFile=0x1436f78 | out: hFindFile=0x1436f78) returned 1 [0129.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652f01c) returned 1 [0129.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652f028) returned 1 [0129.313] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", nBufferLength=0x105, lpBuffer=0x652eb38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", lpFilePart=0x0) returned 0x55 [0129.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652efec) returned 1 [0129.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\logins.json"), fInfoLevelId=0x0, lpFileInformation=0x652f068 | out: lpFileInformation=0x652f068*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0129.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652efe8) returned 1 [0129.316] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db", nBufferLength=0x105, lpBuffer=0x652eb38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db", lpFilePart=0x0) returned 0x51 [0129.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652efec) returned 1 [0129.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key4.db"), fInfoLevelId=0x0, lpFileInformation=0x652f068 | out: lpFileInformation=0x652f068*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0129.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652efe8) returned 1 [0129.317] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.SQLiteHandler", nBufferLength=0x105, lpBuffer=0x652eb38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.SQLiteHandler", lpFilePart=0x0) returned 0x5e [0129.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652efec) returned 1 [0129.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.SQLiteHandler" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\places.sqlitehandler"), fInfoLevelId=0x0, lpFileInformation=0x652f068 | out: lpFileInformation=0x652f068*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0129.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652efe8) returned 1 [0129.522] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x652ec44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x45 [0129.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652f0f8) returned 1 [0129.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x652f174 | out: lpFileInformation=0x652f174*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295d523, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295d523, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa98218f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652f0f4) returned 1 [0129.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x652ebc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x45 [0129.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652f074) returned 1 [0129.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x652f0f0 | out: lpFileInformation=0x652f0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295d523, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295d523, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa98218f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652f070) returned 1 [0130.578] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x652eb54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x45 [0130.699] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x652eb34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x45 [0130.922] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x652eb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x45 [0130.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652efc4) returned 1 [0130.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x652f040 | out: lpFileInformation=0x652f040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295d523, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295d523, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa98218f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0130.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652efc0) returned 1 [0131.294] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x652ea28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x45 [0131.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x652ef6c) returned 1 [0131.294] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0131.294] GetFileType (hFile=0x6e0) returned 0x1 [0131.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x652ef68) returned 1 [0131.294] GetFileType (hFile=0x6e0) returned 0x1 [0131.294] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x652f120 | out: lpFileSizeHigh=0x652f120*=0x0) returned 0x7000 [0131.443] ReadFile (in: hFile=0x6e0, lpBuffer=0x3171bf8, nNumberOfBytesToRead=0x7000, lpNumberOfBytesRead=0x652f03c, lpOverlapped=0x0 | out: lpBuffer=0x3171bf8*, lpNumberOfBytesRead=0x652f03c*=0x7000, lpOverlapped=0x0) returned 1 [0131.584] CloseHandle (hObject=0x6e0) returned 1 [0131.585] VarDecCmp (pdecLeft=0x652f15c, pdecRight=0x652f14c) returned 0x2 [0131.946] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.946] VarDecRound (in: pdecIn=0x652e7a0, cDecimals=0, pdecResult=0x652e780 | out: pdecResult=0x652e780) returned 0x0 [0131.946] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.946] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.946] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.946] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.946] VarDecRound (in: pdecIn=0x652e7a0, cDecimals=0, pdecResult=0x652e780 | out: pdecResult=0x652e780) returned 0x0 [0131.946] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.946] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.946] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.946] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.946] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.946] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.946] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.946] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e7a0, cDecimals=0, pdecResult=0x652e780 | out: pdecResult=0x652e780) returned 0x0 [0131.947] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e7a0, cDecimals=0, pdecResult=0x652e780 | out: pdecResult=0x652e780) returned 0x0 [0131.947] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e7a0, cDecimals=0, pdecResult=0x652e780 | out: pdecResult=0x652e780) returned 0x0 [0131.947] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.947] VarDecRound (in: pdecIn=0x652e7a0, cDecimals=0, pdecResult=0x652e780 | out: pdecResult=0x652e780) returned 0x0 [0131.948] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.948] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.948] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.948] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.948] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.948] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.948] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.948] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.948] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.948] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.948] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.948] VarDecRound (in: pdecIn=0x652e7a0, cDecimals=0, pdecResult=0x652e780 | out: pdecResult=0x652e780) returned 0x0 [0131.948] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.948] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.948] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.948] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.948] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0131.948] VarDecCmp (pdecLeft=0x652e7c0, pdecRight=0x652e7b0) returned 0x1 [0131.948] VarDecRound (in: pdecIn=0x652e778, cDecimals=0, pdecResult=0x652e788 | out: pdecResult=0x652e788) returned 0x0 [0132.694] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.694] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.694] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.694] VarDecCmp (pdecLeft=0x652eb58, pdecRight=0x652eb48) returned 0x2 [0132.694] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.694] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.694] VarDecRound (in: pdecIn=0x652eb38, cDecimals=0, pdecResult=0x652eb18 | out: pdecResult=0x652eb18) returned 0x0 [0132.694] VarDecRound (in: pdecIn=0x652eb38, cDecimals=0, pdecResult=0x652eb18 | out: pdecResult=0x652eb18) returned 0x0 [0132.694] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.697] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.697] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.697] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.697] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.697] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.698] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.698] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.698] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.698] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.698] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.698] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.698] VarDecCmp (pdecLeft=0x652eb58, pdecRight=0x652eb48) returned 0x1 [0132.698] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0132.698] VarDecRound (in: pdecIn=0x652eb10, cDecimals=0, pdecResult=0x652eb20 | out: pdecResult=0x652eb20) returned 0x0 [0135.083] CryptUnprotectData (in: pDataIn=0x652f114, ppszDataDescr=0x0, pOptionalEntropy=0x652f10c, pvReserved=0x0, pPromptStruct=0x0, dwFlags=0x1, pDataOut=0x652f11c | out: ppszDataDescr=0x0, pDataOut=0x652f11c) returned 1 [0135.614] LocalFree (hMem=0x13e97f8) returned 0x0 [0135.617] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0135.709] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0135.786] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0135.936] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.030] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.404] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.567] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.788] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0137.137] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0137.709] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0138.382] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.098] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.301] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.461] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.707] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.864] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0140.067] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.891] CoUninitialize () Thread: id = 32 os_tid = 0xdf4 Thread: id = 34 os_tid = 0xac8 Thread: id = 36 os_tid = 0x5b8 Thread: id = 162 os_tid = 0xff0 Thread: id = 168 os_tid = 0x728 Thread: id = 172 os_tid = 0x1330 Thread: id = 177 os_tid = 0x133c Thread: id = 203 os_tid = 0x123c Process: id = "4" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x1c73e000" os_pid = "0x67c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x760" cmd_line = "\"cmd.exe\" /C chcp 65001 && netsh wlan show profile | findstr All" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 22 os_tid = 0xd50 [0111.118] GetModuleHandleA (lpModuleName=0x0) returned 0x800000 [0111.118] __set_app_type (_Type=0x1) [0111.118] __p__fmode () returned 0x776f3c14 [0111.118] __p__commode () returned 0x776f49ec [0111.118] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x816fd0) returned 0x0 [0111.118] __getmainargs (in: _Argc=0x82d1a4, _Argv=0x82d1a8, _Env=0x82d1ac, _DoWildCard=0, _StartInfo=0x82d1b8 | out: _Argc=0x82d1a4, _Argv=0x82d1a8, _Env=0x82d1ac) returned 0 [0111.118] _onexit (_Func=0x818030) returned 0x818030 [0111.118] _onexit (_Func=0x818040) returned 0x818040 [0111.119] _onexit (_Func=0x818050) returned 0x818050 [0111.119] _onexit (_Func=0x818060) returned 0x818060 [0111.119] _onexit (_Func=0x818070) returned 0x818070 [0111.121] _onexit (_Func=0x818080) returned 0x818080 [0111.121] GetCurrentThreadId () returned 0xd50 [0111.121] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xd50) returned 0xb4 [0111.121] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0111.121] GetProcAddress (hModule=0x772d0000, lpProcName="SetThreadUILanguage") returned 0x772e4f70 [0111.121] SetThreadUILanguage (LangId=0x0) returned 0x2a0409 [0111.323] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0111.323] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x4ff9e4 | out: phkResult=0x4ff9e4*=0x0) returned 0x2 [0111.323] VirtualQuery (in: lpAddress=0x4ff9ef, lpBuffer=0x4ff99c, dwLength=0x1c | out: lpBuffer=0x4ff99c*(BaseAddress=0x4ff000, AllocationBase=0x400000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0111.323] VirtualQuery (in: lpAddress=0x400000, lpBuffer=0x4ff99c, dwLength=0x1c | out: lpBuffer=0x4ff99c*(BaseAddress=0x400000, AllocationBase=0x400000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0111.323] VirtualQuery (in: lpAddress=0x401000, lpBuffer=0x4ff99c, dwLength=0x1c | out: lpBuffer=0x4ff99c*(BaseAddress=0x401000, AllocationBase=0x400000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0111.323] VirtualQuery (in: lpAddress=0x403000, lpBuffer=0x4ff99c, dwLength=0x1c | out: lpBuffer=0x4ff99c*(BaseAddress=0x403000, AllocationBase=0x400000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0111.323] VirtualQuery (in: lpAddress=0x500000, lpBuffer=0x4ff99c, dwLength=0x1c | out: lpBuffer=0x4ff99c*(BaseAddress=0x500000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x30000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0111.323] GetConsoleOutputCP () returned 0x1b5 [0111.733] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x833850 | out: lpCPInfo=0x833850) returned 1 [0112.321] SetConsoleCtrlHandler (HandlerRoutine=0x827260, Add=1) returned 1 [0112.321] _get_osfhandle (_FileHandle=1) returned 0x504 [0112.321] GetConsoleMode (in: hConsoleHandle=0x504, lpMode=0x83388c | out: lpMode=0x83388c) returned 0 [0112.321] _get_osfhandle (_FileHandle=0) returned 0x8c [0112.321] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x833888 | out: lpMode=0x833888) returned 1 [0112.347] _get_osfhandle (_FileHandle=1) returned 0x504 [0112.347] SetConsoleMode (hConsoleHandle=0x504, dwMode=0x0) returned 0 [0112.347] _get_osfhandle (_FileHandle=1) returned 0x504 [0112.347] GetConsoleMode (in: hConsoleHandle=0x504, lpMode=0x833890 | out: lpMode=0x833890) returned 0 [0112.347] _get_osfhandle (_FileHandle=0) returned 0x8c [0112.347] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x833894 | out: lpMode=0x833894) returned 1 [0112.359] _get_osfhandle (_FileHandle=0) returned 0x8c [0112.359] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0112.367] GetEnvironmentStringsW () returned 0x704bb8* [0112.367] GetProcessHeap () returned 0x700000 [0112.367] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xaca) returned 0x705690 [0112.367] FreeEnvironmentStringsA (penv="A") returned 1 [0112.367] GetProcessHeap () returned 0x700000 [0112.367] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x4) returned 0x704698 [0112.367] GetEnvironmentStringsW () returned 0x704bb8* [0112.367] GetProcessHeap () returned 0x700000 [0112.367] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xaca) returned 0x706168 [0112.368] FreeEnvironmentStringsA (penv="A") returned 1 [0112.368] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x4fe940 | out: phkResult=0x4fe940*=0xc4) returned 0x0 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x0, lpData=0x4fe94c*=0x0, lpcbData=0x4fe944*=0x1000) returned 0x2 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x4, lpData=0x4fe94c*=0x1, lpcbData=0x4fe944*=0x4) returned 0x0 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x0, lpData=0x4fe94c*=0x1, lpcbData=0x4fe944*=0x1000) returned 0x2 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x4, lpData=0x4fe94c*=0x0, lpcbData=0x4fe944*=0x4) returned 0x0 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x4, lpData=0x4fe94c*=0x40, lpcbData=0x4fe944*=0x4) returned 0x0 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x4, lpData=0x4fe94c*=0x40, lpcbData=0x4fe944*=0x4) returned 0x0 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="AutoRun", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x0, lpData=0x4fe94c*=0x40, lpcbData=0x4fe944*=0x1000) returned 0x2 [0112.368] RegCloseKey (hKey=0xc4) returned 0x0 [0112.368] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x4fe940 | out: phkResult=0x4fe940*=0xc4) returned 0x0 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x0, lpData=0x4fe94c*=0x40, lpcbData=0x4fe944*=0x1000) returned 0x2 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x4, lpData=0x4fe94c*=0x1, lpcbData=0x4fe944*=0x4) returned 0x0 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x0, lpData=0x4fe94c*=0x1, lpcbData=0x4fe944*=0x1000) returned 0x2 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x4, lpData=0x4fe94c*=0x0, lpcbData=0x4fe944*=0x4) returned 0x0 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x4, lpData=0x4fe94c*=0x9, lpcbData=0x4fe944*=0x4) returned 0x0 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x4, lpData=0x4fe94c*=0x9, lpcbData=0x4fe944*=0x4) returned 0x0 [0112.368] RegQueryValueExW (in: hKey=0xc4, lpValueName="AutoRun", lpReserved=0x0, lpType=0x4fe948, lpData=0x4fe94c, lpcbData=0x4fe944*=0x1000 | out: lpType=0x4fe948*=0x0, lpData=0x4fe94c*=0x9, lpcbData=0x4fe944*=0x1000) returned 0x2 [0112.368] RegCloseKey (hKey=0xc4) returned 0x0 [0112.369] time (in: timer=0x0 | out: timer=0x0) returned 0x5f705255 [0112.369] srand (_Seed=0x5f705255) [0112.369] GetCommandLineW () returned="\"cmd.exe\" /C chcp 65001 && netsh wlan show profile | findstr All" [0112.369] malloc (_Size=0x4000) returned 0x5321f0 [0112.369] GetCommandLineW () returned="\"cmd.exe\" /C chcp 65001 && netsh wlan show profile | findstr All" [0112.369] malloc (_Size=0xffce) returned 0x2960048 [0112.370] ??_V@YAXPAX@Z () returned 0x4ff924 [0112.370] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2960048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0112.949] malloc (_Size=0xffce) returned 0x2970020 [0112.950] ??_V@YAXPAX@Z () returned 0x4ff6f8 [0112.951] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2970020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0112.951] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0112.951] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0112.951] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0112.951] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0112.951] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0112.951] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0112.951] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0112.951] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0112.951] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0112.951] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0112.951] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0112.952] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0112.952] GetProcessHeap () returned 0x700000 [0112.952] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x705690) returned 1 [0112.952] GetEnvironmentStringsW () returned 0x704bb8* [0112.952] GetProcessHeap () returned 0x700000 [0112.952] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xae2) returned 0x707730 [0112.952] FreeEnvironmentStringsA (penv="A") returned 1 [0112.952] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0112.952] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0112.952] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0112.952] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0112.952] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0112.952] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0112.952] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0112.953] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0112.953] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0112.953] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0112.953] malloc (_Size=0xffce) returned 0x297fff8 [0112.953] ??_V@YAXPAX@Z () returned 0x4ff490 [0112.953] GetProcessHeap () returned 0x700000 [0112.953] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x38) returned 0x700ae0 [0112.953] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x297fff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0112.954] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x297fff8, lpFilePart=0x4ff4dc | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x4ff4dc*="Desktop") returned 0x17 [0112.954] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0112.954] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x4ff260 | out: lpFindFileData=0x4ff260*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x700b20 [0112.955] FindClose (in: hFindFile=0x700b20 | out: hFindFile=0x700b20) returned 1 [0112.955] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x4ff260 | out: lpFindFileData=0x4ff260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x700b20 [0112.955] FindClose (in: hFindFile=0x700b20 | out: hFindFile=0x700b20) returned 1 [0112.955] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x4ff260 | out: lpFindFileData=0x4ff260*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1381d081, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x1381d081, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x700b20 [0112.955] FindClose (in: hFindFile=0x700b20 | out: hFindFile=0x700b20) returned 1 [0112.955] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0112.955] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0112.955] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0112.955] GetProcessHeap () returned 0x700000 [0112.956] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x707730) returned 1 [0112.956] GetEnvironmentStringsW () returned 0x704bb8* [0112.956] GetProcessHeap () returned 0x700000 [0112.956] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xb1a) returned 0x706c40 [0112.956] FreeEnvironmentStringsA (penv="=") returned 1 [0112.956] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2960048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0112.956] GetProcessHeap () returned 0x700000 [0112.956] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x700ae0) returned 1 [0112.956] ??_V@YAXPAX@Z () returned 0x1 [0112.956] ??_V@YAXPAX@Z () returned 0x1 [0112.956] GetProcessHeap () returned 0x700000 [0112.956] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x400e) returned 0x708d48 [0112.956] GetProcessHeap () returned 0x700000 [0112.956] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x74) returned 0x707768 [0112.957] GetProcessHeap () returned 0x700000 [0112.957] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x708d48) returned 1 [0112.957] GetConsoleOutputCP () returned 0x1b5 [0113.028] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x833850 | out: lpCPInfo=0x833850) returned 1 [0113.028] GetUserDefaultLCID () returned 0x409 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x82f82c, cchData=8 | out: lpLCData=":") returned 2 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x4ff84c, cchData=128 | out: lpLCData="0") returned 2 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x4ff84c, cchData=128 | out: lpLCData="0") returned 2 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x4ff84c, cchData=128 | out: lpLCData="1") returned 2 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x82f81c, cchData=8 | out: lpLCData="/") returned 2 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x82f7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x82f778, cchData=32 | out: lpLCData="Tue") returned 4 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x82f738, cchData=32 | out: lpLCData="Wed") returned 4 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x82f6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x82f6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x82f678, cchData=32 | out: lpLCData="Sat") returned 4 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x82f638, cchData=32 | out: lpLCData="Sun") returned 4 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x82f80c, cchData=8 | out: lpLCData=".") returned 2 [0113.029] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x82f7f8, cchData=8 | out: lpLCData=",") returned 2 [0113.029] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0113.031] GetProcessHeap () returned 0x700000 [0113.031] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x0, Size=0x20c) returned 0x707830 [0113.031] GetConsoleTitleW (in: lpConsoleTitle=0x707830, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\SYSTEM32\\cmd.exe") returned 0x1c [0113.501] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0113.501] GetProcAddress (hModule=0x772d0000, lpProcName="CopyFileExW") returned 0x772e4330 [0113.501] GetProcAddress (hModule=0x772d0000, lpProcName="IsDebuggerPresent") returned 0x772e5930 [0113.501] GetProcAddress (hModule=0x772d0000, lpProcName="SetConsoleInputExeNameW") returned 0x74d009d0 [0113.501] ??_V@YAXPAX@Z () returned 0x1 [0113.502] GetProcessHeap () returned 0x700000 [0113.502] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x400a) returned 0x708d48 [0113.502] GetProcessHeap () returned 0x700000 [0113.502] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x708d48) returned 1 [0113.503] _wcsicmp (_String1="chcp", _String2=")") returned 58 [0113.503] _wcsicmp (_String1="FOR", _String2="chcp") returned 3 [0113.503] _wcsicmp (_String1="FOR/?", _String2="chcp") returned 3 [0113.503] _wcsicmp (_String1="IF", _String2="chcp") returned 6 [0113.503] _wcsicmp (_String1="IF/?", _String2="chcp") returned 6 [0113.503] _wcsicmp (_String1="REM", _String2="chcp") returned 15 [0113.503] _wcsicmp (_String1="REM/?", _String2="chcp") returned 15 [0113.503] GetProcessHeap () returned 0x700000 [0113.503] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x58) returned 0x707a48 [0113.503] GetProcessHeap () returned 0x700000 [0113.503] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x12) returned 0x707aa8 [0113.504] GetProcessHeap () returned 0x700000 [0113.504] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x18) returned 0x707ac8 [0113.504] GetProcessHeap () returned 0x700000 [0113.504] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x58) returned 0x707ae8 [0113.505] _wcsicmp (_String1="FOR", _String2="netsh") returned -8 [0113.505] _wcsicmp (_String1="FOR/?", _String2="netsh") returned -8 [0113.505] _wcsicmp (_String1="IF", _String2="netsh") returned -5 [0113.505] _wcsicmp (_String1="IF/?", _String2="netsh") returned -5 [0113.505] _wcsicmp (_String1="REM", _String2="netsh") returned 4 [0113.505] _wcsicmp (_String1="REM/?", _String2="netsh") returned 4 [0113.505] GetProcessHeap () returned 0x700000 [0113.505] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x58) returned 0x707b48 [0113.505] GetProcessHeap () returned 0x700000 [0113.505] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x14) returned 0x707ba8 [0113.506] GetProcessHeap () returned 0x700000 [0113.506] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x30) returned 0x707bc8 [0113.506] GetProcessHeap () returned 0x700000 [0113.506] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x58) returned 0x707c00 [0113.507] _wcsicmp (_String1="FOR", _String2="findstr") returned 6 [0113.507] _wcsicmp (_String1="FOR/?", _String2="findstr") returned 6 [0113.507] _wcsicmp (_String1="IF", _String2="findstr") returned 3 [0113.507] _wcsicmp (_String1="IF/?", _String2="findstr") returned 3 [0113.507] _wcsicmp (_String1="REM", _String2="findstr") returned 12 [0113.507] _wcsicmp (_String1="REM/?", _String2="findstr") returned 12 [0113.507] GetProcessHeap () returned 0x700000 [0113.507] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x58) returned 0x707c60 [0113.507] GetProcessHeap () returned 0x700000 [0113.508] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x18) returned 0x707cc0 [0113.508] GetProcessHeap () returned 0x700000 [0113.508] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x12) returned 0x707ce0 [0113.509] GetConsoleTitleW (in: lpConsoleTitle=0x4ff6e0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\SYSTEM32\\cmd.exe") returned 0x1c [0113.572] malloc (_Size=0xffce) returned 0x2972650 [0113.573] ??_V@YAXPAX@Z () returned 0x4ff46c [0113.574] malloc (_Size=0xffce) returned 0x2982628 [0113.574] ??_V@YAXPAX@Z () returned 0x4ff224 [0113.575] _wcsicmp (_String1="chcp", _String2="DIR") returned -1 [0113.575] _wcsicmp (_String1="chcp", _String2="ERASE") returned -2 [0113.575] _wcsicmp (_String1="chcp", _String2="DEL") returned -1 [0113.575] _wcsicmp (_String1="chcp", _String2="TYPE") returned -17 [0113.575] _wcsicmp (_String1="chcp", _String2="COPY") returned -7 [0113.575] _wcsicmp (_String1="chcp", _String2="CD") returned 4 [0113.575] _wcsicmp (_String1="chcp", _String2="CHDIR") returned -1 [0113.575] _wcsicmp (_String1="chcp", _String2="RENAME") returned -15 [0113.575] _wcsicmp (_String1="chcp", _String2="REN") returned -15 [0113.575] _wcsicmp (_String1="chcp", _String2="ECHO") returned -2 [0113.575] _wcsicmp (_String1="chcp", _String2="SET") returned -16 [0113.575] _wcsicmp (_String1="chcp", _String2="PAUSE") returned -13 [0113.575] _wcsicmp (_String1="chcp", _String2="DATE") returned -1 [0113.575] _wcsicmp (_String1="chcp", _String2="TIME") returned -17 [0113.575] _wcsicmp (_String1="chcp", _String2="PROMPT") returned -13 [0113.575] _wcsicmp (_String1="chcp", _String2="MD") returned -10 [0113.575] _wcsicmp (_String1="chcp", _String2="MKDIR") returned -10 [0113.575] _wcsicmp (_String1="chcp", _String2="RD") returned -15 [0113.575] _wcsicmp (_String1="chcp", _String2="RMDIR") returned -15 [0113.575] _wcsicmp (_String1="chcp", _String2="PATH") returned -13 [0113.575] _wcsicmp (_String1="chcp", _String2="GOTO") returned -4 [0113.576] _wcsicmp (_String1="chcp", _String2="SHIFT") returned -16 [0113.576] _wcsicmp (_String1="chcp", _String2="CLS") returned -4 [0113.576] _wcsicmp (_String1="chcp", _String2="CALL") returned 7 [0113.576] _wcsicmp (_String1="chcp", _String2="VERIFY") returned -19 [0113.576] _wcsicmp (_String1="chcp", _String2="VER") returned -19 [0113.576] _wcsicmp (_String1="chcp", _String2="VOL") returned -19 [0113.576] _wcsicmp (_String1="chcp", _String2="EXIT") returned -2 [0113.576] _wcsicmp (_String1="chcp", _String2="SETLOCAL") returned -16 [0113.576] _wcsicmp (_String1="chcp", _String2="ENDLOCAL") returned -2 [0113.576] _wcsicmp (_String1="chcp", _String2="TITLE") returned -17 [0113.576] _wcsicmp (_String1="chcp", _String2="START") returned -16 [0113.576] _wcsicmp (_String1="chcp", _String2="DPATH") returned -1 [0113.576] _wcsicmp (_String1="chcp", _String2="KEYS") returned -8 [0113.576] _wcsicmp (_String1="chcp", _String2="MOVE") returned -10 [0113.576] _wcsicmp (_String1="chcp", _String2="PUSHD") returned -13 [0113.576] _wcsicmp (_String1="chcp", _String2="POPD") returned -13 [0113.576] _wcsicmp (_String1="chcp", _String2="ASSOC") returned 2 [0113.576] _wcsicmp (_String1="chcp", _String2="FTYPE") returned -3 [0113.576] _wcsicmp (_String1="chcp", _String2="BREAK") returned 1 [0113.576] _wcsicmp (_String1="chcp", _String2="COLOR") returned -7 [0113.576] _wcsicmp (_String1="chcp", _String2="MKLINK") returned -10 [0113.576] _wcsicmp (_String1="chcp", _String2="DIR") returned -1 [0113.576] _wcsicmp (_String1="chcp", _String2="ERASE") returned -2 [0113.576] _wcsicmp (_String1="chcp", _String2="DEL") returned -1 [0113.576] _wcsicmp (_String1="chcp", _String2="TYPE") returned -17 [0113.576] _wcsicmp (_String1="chcp", _String2="COPY") returned -7 [0113.576] _wcsicmp (_String1="chcp", _String2="CD") returned 4 [0113.576] _wcsicmp (_String1="chcp", _String2="CHDIR") returned -1 [0113.577] _wcsicmp (_String1="chcp", _String2="RENAME") returned -15 [0113.577] _wcsicmp (_String1="chcp", _String2="REN") returned -15 [0113.577] _wcsicmp (_String1="chcp", _String2="ECHO") returned -2 [0113.577] _wcsicmp (_String1="chcp", _String2="SET") returned -16 [0113.577] _wcsicmp (_String1="chcp", _String2="PAUSE") returned -13 [0113.577] _wcsicmp (_String1="chcp", _String2="DATE") returned -1 [0113.577] _wcsicmp (_String1="chcp", _String2="TIME") returned -17 [0113.577] _wcsicmp (_String1="chcp", _String2="PROMPT") returned -13 [0113.577] _wcsicmp (_String1="chcp", _String2="MD") returned -10 [0113.577] _wcsicmp (_String1="chcp", _String2="MKDIR") returned -10 [0113.577] _wcsicmp (_String1="chcp", _String2="RD") returned -15 [0113.577] _wcsicmp (_String1="chcp", _String2="RMDIR") returned -15 [0113.577] _wcsicmp (_String1="chcp", _String2="PATH") returned -13 [0113.577] _wcsicmp (_String1="chcp", _String2="GOTO") returned -4 [0113.577] _wcsicmp (_String1="chcp", _String2="SHIFT") returned -16 [0113.577] _wcsicmp (_String1="chcp", _String2="CLS") returned -4 [0113.577] _wcsicmp (_String1="chcp", _String2="CALL") returned 7 [0113.577] _wcsicmp (_String1="chcp", _String2="VERIFY") returned -19 [0113.577] _wcsicmp (_String1="chcp", _String2="VER") returned -19 [0113.577] _wcsicmp (_String1="chcp", _String2="VOL") returned -19 [0113.577] _wcsicmp (_String1="chcp", _String2="EXIT") returned -2 [0113.577] _wcsicmp (_String1="chcp", _String2="SETLOCAL") returned -16 [0113.577] _wcsicmp (_String1="chcp", _String2="ENDLOCAL") returned -2 [0113.577] _wcsicmp (_String1="chcp", _String2="TITLE") returned -17 [0113.577] _wcsicmp (_String1="chcp", _String2="START") returned -16 [0113.577] _wcsicmp (_String1="chcp", _String2="DPATH") returned -1 [0113.577] _wcsicmp (_String1="chcp", _String2="KEYS") returned -8 [0113.577] _wcsicmp (_String1="chcp", _String2="MOVE") returned -10 [0113.578] _wcsicmp (_String1="chcp", _String2="PUSHD") returned -13 [0113.578] _wcsicmp (_String1="chcp", _String2="POPD") returned -13 [0113.578] _wcsicmp (_String1="chcp", _String2="ASSOC") returned 2 [0113.578] _wcsicmp (_String1="chcp", _String2="FTYPE") returned -3 [0113.578] _wcsicmp (_String1="chcp", _String2="BREAK") returned 1 [0113.578] _wcsicmp (_String1="chcp", _String2="COLOR") returned -7 [0113.578] _wcsicmp (_String1="chcp", _String2="MKLINK") returned -10 [0113.578] _wcsicmp (_String1="chcp", _String2="FOR") returned -3 [0113.578] _wcsicmp (_String1="chcp", _String2="IF") returned -6 [0113.578] _wcsicmp (_String1="chcp", _String2="REM") returned -15 [0113.578] ??_V@YAXPAX@Z () returned 0x1 [0113.578] GetProcessHeap () returned 0x700000 [0113.578] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xffd6) returned 0x708d48 [0113.579] GetProcessHeap () returned 0x700000 [0113.579] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x22) returned 0x707d00 [0113.579] _wcsnicmp (_String1="chcp", _String2="cmd ", _MaxCount=0x4) returned -5 [0113.579] malloc (_Size=0xffce) returned 0x2982628 [0113.579] ??_V@YAXPAX@Z () returned 0x4fefa4 [0113.579] GetProcessHeap () returned 0x700000 [0113.579] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x1ffa4) returned 0x718d28 [0113.581] SetErrorMode (uMode=0x0) returned 0x0 [0113.581] SetErrorMode (uMode=0x1) returned 0x0 [0113.581] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x718d30, lpFilePart=0x4fefc4 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x4fefc4*="Desktop") returned 0x17 [0113.581] SetErrorMode (uMode=0x0) returned 0x1 [0113.581] GetProcessHeap () returned 0x700000 [0113.581] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x718d28, Size=0x42) returned 0x718d28 [0113.581] GetProcessHeap () returned 0x700000 [0113.581] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x718d28) returned 0x42 [0113.581] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0113.581] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0113.583] GetProcessHeap () returned 0x700000 [0113.583] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x1b4) returned 0x707d30 [0113.583] GetProcessHeap () returned 0x700000 [0113.583] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x360) returned 0x700ae0 [0113.594] GetProcessHeap () returned 0x700000 [0113.594] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x700ae0, Size=0x1b6) returned 0x700ae0 [0113.595] GetProcessHeap () returned 0x700000 [0113.595] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x700ae0) returned 0x1b6 [0113.595] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0113.595] GetProcessHeap () returned 0x700000 [0113.595] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xe0) returned 0x707ef0 [0113.595] GetProcessHeap () returned 0x700000 [0113.595] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x707ef0, Size=0x76) returned 0x707ef0 [0113.595] GetProcessHeap () returned 0x700000 [0113.595] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x707ef0) returned 0x76 [0113.596] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0113.596] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\chcp.*", fInfoLevelId=0x1, lpFindFileData=0x4fed50, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4fed50) returned 0xffffffff [0113.596] GetLastError () returned 0x2 [0113.596] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0113.596] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\chcp.*", fInfoLevelId=0x1, lpFindFileData=0x4fed50, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4fed50) returned 0xffffffff [0113.660] GetLastError () returned 0x2 [0113.660] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0113.660] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\chcp.*", fInfoLevelId=0x1, lpFindFileData=0x4fed50, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4fed50) returned 0x707f70 [0113.660] GetProcessHeap () returned 0x700000 [0113.660] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x0, Size=0x14) returned 0x707fb0 [0113.660] FindClose (in: hFindFile=0x707f70 | out: hFindFile=0x707f70) returned 1 [0113.661] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\chcp.COM", fInfoLevelId=0x1, lpFindFileData=0x4fed50, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4fed50) returned 0x707f70 [0113.661] GetProcessHeap () returned 0x700000 [0113.661] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x707fb0, Size=0x4) returned 0x707fb0 [0113.661] FindClose (in: hFindFile=0x707f70 | out: hFindFile=0x707f70) returned 1 [0113.661] _wcsicmp (_String1=".COM", _String2=".BAT") returned 1 [0113.661] _wcsicmp (_String1=".COM", _String2=".CMD") returned 2 [0113.661] ??_V@YAXPAX@Z () returned 0x1 [0113.661] GetConsoleTitleW (in: lpConsoleTitle=0x4ff254, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\SYSTEM32\\cmd.exe") returned 0x1c [0113.747] InitializeProcThreadAttributeList (in: lpAttributeList=0x4ff180, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x4ff16c | out: lpAttributeList=0x4ff180, lpSize=0x4ff16c) returned 1 [0113.747] UpdateProcThreadAttribute (in: lpAttributeList=0x4ff180, dwFlags=0x0, Attribute=0x60001, lpValue=0x4ff168, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x4ff180, lpPreviousValue=0x0) returned 1 [0113.747] GetStartupInfoW (in: lpStartupInfo=0x4ff1b8 | out: lpStartupInfo=0x4ff1b8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\SYSTEM32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x8c, hStdOutput=0x504, hStdError=0x50c)) [0113.747] GetProcessHeap () returned 0x700000 [0113.747] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x18) returned 0x707f70 [0113.747] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0113.747] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0113.747] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0113.747] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0113.747] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0113.747] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0113.747] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0113.747] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0113.747] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0113.747] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0113.748] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0113.749] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0113.749] GetProcessHeap () returned 0x700000 [0113.749] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x707f70) returned 1 [0113.749] GetProcessHeap () returned 0x700000 [0113.749] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xa) returned 0x707f70 [0113.749] lstrcmpW (lpString1="\\chcp.com", lpString2="\\XCOPY.EXE") returned -1 [0113.750] _get_osfhandle (_FileHandle=1) returned 0x504 [0113.750] SetConsoleMode (hConsoleHandle=0x504, dwMode=0x0) returned 0 [0113.750] _get_osfhandle (_FileHandle=0) returned 0x8c [0113.750] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1 [0113.830] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\chcp.com", lpCommandLine="chcp 65001 ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x4ff108*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="chcp 65001 ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x4ff154 | out: lpCommandLine="chcp 65001 ", lpProcessInformation=0x4ff154*(hProcess=0xd8, hThread=0xd4, dwProcessId=0x648, dwThreadId=0xf0)) returned 1 [0114.552] CloseHandle (hObject=0xd4) returned 1 [0114.552] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0114.552] GetProcessHeap () returned 0x700000 [0114.552] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x706c40) returned 1 [0114.552] GetEnvironmentStringsW () returned 0x706c40* [0114.552] GetProcessHeap () returned 0x700000 [0114.552] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xb1a) returned 0x704bb8 [0114.552] FreeEnvironmentStringsA (penv="=") returned 1 [0114.552] WaitForSingleObject (hHandle=0xd8, dwMilliseconds=0xffffffff) returned 0x0 [0123.115] GetExitCodeProcess (in: hProcess=0xd8, lpExitCode=0x4ff0ec | out: lpExitCode=0x4ff0ec*=0x0) returned 1 [0123.116] CloseHandle (hObject=0xd8) returned 1 [0123.116] _vsnwprintf (in: _Buffer=0x4ff1d4, _BufferCount=0x13, _Format="%08X", _ArgList=0x4ff0f4 | out: _Buffer="00000000") returned 8 [0123.116] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0123.116] GetProcessHeap () returned 0x700000 [0123.116] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x704bb8) returned 1 [0123.116] GetEnvironmentStringsW () returned 0x704bb8* [0123.116] GetProcessHeap () returned 0x700000 [0123.116] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xb40) returned 0x7198c0 [0123.116] FreeEnvironmentStringsA (penv="=") returned 1 [0123.117] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0123.117] GetProcessHeap () returned 0x700000 [0123.117] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x7198c0) returned 1 [0123.117] GetEnvironmentStringsW () returned 0x704bb8* [0123.117] GetProcessHeap () returned 0x700000 [0123.117] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xb40) returned 0x7198c0 [0123.117] FreeEnvironmentStringsA (penv="=") returned 1 [0123.117] GetProcessHeap () returned 0x700000 [0123.117] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x707f70) returned 1 [0123.117] DeleteProcThreadAttributeList (in: lpAttributeList=0x4ff180 | out: lpAttributeList=0x4ff180) [0123.117] ??_V@YAXPAX@Z () returned 0x1 [0123.117] GetProcessHeap () returned 0x700000 [0123.117] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x30) returned 0x7080f0 [0123.117] _pipe (in: _PtHandles=0x7080f8, _PipeSize=0x0, _TextMode=32768 | out: _PtHandles=0x7080f8) returned 0 [0123.118] _dup (_FileHandle=1) returned 5 [0123.118] _dup2 (_FileHandleSrc=4, _FileHandleDst=1) returned 0 [0123.118] _close (_FileHandle=4) returned 0 [0123.118] malloc (_Size=0xffce) returned 0x2972650 [0123.118] ??_V@YAXPAX@Z () returned 0x4ff67c [0123.118] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0123.118] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0123.118] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0123.118] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0123.118] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0123.118] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0123.118] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0123.118] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0123.118] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0123.118] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0123.118] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0123.118] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0123.118] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0123.118] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0123.118] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0123.118] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0123.118] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0123.118] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0123.118] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0123.118] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0123.119] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0123.119] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0123.119] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0123.119] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0123.119] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0123.119] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0123.119] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0123.119] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0123.119] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0123.119] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0123.119] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0123.119] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0123.119] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0123.119] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0123.119] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0123.119] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0123.119] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0123.119] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0123.119] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0123.119] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0123.119] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0123.119] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0123.119] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0123.119] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0123.119] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0123.119] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0123.119] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0123.119] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0123.119] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0123.119] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0123.119] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0123.119] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0123.119] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0123.119] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0123.119] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0123.119] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0123.120] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0123.120] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0123.120] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0123.120] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0123.120] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0123.120] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0123.120] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0123.120] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0123.120] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0123.120] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0123.120] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0123.120] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0123.120] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0123.120] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0123.120] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0123.120] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0123.120] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0123.120] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0123.120] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0123.120] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0123.120] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0123.120] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0123.120] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0123.120] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0123.120] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0123.120] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0123.120] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0123.120] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0123.120] _wcsicmp (_String1="netsh", _String2="FOR") returned 8 [0123.120] _wcsicmp (_String1="netsh", _String2="IF") returned 5 [0123.120] _wcsicmp (_String1="netsh", _String2="REM") returned -4 [0123.120] ??_V@YAXPAX@Z () returned 0x1 [0123.121] GetProcessHeap () returned 0x700000 [0123.121] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x4008) returned 0x71a408 [0123.121] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0123.121] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0123.121] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0123.121] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0123.122] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0123.122] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0123.122] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0123.122] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0123.122] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0123.122] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0123.122] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0123.122] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0123.122] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0123.122] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0123.122] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0123.122] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0123.122] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0123.122] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0123.122] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0123.122] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0123.122] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0123.122] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0123.122] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0123.122] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0123.122] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0123.122] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0123.122] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0123.122] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0123.122] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0123.122] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0123.122] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0123.122] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0123.122] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0123.122] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0123.122] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0123.122] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0123.123] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0123.123] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0123.123] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0123.123] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0123.123] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0123.123] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0123.123] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0123.123] malloc (_Size=0xffce) returned 0x2972650 [0123.123] ??_V@YAXPAX@Z () returned 0x4ff614 [0123.124] GetProcessHeap () returned 0x700000 [0123.124] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x1ffa4) returned 0x71e418 [0123.125] SetErrorMode (uMode=0x0) returned 0x0 [0123.125] SetErrorMode (uMode=0x1) returned 0x0 [0123.125] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x71e420, lpFilePart=0x4ff634 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x4ff634*="Desktop") returned 0x17 [0123.125] SetErrorMode (uMode=0x0) returned 0x1 [0123.125] GetProcessHeap () returned 0x700000 [0123.125] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x71e418, Size=0x44) returned 0x71e418 [0123.125] GetProcessHeap () returned 0x700000 [0123.125] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x71e418) returned 0x44 [0123.125] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0123.125] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0123.125] GetProcessHeap () returned 0x700000 [0123.125] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x1b4) returned 0x700ca0 [0123.125] GetProcessHeap () returned 0x700000 [0123.125] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x360) returned 0x700f40 [0123.126] GetProcessHeap () returned 0x700000 [0123.126] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x700f40, Size=0x1b6) returned 0x700f40 [0123.126] GetProcessHeap () returned 0x700000 [0123.126] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x700f40) returned 0x1b6 [0123.126] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0123.126] GetProcessHeap () returned 0x700000 [0123.126] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xe0) returned 0x701100 [0123.126] GetProcessHeap () returned 0x700000 [0123.126] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x701100, Size=0x76) returned 0x701100 [0123.126] GetProcessHeap () returned 0x700000 [0123.126] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x701100) returned 0x76 [0123.126] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0123.126] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x4ff3c0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff3c0) returned 0xffffffff [0123.126] GetLastError () returned 0x2 [0123.126] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0123.126] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x4ff3c0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff3c0) returned 0xffffffff [0123.127] GetLastError () returned 0x2 [0123.127] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0123.127] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x4ff3c0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff3c0) returned 0x700e60 [0123.127] FindClose (in: hFindFile=0x700e60 | out: hFindFile=0x700e60) returned 1 [0123.127] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.COM", fInfoLevelId=0x1, lpFindFileData=0x4ff3c0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff3c0) returned 0xffffffff [0123.127] GetLastError () returned 0x2 [0123.127] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.EXE", fInfoLevelId=0x1, lpFindFileData=0x4ff3c0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff3c0) returned 0x700e60 [0123.127] FindClose (in: hFindFile=0x700e60 | out: hFindFile=0x700e60) returned 1 [0123.127] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0123.127] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0123.127] ??_V@YAXPAX@Z () returned 0x1 [0123.127] malloc (_Size=0xffce) returned 0x2972650 [0123.128] ??_V@YAXPAX@Z () returned 0x4ff634 [0123.128] GetProcessHeap () returned 0x700000 [0123.128] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x18) returned 0x700e60 [0123.128] ??_V@YAXPAX@Z () returned 0x1 [0123.128] GetProcessHeap () returned 0x700000 [0123.128] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xffd6) returned 0x71e468 [0123.128] GetProcessHeap () returned 0x700000 [0123.128] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x3c) returned 0x701180 [0123.128] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0123.128] malloc (_Size=0xffce) returned 0x2972650 [0123.128] ??_V@YAXPAX@Z () returned 0x4ff3bc [0123.128] GetProcessHeap () returned 0x700000 [0123.128] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x1ffa4) returned 0x72e448 [0123.129] SetErrorMode (uMode=0x0) returned 0x0 [0123.129] SetErrorMode (uMode=0x1) returned 0x0 [0123.129] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x72e450, lpFilePart=0x4ff3dc | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x4ff3dc*="Desktop") returned 0x17 [0123.129] SetErrorMode (uMode=0x0) returned 0x1 [0123.129] GetProcessHeap () returned 0x700000 [0123.129] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x72e448, Size=0x44) returned 0x72e448 [0123.129] GetProcessHeap () returned 0x700000 [0123.129] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x72e448) returned 0x44 [0123.129] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0123.129] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0123.129] GetProcessHeap () returned 0x700000 [0123.129] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x1b4) returned 0x7011c8 [0123.129] GetProcessHeap () returned 0x700000 [0123.129] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x360) returned 0x708220 [0123.129] GetProcessHeap () returned 0x700000 [0123.129] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x708220, Size=0x1b6) returned 0x708220 [0123.129] GetProcessHeap () returned 0x700000 [0123.129] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x708220) returned 0x1b6 [0123.129] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0123.129] GetProcessHeap () returned 0x700000 [0123.129] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xe0) returned 0x701388 [0123.129] GetProcessHeap () returned 0x700000 [0123.129] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x701388, Size=0x76) returned 0x701388 [0123.129] GetProcessHeap () returned 0x700000 [0123.130] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x701388) returned 0x76 [0123.130] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0123.130] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x4ff168, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff168) returned 0xffffffff [0123.130] GetLastError () returned 0x2 [0123.130] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0123.130] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x4ff168, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff168) returned 0xffffffff [0123.130] GetLastError () returned 0x2 [0123.130] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0123.130] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x4ff168, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff168) returned 0x701408 [0123.130] FindClose (in: hFindFile=0x701408 | out: hFindFile=0x701408) returned 1 [0123.130] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.COM", fInfoLevelId=0x1, lpFindFileData=0x4ff168, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff168) returned 0xffffffff [0123.131] GetLastError () returned 0x2 [0123.131] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.EXE", fInfoLevelId=0x1, lpFindFileData=0x4ff168, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff168) returned 0x701408 [0123.131] FindClose (in: hFindFile=0x701408 | out: hFindFile=0x701408) returned 1 [0123.131] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0123.131] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0123.131] ??_V@YAXPAX@Z () returned 0x1 [0123.131] GetConsoleTitleW (in: lpConsoleTitle=0x4ff66c, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\SYSTEM32\\cmd.exe") returned 0x1c [0123.307] InitializeProcThreadAttributeList (in: lpAttributeList=0x4ff598, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x4ff584 | out: lpAttributeList=0x4ff598, lpSize=0x4ff584) returned 1 [0123.307] UpdateProcThreadAttribute (in: lpAttributeList=0x4ff598, dwFlags=0x0, Attribute=0x60001, lpValue=0x4ff580, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x4ff598, lpPreviousValue=0x0) returned 1 [0123.307] GetStartupInfoW (in: lpStartupInfo=0x4ff5d0 | out: lpStartupInfo=0x4ff5d0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\SYSTEM32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x8c, hStdOutput=0x504, hStdError=0x50c)) [0123.307] GetProcessHeap () returned 0x700000 [0123.307] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x18) returned 0x700e80 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0123.307] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0123.308] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0123.308] GetProcessHeap () returned 0x700000 [0123.308] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x700e80) returned 1 [0123.308] GetProcessHeap () returned 0x700000 [0123.308] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xa) returned 0x708128 [0123.308] lstrcmpW (lpString1="\\netsh.exe", lpString2="\\XCOPY.EXE") returned -1 [0123.308] _get_osfhandle (_FileHandle=1) returned 0x504 [0123.308] SetConsoleMode (hConsoleHandle=0x504, dwMode=0x0) returned 0 [0123.308] _get_osfhandle (_FileHandle=0) returned 0x8c [0123.308] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1 [0123.487] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\netsh.exe", lpCommandLine="netsh wlan show profile ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x4ff520*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="netsh wlan show profile ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x4ff56c | out: lpCommandLine="netsh wlan show profile ", lpProcessInformation=0x4ff56c*(hProcess=0xec, hThread=0xe0, dwProcessId=0xdf0, dwThreadId=0xa7c)) returned 1 [0123.927] CloseHandle (hObject=0xe0) returned 1 [0123.927] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0123.927] GetProcessHeap () returned 0x700000 [0123.927] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x7198c0) returned 1 [0123.927] GetEnvironmentStringsW () returned 0x7198c0* [0123.927] GetProcessHeap () returned 0x700000 [0123.927] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xb40) returned 0x704bb8 [0123.927] FreeEnvironmentStringsA (penv="=") returned 1 [0123.928] GetProcessHeap () returned 0x700000 [0123.928] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x708128) returned 1 [0123.928] DeleteProcThreadAttributeList (in: lpAttributeList=0x4ff598 | out: lpAttributeList=0x4ff598) [0123.928] _get_osfhandle (_FileHandle=3) returned 0xd4 [0123.928] DuplicateHandle (in: hSourceProcessHandle=0xec, hSourceHandle=0xd4, hTargetProcessHandle=0x0, lpTargetHandle=0x0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x1 | out: lpTargetHandle=0x0) returned 1 [0123.928] _dup2 (_FileHandleSrc=5, _FileHandleDst=1) returned 0 [0123.928] _close (_FileHandle=5) returned 0 [0123.928] _dup (_FileHandle=0) returned 4 [0123.928] _dup2 (_FileHandleSrc=3, _FileHandleDst=0) returned 0 [0123.928] _close (_FileHandle=3) returned 0 [0123.928] malloc (_Size=0xffce) returned 0x2972650 [0123.928] ??_V@YAXPAX@Z () returned 0x4ff67c [0123.928] _wcsicmp (_String1="findstr", _String2="DIR") returned 2 [0123.928] _wcsicmp (_String1="findstr", _String2="ERASE") returned 1 [0123.928] _wcsicmp (_String1="findstr", _String2="DEL") returned 2 [0123.928] _wcsicmp (_String1="findstr", _String2="TYPE") returned -14 [0123.928] _wcsicmp (_String1="findstr", _String2="COPY") returned 3 [0123.928] _wcsicmp (_String1="findstr", _String2="CD") returned 3 [0123.928] _wcsicmp (_String1="findstr", _String2="CHDIR") returned 3 [0123.929] _wcsicmp (_String1="findstr", _String2="RENAME") returned -12 [0123.929] _wcsicmp (_String1="findstr", _String2="REN") returned -12 [0123.929] _wcsicmp (_String1="findstr", _String2="ECHO") returned 1 [0123.929] _wcsicmp (_String1="findstr", _String2="SET") returned -13 [0123.929] _wcsicmp (_String1="findstr", _String2="PAUSE") returned -10 [0123.929] _wcsicmp (_String1="findstr", _String2="DATE") returned 2 [0123.929] _wcsicmp (_String1="findstr", _String2="TIME") returned -14 [0123.929] _wcsicmp (_String1="findstr", _String2="PROMPT") returned -10 [0123.929] _wcsicmp (_String1="findstr", _String2="MD") returned -7 [0123.929] _wcsicmp (_String1="findstr", _String2="MKDIR") returned -7 [0123.929] _wcsicmp (_String1="findstr", _String2="RD") returned -12 [0123.929] _wcsicmp (_String1="findstr", _String2="RMDIR") returned -12 [0123.929] _wcsicmp (_String1="findstr", _String2="PATH") returned -10 [0123.929] _wcsicmp (_String1="findstr", _String2="GOTO") returned -1 [0123.929] _wcsicmp (_String1="findstr", _String2="SHIFT") returned -13 [0123.929] _wcsicmp (_String1="findstr", _String2="CLS") returned 3 [0123.929] _wcsicmp (_String1="findstr", _String2="CALL") returned 3 [0123.929] _wcsicmp (_String1="findstr", _String2="VERIFY") returned -16 [0123.929] _wcsicmp (_String1="findstr", _String2="VER") returned -16 [0123.929] _wcsicmp (_String1="findstr", _String2="VOL") returned -16 [0123.929] _wcsicmp (_String1="findstr", _String2="EXIT") returned 1 [0123.929] _wcsicmp (_String1="findstr", _String2="SETLOCAL") returned -13 [0123.929] _wcsicmp (_String1="findstr", _String2="ENDLOCAL") returned 1 [0123.929] _wcsicmp (_String1="findstr", _String2="TITLE") returned -14 [0123.929] _wcsicmp (_String1="findstr", _String2="START") returned -13 [0123.929] _wcsicmp (_String1="findstr", _String2="DPATH") returned 2 [0123.929] _wcsicmp (_String1="findstr", _String2="KEYS") returned -5 [0123.929] _wcsicmp (_String1="findstr", _String2="MOVE") returned -7 [0123.929] _wcsicmp (_String1="findstr", _String2="PUSHD") returned -10 [0123.930] _wcsicmp (_String1="findstr", _String2="POPD") returned -10 [0123.930] _wcsicmp (_String1="findstr", _String2="ASSOC") returned 5 [0123.930] _wcsicmp (_String1="findstr", _String2="FTYPE") returned -11 [0123.930] _wcsicmp (_String1="findstr", _String2="BREAK") returned 4 [0123.930] _wcsicmp (_String1="findstr", _String2="COLOR") returned 3 [0123.930] _wcsicmp (_String1="findstr", _String2="MKLINK") returned -7 [0123.930] _wcsicmp (_String1="findstr", _String2="DIR") returned 2 [0123.930] _wcsicmp (_String1="findstr", _String2="ERASE") returned 1 [0123.930] _wcsicmp (_String1="findstr", _String2="DEL") returned 2 [0123.930] _wcsicmp (_String1="findstr", _String2="TYPE") returned -14 [0123.930] _wcsicmp (_String1="findstr", _String2="COPY") returned 3 [0123.930] _wcsicmp (_String1="findstr", _String2="CD") returned 3 [0123.930] _wcsicmp (_String1="findstr", _String2="CHDIR") returned 3 [0123.930] _wcsicmp (_String1="findstr", _String2="RENAME") returned -12 [0123.930] _wcsicmp (_String1="findstr", _String2="REN") returned -12 [0123.930] _wcsicmp (_String1="findstr", _String2="ECHO") returned 1 [0123.930] _wcsicmp (_String1="findstr", _String2="SET") returned -13 [0123.930] _wcsicmp (_String1="findstr", _String2="PAUSE") returned -10 [0123.930] _wcsicmp (_String1="findstr", _String2="DATE") returned 2 [0123.930] _wcsicmp (_String1="findstr", _String2="TIME") returned -14 [0123.930] _wcsicmp (_String1="findstr", _String2="PROMPT") returned -10 [0123.930] _wcsicmp (_String1="findstr", _String2="MD") returned -7 [0123.930] _wcsicmp (_String1="findstr", _String2="MKDIR") returned -7 [0123.930] _wcsicmp (_String1="findstr", _String2="RD") returned -12 [0123.930] _wcsicmp (_String1="findstr", _String2="RMDIR") returned -12 [0123.930] _wcsicmp (_String1="findstr", _String2="PATH") returned -10 [0123.930] _wcsicmp (_String1="findstr", _String2="GOTO") returned -1 [0123.930] _wcsicmp (_String1="findstr", _String2="SHIFT") returned -13 [0123.930] _wcsicmp (_String1="findstr", _String2="CLS") returned 3 [0123.931] _wcsicmp (_String1="findstr", _String2="CALL") returned 3 [0123.931] _wcsicmp (_String1="findstr", _String2="VERIFY") returned -16 [0123.931] _wcsicmp (_String1="findstr", _String2="VER") returned -16 [0123.931] _wcsicmp (_String1="findstr", _String2="VOL") returned -16 [0123.931] _wcsicmp (_String1="findstr", _String2="EXIT") returned 1 [0123.931] _wcsicmp (_String1="findstr", _String2="SETLOCAL") returned -13 [0123.931] _wcsicmp (_String1="findstr", _String2="ENDLOCAL") returned 1 [0123.931] _wcsicmp (_String1="findstr", _String2="TITLE") returned -14 [0123.931] _wcsicmp (_String1="findstr", _String2="START") returned -13 [0123.931] _wcsicmp (_String1="findstr", _String2="DPATH") returned 2 [0123.931] _wcsicmp (_String1="findstr", _String2="KEYS") returned -5 [0123.931] _wcsicmp (_String1="findstr", _String2="MOVE") returned -7 [0123.931] _wcsicmp (_String1="findstr", _String2="PUSHD") returned -10 [0123.931] _wcsicmp (_String1="findstr", _String2="POPD") returned -10 [0123.931] _wcsicmp (_String1="findstr", _String2="ASSOC") returned 5 [0123.931] _wcsicmp (_String1="findstr", _String2="FTYPE") returned -11 [0123.931] _wcsicmp (_String1="findstr", _String2="BREAK") returned 4 [0123.931] _wcsicmp (_String1="findstr", _String2="COLOR") returned 3 [0123.931] _wcsicmp (_String1="findstr", _String2="MKLINK") returned -7 [0123.931] _wcsicmp (_String1="findstr", _String2="FOR") returned -6 [0123.931] _wcsicmp (_String1="findstr", _String2="IF") returned -3 [0123.931] _wcsicmp (_String1="findstr", _String2="REM") returned -12 [0123.931] ??_V@YAXPAX@Z () returned 0x1 [0123.931] GetProcessHeap () returned 0x700000 [0123.931] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x4008) returned 0x72e498 [0123.932] _wcsicmp (_String1="findstr", _String2="DIR") returned 2 [0123.932] _wcsicmp (_String1="findstr", _String2="ERASE") returned 1 [0123.932] _wcsicmp (_String1="findstr", _String2="DEL") returned 2 [0123.932] _wcsicmp (_String1="findstr", _String2="TYPE") returned -14 [0123.932] _wcsicmp (_String1="findstr", _String2="COPY") returned 3 [0123.932] _wcsicmp (_String1="findstr", _String2="CD") returned 3 [0123.932] _wcsicmp (_String1="findstr", _String2="CHDIR") returned 3 [0123.932] _wcsicmp (_String1="findstr", _String2="RENAME") returned -12 [0123.932] _wcsicmp (_String1="findstr", _String2="REN") returned -12 [0123.932] _wcsicmp (_String1="findstr", _String2="ECHO") returned 1 [0123.932] _wcsicmp (_String1="findstr", _String2="SET") returned -13 [0123.932] _wcsicmp (_String1="findstr", _String2="PAUSE") returned -10 [0123.932] _wcsicmp (_String1="findstr", _String2="DATE") returned 2 [0123.932] _wcsicmp (_String1="findstr", _String2="TIME") returned -14 [0123.932] _wcsicmp (_String1="findstr", _String2="PROMPT") returned -10 [0123.932] _wcsicmp (_String1="findstr", _String2="MD") returned -7 [0123.932] _wcsicmp (_String1="findstr", _String2="MKDIR") returned -7 [0123.932] _wcsicmp (_String1="findstr", _String2="RD") returned -12 [0123.932] _wcsicmp (_String1="findstr", _String2="RMDIR") returned -12 [0123.932] _wcsicmp (_String1="findstr", _String2="PATH") returned -10 [0123.932] _wcsicmp (_String1="findstr", _String2="GOTO") returned -1 [0123.932] _wcsicmp (_String1="findstr", _String2="SHIFT") returned -13 [0123.932] _wcsicmp (_String1="findstr", _String2="CLS") returned 3 [0123.932] _wcsicmp (_String1="findstr", _String2="CALL") returned 3 [0123.932] _wcsicmp (_String1="findstr", _String2="VERIFY") returned -16 [0123.932] _wcsicmp (_String1="findstr", _String2="VER") returned -16 [0123.932] _wcsicmp (_String1="findstr", _String2="VOL") returned -16 [0123.932] _wcsicmp (_String1="findstr", _String2="EXIT") returned 1 [0123.933] _wcsicmp (_String1="findstr", _String2="SETLOCAL") returned -13 [0123.933] _wcsicmp (_String1="findstr", _String2="ENDLOCAL") returned 1 [0123.933] _wcsicmp (_String1="findstr", _String2="TITLE") returned -14 [0123.933] _wcsicmp (_String1="findstr", _String2="START") returned -13 [0123.933] _wcsicmp (_String1="findstr", _String2="DPATH") returned 2 [0123.933] _wcsicmp (_String1="findstr", _String2="KEYS") returned -5 [0123.933] _wcsicmp (_String1="findstr", _String2="MOVE") returned -7 [0123.933] _wcsicmp (_String1="findstr", _String2="PUSHD") returned -10 [0123.933] _wcsicmp (_String1="findstr", _String2="POPD") returned -10 [0123.933] _wcsicmp (_String1="findstr", _String2="ASSOC") returned 5 [0123.933] _wcsicmp (_String1="findstr", _String2="FTYPE") returned -11 [0123.933] _wcsicmp (_String1="findstr", _String2="BREAK") returned 4 [0123.933] _wcsicmp (_String1="findstr", _String2="COLOR") returned 3 [0123.933] _wcsicmp (_String1="findstr", _String2="MKLINK") returned -7 [0123.933] _wcsnicmp (_String1="find", _String2="cmd ", _MaxCount=0x4) returned 3 [0123.933] malloc (_Size=0xffce) returned 0x2972650 [0123.933] ??_V@YAXPAX@Z () returned 0x4ff614 [0123.933] GetProcessHeap () returned 0x700000 [0123.933] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x1ffa4) returned 0x7324a8 [0123.935] SetErrorMode (uMode=0x0) returned 0x0 [0123.935] SetErrorMode (uMode=0x1) returned 0x0 [0123.935] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x7324b0, lpFilePart=0x4ff634 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x4ff634*="Desktop") returned 0x17 [0123.935] SetErrorMode (uMode=0x0) returned 0x1 [0123.935] GetProcessHeap () returned 0x700000 [0123.935] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x7324a8, Size=0x48) returned 0x7324a8 [0123.935] GetProcessHeap () returned 0x700000 [0123.935] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x7324a8) returned 0x48 [0123.935] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0123.935] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0123.935] GetProcessHeap () returned 0x700000 [0123.935] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x1b4) returned 0x7083e0 [0123.935] GetProcessHeap () returned 0x700000 [0123.935] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x360) returned 0x7085a0 [0123.935] GetProcessHeap () returned 0x700000 [0123.936] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x7085a0, Size=0x1b6) returned 0x7085a0 [0123.936] GetProcessHeap () returned 0x700000 [0123.936] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x7085a0) returned 0x1b6 [0123.936] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0123.936] GetProcessHeap () returned 0x700000 [0123.936] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xe0) returned 0x701408 [0123.936] GetProcessHeap () returned 0x700000 [0123.936] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x701408, Size=0x76) returned 0x701408 [0123.936] GetProcessHeap () returned 0x700000 [0123.936] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x701408) returned 0x76 [0123.936] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0123.936] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\findstr.*", fInfoLevelId=0x1, lpFindFileData=0x4ff3c0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff3c0) returned 0xffffffff [0123.936] GetLastError () returned 0x2 [0123.936] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0123.937] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\findstr.*", fInfoLevelId=0x1, lpFindFileData=0x4ff3c0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff3c0) returned 0xffffffff [0123.937] GetLastError () returned 0x2 [0123.937] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0123.937] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\findstr.*", fInfoLevelId=0x1, lpFindFileData=0x4ff3c0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff3c0) returned 0x701488 [0123.937] FindClose (in: hFindFile=0x701488 | out: hFindFile=0x701488) returned 1 [0123.937] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\findstr.COM", fInfoLevelId=0x1, lpFindFileData=0x4ff3c0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff3c0) returned 0xffffffff [0123.938] GetLastError () returned 0x2 [0123.938] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\findstr.EXE", fInfoLevelId=0x1, lpFindFileData=0x4ff3c0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff3c0) returned 0x701488 [0123.938] FindClose (in: hFindFile=0x701488 | out: hFindFile=0x701488) returned 1 [0123.938] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0123.938] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0123.938] ??_V@YAXPAX@Z () returned 0x1 [0123.938] malloc (_Size=0xffce) returned 0x2972650 [0123.938] ??_V@YAXPAX@Z () returned 0x4ff634 [0123.938] GetProcessHeap () returned 0x700000 [0123.938] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x18) returned 0x700e80 [0123.938] ??_V@YAXPAX@Z () returned 0x1 [0123.938] GetProcessHeap () returned 0x700000 [0123.938] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xffd6) returned 0x7324f8 [0123.938] GetProcessHeap () returned 0x700000 [0123.938] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x22) returned 0x701488 [0123.938] _wcsnicmp (_String1="find", _String2="cmd ", _MaxCount=0x4) returned 3 [0123.939] malloc (_Size=0xffce) returned 0x2972650 [0123.939] ??_V@YAXPAX@Z () returned 0x4ff3bc [0123.939] GetProcessHeap () returned 0x700000 [0123.939] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x1ffa4) returned 0x7424d8 [0123.939] SetErrorMode (uMode=0x0) returned 0x0 [0123.940] SetErrorMode (uMode=0x1) returned 0x0 [0123.940] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x7424e0, lpFilePart=0x4ff3dc | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x4ff3dc*="Desktop") returned 0x17 [0123.940] SetErrorMode (uMode=0x0) returned 0x1 [0123.940] GetProcessHeap () returned 0x700000 [0123.940] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x7424d8, Size=0x48) returned 0x7424d8 [0123.940] GetProcessHeap () returned 0x700000 [0123.940] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x7424d8) returned 0x48 [0123.940] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0123.940] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0123.940] GetProcessHeap () returned 0x700000 [0123.940] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x1b4) returned 0x708760 [0123.940] GetProcessHeap () returned 0x700000 [0123.940] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x360) returned 0x708920 [0123.940] GetProcessHeap () returned 0x700000 [0123.940] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x708920, Size=0x1b6) returned 0x708920 [0123.940] GetProcessHeap () returned 0x700000 [0123.940] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x708920) returned 0x1b6 [0123.940] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0123.940] GetProcessHeap () returned 0x700000 [0123.940] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xe0) returned 0x7014b8 [0123.940] GetProcessHeap () returned 0x700000 [0123.940] RtlReAllocateHeap (Heap=0x700000, Flags=0x0, Ptr=0x7014b8, Size=0x76) returned 0x7014b8 [0123.940] GetProcessHeap () returned 0x700000 [0123.940] RtlSizeHeap (HeapHandle=0x700000, Flags=0x0, MemoryPointer=0x7014b8) returned 0x76 [0123.940] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0123.941] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\findstr.*", fInfoLevelId=0x1, lpFindFileData=0x4ff168, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff168) returned 0xffffffff [0123.941] GetLastError () returned 0x2 [0123.941] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0123.941] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\findstr.*", fInfoLevelId=0x1, lpFindFileData=0x4ff168, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff168) returned 0xffffffff [0123.942] GetLastError () returned 0x2 [0123.942] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0123.942] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\findstr.*", fInfoLevelId=0x1, lpFindFileData=0x4ff168, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff168) returned 0x701538 [0123.942] FindClose (in: hFindFile=0x701538 | out: hFindFile=0x701538) returned 1 [0123.942] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\findstr.COM", fInfoLevelId=0x1, lpFindFileData=0x4ff168, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff168) returned 0xffffffff [0123.942] GetLastError () returned 0x2 [0123.942] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\findstr.EXE", fInfoLevelId=0x1, lpFindFileData=0x4ff168, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ff168) returned 0x701538 [0123.942] FindClose (in: hFindFile=0x701538 | out: hFindFile=0x701538) returned 1 [0123.942] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0123.942] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0123.942] ??_V@YAXPAX@Z () returned 0x1 [0123.942] GetConsoleTitleW (in: lpConsoleTitle=0x4ff66c, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\SYSTEM32\\cmd.exe") returned 0x1c [0124.138] InitializeProcThreadAttributeList (in: lpAttributeList=0x4ff598, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x4ff584 | out: lpAttributeList=0x4ff598, lpSize=0x4ff584) returned 1 [0124.138] UpdateProcThreadAttribute (in: lpAttributeList=0x4ff598, dwFlags=0x0, Attribute=0x60001, lpValue=0x4ff580, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x4ff598, lpPreviousValue=0x0) returned 1 [0124.138] GetStartupInfoW (in: lpStartupInfo=0x4ff5d0 | out: lpStartupInfo=0x4ff5d0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\SYSTEM32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x8c, hStdOutput=0x504, hStdError=0x50c)) [0124.138] GetProcessHeap () returned 0x700000 [0124.138] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0x18) returned 0x701538 [0124.138] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0124.138] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38 [0124.138] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0124.138] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0124.139] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0124.139] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0124.139] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0124.139] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0124.139] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0124.139] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0124.139] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0124.139] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0124.139] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0124.139] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0124.140] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0124.140] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0124.140] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0124.140] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0124.140] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0124.140] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0124.141] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0124.141] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0124.141] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0124.141] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0124.141] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0124.142] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0124.142] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0124.142] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0124.155] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0124.155] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0124.155] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0124.155] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0124.155] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0124.155] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0124.155] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0124.155] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0124.155] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0124.160] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0124.160] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0124.160] GetProcessHeap () returned 0x700000 [0124.160] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x701538) returned 1 [0124.160] GetProcessHeap () returned 0x700000 [0124.160] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xa) returned 0x708128 [0124.160] lstrcmpW (lpString1="\\findstr.exe", lpString2="\\XCOPY.EXE") returned -1 [0124.160] _get_osfhandle (_FileHandle=1) returned 0x504 [0124.160] SetConsoleMode (hConsoleHandle=0x504, dwMode=0x0) returned 0 [0124.160] _get_osfhandle (_FileHandle=0) returned 0x8c [0124.160] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 0 [0124.160] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\findstr.exe", lpCommandLine="findstr All", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x4ff520*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="findstr All", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x4ff56c | out: lpCommandLine="findstr All", lpProcessInformation=0x4ff56c*(hProcess=0xe0, hThread=0xd4, dwProcessId=0xdb4, dwThreadId=0x5f0)) returned 1 [0124.411] CloseHandle (hObject=0xd4) returned 1 [0124.411] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0124.411] GetProcessHeap () returned 0x700000 [0124.411] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x704bb8) returned 1 [0124.411] GetEnvironmentStringsW () returned 0x7198c0* [0124.411] GetProcessHeap () returned 0x700000 [0124.411] RtlAllocateHeap (HeapHandle=0x700000, Flags=0x8, Size=0xb40) returned 0x704bb8 [0124.411] FreeEnvironmentStringsA (penv="=") returned 1 [0124.411] GetProcessHeap () returned 0x700000 [0124.411] RtlFreeHeap (HeapHandle=0x700000, Flags=0x0, BaseAddress=0x708128) returned 1 [0124.411] DeleteProcThreadAttributeList (in: lpAttributeList=0x4ff598 | out: lpAttributeList=0x4ff598) [0124.411] _dup2 (_FileHandleSrc=4, _FileHandleDst=0) returned 0 [0124.411] _close (_FileHandle=4) returned 0 [0124.411] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0161.172] GetExitCodeProcess (in: hProcess=0xec, lpExitCode=0x4ff8e8 | out: lpExitCode=0x4ff8e8*=0x1) returned 1 [0161.172] CloseHandle (hObject=0xec) returned 1 [0161.172] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0161.395] GetExitCodeProcess (in: hProcess=0xe0, lpExitCode=0x4ff8e8 | out: lpExitCode=0x4ff8e8*=0x1) returned 1 [0161.422] CloseHandle (hObject=0xe0) returned 1 [0161.422] _get_osfhandle (_FileHandle=1) returned 0x504 [0161.422] SetConsoleMode (hConsoleHandle=0x504, dwMode=0x0) returned 0 [0161.422] _get_osfhandle (_FileHandle=1) returned 0x504 [0161.422] GetConsoleMode (in: hConsoleHandle=0x504, lpMode=0x833890 | out: lpMode=0x833890) returned 0 [0161.422] _get_osfhandle (_FileHandle=0) returned 0x8c [0161.422] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x833894 | out: lpMode=0x833894) returned 1 [0161.655] _get_osfhandle (_FileHandle=0) returned 0x8c [0161.655] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0161.893] SetConsoleInputExeNameW () returned 0x1 [0161.893] GetConsoleOutputCP () returned 0xfde9 [0162.262] GetCPInfo (in: CodePage=0xfde9, lpCPInfo=0x833850 | out: lpCPInfo=0x833850) returned 1 [0162.263] SetThreadUILanguage (LangId=0x0) returned 0x2a0409 [0162.560] exit (_Code=1) [0162.560] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 35 os_tid = 0xe54 Process: id = "5" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x12c17000" os_pid = "0xb90" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x67c" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 26 os_tid = 0xce0 Thread: id = 30 os_tid = 0xa88 Thread: id = 33 os_tid = 0x738 Process: id = "6" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x4c27d000" os_pid = "0x5b0" os_integrity_level = "0x4000" os_privileges = "0x260814080" monitor_reason = "rpc_server" parent_id = "3" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000f8bc" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 37 os_tid = 0x9bc Thread: id = 38 os_tid = 0x7ec Thread: id = 39 os_tid = 0x770 Thread: id = 40 os_tid = 0x7d8 Thread: id = 41 os_tid = 0x698 Thread: id = 42 os_tid = 0x690 Thread: id = 43 os_tid = 0x5fc Thread: id = 44 os_tid = 0x5f8 Thread: id = 45 os_tid = 0x5f4 Thread: id = 46 os_tid = 0x5b4 Process: id = "7" image_name = "chcp.com" filename = "c:\\windows\\syswow64\\chcp.com" page_root = "0x1d851000" os_pid = "0x648" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x67c" cmd_line = "chcp 65001 " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 47 os_tid = 0xf0 Thread: id = 50 os_tid = 0xeb4 Process: id = "8" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x742fe000" os_pid = "0x3ac" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "rpc_server" parent_id = "3" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wisvc" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\WpnService" [0xa], "NT SERVICE\\wuauserv" [0xa], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009f6a" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 51 os_tid = 0x2bc Thread: id = 52 os_tid = 0x1ec Thread: id = 53 os_tid = 0xcb8 Thread: id = 54 os_tid = 0xbf8 Thread: id = 55 os_tid = 0x1198 Thread: id = 56 os_tid = 0x119c Thread: id = 57 os_tid = 0x1010 Thread: id = 58 os_tid = 0x130c Thread: id = 59 os_tid = 0x1308 Thread: id = 60 os_tid = 0x1304 Thread: id = 61 os_tid = 0x1300 Thread: id = 62 os_tid = 0x12fc Thread: id = 63 os_tid = 0x12f8 Thread: id = 64 os_tid = 0x12a0 Thread: id = 65 os_tid = 0x12ac Thread: id = 66 os_tid = 0x12a8 Thread: id = 67 os_tid = 0x12a4 Thread: id = 68 os_tid = 0x1298 Thread: id = 69 os_tid = 0x1288 Thread: id = 70 os_tid = 0x1178 Thread: id = 71 os_tid = 0x10e0 Thread: id = 72 os_tid = 0x10dc Thread: id = 73 os_tid = 0x10d8 Thread: id = 74 os_tid = 0x1094 Thread: id = 75 os_tid = 0x108c Thread: id = 76 os_tid = 0x1088 Thread: id = 77 os_tid = 0x107c Thread: id = 78 os_tid = 0x104c Thread: id = 79 os_tid = 0x1048 Thread: id = 80 os_tid = 0x1040 Thread: id = 81 os_tid = 0x1034 Thread: id = 82 os_tid = 0x1014 Thread: id = 83 os_tid = 0xf28 Thread: id = 84 os_tid = 0xf0c Thread: id = 85 os_tid = 0xefc Thread: id = 86 os_tid = 0xaa0 Thread: id = 87 os_tid = 0xa30 Thread: id = 88 os_tid = 0xa14 Thread: id = 89 os_tid = 0xa0c Thread: id = 90 os_tid = 0x9e8 Thread: id = 91 os_tid = 0x9e0 Thread: id = 92 os_tid = 0x9d8 Thread: id = 93 os_tid = 0x9cc Thread: id = 94 os_tid = 0x9c4 Thread: id = 95 os_tid = 0x9b8 Thread: id = 96 os_tid = 0x9b0 Thread: id = 97 os_tid = 0x9a0 Thread: id = 98 os_tid = 0x998 Thread: id = 99 os_tid = 0x984 Thread: id = 100 os_tid = 0x978 Thread: id = 101 os_tid = 0x968 Thread: id = 102 os_tid = 0x95c Thread: id = 103 os_tid = 0x958 Thread: id = 104 os_tid = 0x944 Thread: id = 105 os_tid = 0x930 Thread: id = 106 os_tid = 0x914 Thread: id = 107 os_tid = 0x8ac Thread: id = 108 os_tid = 0x840 Thread: id = 109 os_tid = 0x83c Thread: id = 110 os_tid = 0x430 Thread: id = 111 os_tid = 0x7c0 Thread: id = 112 os_tid = 0x7bc Thread: id = 113 os_tid = 0x7ac Thread: id = 114 os_tid = 0x784 Thread: id = 115 os_tid = 0x780 Thread: id = 116 os_tid = 0x77c Thread: id = 117 os_tid = 0x6fc Thread: id = 118 os_tid = 0x678 Thread: id = 119 os_tid = 0x670 Thread: id = 120 os_tid = 0x660 Thread: id = 121 os_tid = 0x654 Thread: id = 122 os_tid = 0x61c Thread: id = 123 os_tid = 0x5d0 Thread: id = 124 os_tid = 0x5a0 Thread: id = 125 os_tid = 0x4ac Thread: id = 126 os_tid = 0x41c Thread: id = 127 os_tid = 0x414 Thread: id = 128 os_tid = 0x404 Thread: id = 129 os_tid = 0x158 Thread: id = 130 os_tid = 0x39c Thread: id = 131 os_tid = 0x2e8 Thread: id = 132 os_tid = 0x180 Thread: id = 133 os_tid = 0x234 Thread: id = 134 os_tid = 0x26c Thread: id = 135 os_tid = 0x2a0 Thread: id = 136 os_tid = 0x170 Thread: id = 137 os_tid = 0x1a8 Thread: id = 138 os_tid = 0x16c Thread: id = 139 os_tid = 0x3b0 Thread: id = 158 os_tid = 0xf48 Thread: id = 159 os_tid = 0xdac Thread: id = 160 os_tid = 0xf74 Thread: id = 161 os_tid = 0xf1c Thread: id = 163 os_tid = 0x384 Thread: id = 169 os_tid = 0xec4 Thread: id = 170 os_tid = 0xe00 Thread: id = 171 os_tid = 0xfbc Thread: id = 180 os_tid = 0x13b8 Thread: id = 181 os_tid = 0x138c Thread: id = 183 os_tid = 0x1358 Thread: id = 185 os_tid = 0x136c Thread: id = 187 os_tid = 0x13a4 Thread: id = 188 os_tid = 0x1394 Thread: id = 199 os_tid = 0x13ec Thread: id = 200 os_tid = 0x13dc Thread: id = 201 os_tid = 0x13e4 Thread: id = 202 os_tid = 0x1348 Thread: id = 206 os_tid = 0x13f8 Thread: id = 209 os_tid = 0x12f0 Thread: id = 229 os_tid = 0x12e0 Thread: id = 230 os_tid = 0x13c0 Thread: id = 237 os_tid = 0x11ec Thread: id = 238 os_tid = 0x114c Process: id = "9" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x44b8000" os_pid = "0x10a0" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "rpc_server" parent_id = "8" os_parent_pid = "0x2a4" cmd_line = "C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wisvc" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\WpnService" [0xe], "NT SERVICE\\wuauserv" [0xa], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009f6a" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 140 os_tid = 0x10c4 Thread: id = 141 os_tid = 0x10c0 Thread: id = 142 os_tid = 0x10bc Thread: id = 143 os_tid = 0x10b8 Thread: id = 144 os_tid = 0x10b4 Thread: id = 145 os_tid = 0x10b0 Thread: id = 146 os_tid = 0x10ac Thread: id = 147 os_tid = 0x10a4 Process: id = "10" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x3a6d1000" os_pid = "0xe0c" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "8" os_parent_pid = "0x2a4" cmd_line = "C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0002e7d2" [0xc000000f] Thread: id = 148 os_tid = 0x1188 Thread: id = 149 os_tid = 0x1044 Thread: id = 150 os_tid = 0xe34 Thread: id = 151 os_tid = 0xe30 Thread: id = 152 os_tid = 0xe2c Thread: id = 153 os_tid = 0xe28 Thread: id = 154 os_tid = 0xe24 Thread: id = 155 os_tid = 0xe20 Thread: id = 156 os_tid = 0xe1c Thread: id = 157 os_tid = 0xe10 Thread: id = 231 os_tid = 0xf3c Process: id = "11" image_name = "netsh.exe" filename = "c:\\windows\\syswow64\\netsh.exe" page_root = "0x16da9000" os_pid = "0xdf0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x67c" cmd_line = "netsh wlan show profile " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 164 os_tid = 0xa7c [0124.799] GetModuleHandleA (lpModuleName=0x0) returned 0x17d0000 [0124.799] __set_app_type (_Type=0x1) [0124.799] __p__fmode () returned 0x776f3c14 [0124.799] __p__commode () returned 0x776f49ec [0124.799] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x17d9a90) returned 0x0 [0124.799] __wgetmainargs (in: _Argc=0x17e33e8, _Argv=0x17e33ec, _Env=0x17e33f0, _DoWildCard=0, _StartInfo=0x17e33fc | out: _Argc=0x17e33e8, _Argv=0x17e33ec, _Env=0x17e33f0) returned 0 [0124.800] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0124.800] GetModuleHandleW (lpModuleName=0x0) returned 0x17d0000 [0124.800] _vsnwprintf (in: _Buffer=0x17e4ae0, _BufferCount=0x1fff, _Format="%s>", _ArgList=0xda7978 | out: _Buffer="netsh>") returned 6 [0124.800] GetProcessHeap () returned 0x1010000 [0124.800] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101b478 [0124.800] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101b498 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101b418 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101b4d8 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101b4a8 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101b4f8 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101b428 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cff8 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cf68 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d048 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d018 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cef8 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cfb8 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cfd8 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cee8 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cfc8 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cf08 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cfe8 [0124.801] GetProcessHeap () returned 0x1010000 [0124.801] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d008 [0124.801] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cf78 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d038 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d028 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d068 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d058 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cf98 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d078 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d098 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cf88 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d088 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cfa8 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cf18 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cf28 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cf58 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cf38 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ced8 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cf48 [0124.802] GetProcessHeap () returned 0x1010000 [0124.802] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cdf8 [0124.802] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cd18 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cd98 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cda8 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ce98 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ce48 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ce28 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ceb8 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ccd8 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ce58 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ce38 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cd68 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cd78 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cd28 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cd08 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cde8 [0124.803] GetProcessHeap () returned 0x1010000 [0124.803] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cdd8 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cea8 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cd58 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cdb8 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cec8 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ce88 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ce08 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ce68 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cd48 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cdc8 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cce8 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ce18 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ce78 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cd88 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101ccf8 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101cd38 [0124.804] GetProcessHeap () returned 0x1010000 [0124.804] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d460 [0124.805] GetProcessHeap () returned 0x1010000 [0124.805] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d340 [0124.805] GetProcessHeap () returned 0x1010000 [0124.805] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d470 [0124.805] GetProcessHeap () returned 0x1010000 [0124.805] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d480 [0124.805] GetProcessHeap () returned 0x1010000 [0124.805] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d3e0 [0124.805] GetProcessHeap () returned 0x1010000 [0124.805] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d430 [0124.805] GetProcessHeap () returned 0x1010000 [0124.805] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d410 [0124.805] GetProcessHeap () returned 0x1010000 [0124.805] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d2f0 [0124.806] GetProcessHeap () returned 0x1010000 [0124.806] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d380 [0124.807] GetProcessHeap () returned 0x1010000 [0124.807] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d300 [0124.807] GetProcessHeap () returned 0x1010000 [0124.807] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d390 [0124.807] GetProcessHeap () returned 0x1010000 [0124.807] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d3f0 [0124.807] GetProcessHeap () returned 0x1010000 [0124.807] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d320 [0124.807] GetProcessHeap () returned 0x1010000 [0124.807] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d440 [0124.807] GetProcessHeap () returned 0x1010000 [0124.807] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d2e0 [0124.807] GetProcessHeap () returned 0x1010000 [0124.807] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d370 [0124.807] GetProcessHeap () returned 0x1010000 [0124.807] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d330 [0124.807] GetProcessHeap () returned 0x1010000 [0124.807] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d450 [0124.807] GetProcessHeap () returned 0x1010000 [0124.807] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d490 [0124.807] GetProcessHeap () returned 0x1010000 [0124.807] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d400 [0124.807] GetProcessHeap () returned 0x1010000 [0124.807] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d350 [0124.807] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d310 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d3a0 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d360 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d3b0 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d3c0 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d3d0 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d420 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d4a0 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d2a0 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d240 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d0e0 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d200 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d1f0 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d2b0 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d270 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d2d0 [0124.808] GetProcessHeap () returned 0x1010000 [0124.808] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d1c0 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d130 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d140 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d220 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d1d0 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d210 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d2c0 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d150 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d250 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d260 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d0f0 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d230 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d1a0 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d280 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d1b0 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d100 [0124.809] GetProcessHeap () returned 0x1010000 [0124.809] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d160 [0124.809] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d110 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d290 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d120 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d170 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d180 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d190 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d1e0 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d5e8 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d548 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d678 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d5f8 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d508 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d608 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d6a8 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d6b8 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d578 [0124.810] GetProcessHeap () returned 0x1010000 [0124.810] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d648 [0124.810] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d568 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d6c8 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d558 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d688 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d5d8 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d588 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d598 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d518 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d6d8 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d668 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d5a8 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d538 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d5b8 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d5c8 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d618 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d4e8 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d628 [0124.811] GetProcessHeap () returned 0x1010000 [0124.811] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d638 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d4f8 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d528 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d658 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d698 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d7c8 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d818 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d6e8 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d858 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d828 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d7e8 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d798 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d7a8 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d748 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d778 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d788 [0124.812] GetProcessHeap () returned 0x1010000 [0124.812] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d758 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d838 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d898 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d808 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d848 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d7d8 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d768 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d868 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d878 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d7f8 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d888 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d8a8 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d7b8 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d6f8 [0124.813] GetProcessHeap () returned 0x1010000 [0124.813] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d708 [0124.813] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d738 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d718 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101d728 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dca0 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dbe0 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101db50 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dc90 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dc00 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101db60 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101db40 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dbb0 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dc40 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dcb0 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dc80 [0124.814] GetProcessHeap () returned 0x1010000 [0124.814] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101daf0 [0124.814] GetProcessHeap () returned 0x1010000 [0124.815] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dc10 [0124.815] GetProcessHeap () returned 0x1010000 [0124.815] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dbd0 [0124.815] GetProcessHeap () returned 0x1010000 [0124.815] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101db70 [0124.815] GetProcessHeap () returned 0x1010000 [0124.815] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101db80 [0124.815] GetProcessHeap () returned 0x1010000 [0124.815] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dc30 [0124.815] GetProcessHeap () returned 0x1010000 [0124.815] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dc20 [0124.815] GetProcessHeap () returned 0x1010000 [0124.815] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101db30 [0124.815] GetProcessHeap () returned 0x1010000 [0124.815] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dbf0 [0124.815] GetProcessHeap () returned 0x1010000 [0124.815] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101dc50 [0124.815] _wcsicmp (_String1="netsh.exe", _String2="ipxmontr.dll") returned 5 [0124.815] _wcsicmp (_String1="netsh.exe", _String2="ipxpromn.dll") returned 5 [0124.815] GetProcessHeap () returned 0x1010000 [0124.815] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x14) returned 0x101b148 [0124.815] GetProcessHeap () returned 0x1010000 [0124.815] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x2) returned 0x101dbc0 [0124.815] GetProcessHeap () returned 0x1010000 [0124.815] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x14) returned 0x1014990 [0124.816] _wcsupr (in: _String="netsh.exe" | out: _String="NETSH.EXE") returned="NETSH.EXE" [0124.816] GetProcessHeap () returned 0x1010000 [0124.816] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0124.816] GetProcessHeap () returned 0x1010000 [0124.816] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x48) returned 0x1014dd0 [0124.816] GetProcessHeap () returned 0x1010000 [0124.816] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0124.816] GetProcessHeap () returned 0x1010000 [0124.816] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x90) returned 0x1014bf8 [0124.816] GetProcessHeap () returned 0x1010000 [0124.816] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1014dd0) returned 1 [0124.816] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x773a0000 [0124.819] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\NetSh", ulOptions=0x0, samDesired=0x20019, phkResult=0xda7970 | out: phkResult=0xda7970*=0x108) returned 0x0 [0136.608] RegQueryInfoKeyW (in: hKey=0x108, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xda796c, lpcbMaxValueNameLen=0xda7964, lpcbMaxValueLen=0xda7968, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xda796c*=0x11, lpcbMaxValueNameLen=0xda7964, lpcbMaxValueLen=0xda7968, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0136.608] GetProcessHeap () returned 0x1010000 [0136.608] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x8, Size=0x16) returned 0x1013938 [0136.608] GetProcessHeap () returned 0x1010000 [0136.608] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x8, Size=0x23) returned 0x1013958 [0136.608] RegEnumValueW (in: hKey=0x108, dwIndex=0x0, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="2", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0136.608] _wcsicmp (_String1="ifmon.dll", _String2="ipxmontr.dll") returned -10 [0136.608] _wcsicmp (_String1="ifmon.dll", _String2="ipxpromn.dll") returned -10 [0136.608] GetProcessHeap () returned 0x1010000 [0136.608] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x28) returned 0x1013dc8 [0136.608] GetProcessHeap () returned 0x1010000 [0136.608] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x4) returned 0x101db00 [0136.608] GetProcessHeap () returned 0x1010000 [0136.608] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x14) returned 0x101df50 [0136.609] _wcsupr (in: _String="ifmon.dll" | out: _String="IFMON.DLL") returned="IFMON.DLL" [0136.609] GetProcessHeap () returned 0x1010000 [0136.609] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101b148) returned 1 [0136.609] LoadLibraryExW (lpLibFileName="IFMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x6f200000 [0137.439] GetProcAddress (hModule=0x6f200000, lpProcName="InitHelperDll") returned 0x6f201d30 [0137.439] InitHelperDll () returned 0x0 [0137.446] RegisterHelper () returned 0x0 [0137.446] GetProcessHeap () returned 0x1010000 [0137.446] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xd8) returned 0x10246e8 [0137.446] GetProcessHeap () returned 0x1010000 [0137.446] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1014bf8) returned 1 [0137.981] RegEnumValueW (in: hKey=0x108, dwIndex=0x1, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="4", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0137.981] _wcsicmp (_String1="rasmontr.dll", _String2="ipxmontr.dll") returned 9 [0137.981] _wcsicmp (_String1="rasmontr.dll", _String2="ipxpromn.dll") returned 9 [0137.981] GetProcessHeap () returned 0x1010000 [0137.981] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x3c) returned 0x1013ea8 [0137.981] GetProcessHeap () returned 0x1010000 [0137.981] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x4) returned 0x101da80 [0137.981] GetProcessHeap () returned 0x1010000 [0137.981] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1a) returned 0x1012f18 [0137.981] _wcsupr (in: _String="rasmontr.dll" | out: _String="RASMONTR.DLL") returned="RASMONTR.DLL" [0137.981] GetProcessHeap () returned 0x1010000 [0137.981] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1013dc8) returned 1 [0137.981] LoadLibraryExW (lpLibFileName="RASMONTR.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e9a0000 [0139.793] LoadLibraryExA (lpLibFileName="MSVCRT.DLL", hFile=0x0, dwFlags=0x800) returned 0x77640000 [0139.793] GetVersion () returned 0x3ad7000a [0139.793] SetErrorMode (uMode=0x0) returned 0x0 [0139.793] SetErrorMode (uMode=0x8001) returned 0x0 [0139.793] LocalAlloc (uFlags=0x0, uBytes=0x2000) returned 0x1028600 [0139.794] LocalFree (hMem=0x1028600) returned 0x0 [0139.794] GetVersion () returned 0x3ad7000a [0139.796] GlobalLock (hMem=0x1740004) returned 0x1028600 [0139.796] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x1028710 [0139.796] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x1025eb8 [0139.796] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x101d960 [0139.796] malloc (_Size=0x80) returned 0x1391068 [0139.796] __dllonexit () returned 0x6e76e510 [0139.797] __dllonexit () returned 0x6e76e4e0 [0139.797] __dllonexit () returned 0x6e76e4f0 [0139.797] __dllonexit () returned 0x6e76e500 [0139.809] __dllonexit () returned 0x6e752bd0 [0139.809] __dllonexit () returned 0x6e752bc0 [0139.809] __dllonexit () returned 0x6e752c00 [0139.810] __dllonexit () returned 0x6e752c40 [0139.810] __dllonexit () returned 0x6e752d10 [0139.810] __dllonexit () returned 0x6e752d20 [0139.810] __dllonexit () returned 0x6e752d70 [0139.961] __dllonexit () returned 0x6e752e20 [0139.961] __dllonexit () returned 0x6e752c60 [0139.961] __dllonexit () returned 0x6e76e560 [0139.962] __dllonexit () returned 0x6e752c80 [0139.962] __dllonexit () returned 0x6e752dd0 [0139.962] __dllonexit () returned 0x6e752df0 [0139.962] __dllonexit () returned 0x6e752e40 [0139.962] __dllonexit () returned 0x6e752e80 [0139.962] __dllonexit () returned 0x6e752e70 [0139.962] __dllonexit () returned 0x6e752ea0 [0139.962] __dllonexit () returned 0x6e752ec0 [0139.962] __dllonexit () returned 0x6e752ef0 [0139.962] __dllonexit () returned 0x6e752f70 [0139.962] __dllonexit () returned 0x6e752ae0 [0139.962] __dllonexit () returned 0x6e752af0 [0139.963] __dllonexit () returned 0x6e752ad0 [0139.964] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc199 [0139.965] __dllonexit () returned 0x6e76e540 [0139.965] __dllonexit () returned 0x6e76e520 [0139.965] __dllonexit () returned 0x6e76e550 [0139.965] __dllonexit () returned 0x6e76e530 [0139.965] GetVersion () returned 0x3ad7000a [0139.965] GetVersion () returned 0x3ad7000a [0139.965] GetVersion () returned 0x3ad7000a [0139.965] __dllonexit () returned 0x6e763c70 [0139.965] __dllonexit () returned 0x6e763c90 [0139.965] __dllonexit () returned 0x6e752ca0 [0139.965] __dllonexit () returned 0x6e752d30 [0139.966] __dllonexit () returned 0x6e752d40 [0139.966] __dllonexit () returned 0x6e763ae0 [0139.966] GetVersion () returned 0x3ad7000a [0139.966] GetProcessVersion (ProcessId=0x0) returned 0xa0000 [0139.966] GetSystemMetrics (nIndex=11) returned 32 [0139.966] GetSystemMetrics (nIndex=12) returned 32 [0139.966] GetSystemMetrics (nIndex=2) returned 17 [0139.966] GetSystemMetrics (nIndex=3) returned 17 [0139.966] GetDC (hWnd=0x0) returned 0x10105d6 [0139.966] GetDeviceCaps (hdc=0x10105d6, index=88) returned 96 [0139.966] GetDeviceCaps (hdc=0x10105d6, index=90) returned 96 [0139.966] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0139.966] GetSysColor (nIndex=15) returned 0xf0f0f0 [0139.966] GetSysColor (nIndex=16) returned 0xa0a0a0 [0139.966] GetSysColor (nIndex=20) returned 0xffffff [0139.967] GetSysColor (nIndex=18) returned 0x0 [0139.967] GetSysColor (nIndex=6) returned 0x646464 [0139.967] GetSysColorBrush (nIndex=15) returned 0x100072 [0139.967] GetSysColorBrush (nIndex=6) returned 0x10007a [0139.967] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0139.967] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0139.967] __dllonexit () returned 0x6e752da0 [0139.967] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc198 [0139.967] __dllonexit () returned 0x6e763ad0 [0139.967] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0139.967] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0139.967] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0139.967] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0139.967] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0139.967] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0139.967] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0139.968] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0139.968] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0139.968] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0139.968] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc07a [0139.968] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc083 [0139.968] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc198 [0139.968] __dllonexit () returned 0x6e76e570 [0139.968] __dllonexit () returned 0x6e76e590 [0139.968] __dllonexit () returned 0x6e76e5a0 [0139.969] __dllonexit () returned 0x6e76e5b0 [0139.969] __dllonexit () returned 0x6e76e5c0 [0139.969] GetCursorPos (in: lpPoint=0x6e83a298 | out: lpPoint=0x6e83a298*(x=802, y=374)) returned 1 [0139.969] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x1028890 [0139.969] LocalReAlloc (hMem=0x101d960, uBytes=0xc, uFlags=0x2) returned 0x1028158 [0139.969] GetCurrentThread () returned 0xfffffffe [0139.970] GetCurrentThreadId () returned 0xa7c [0139.970] __dllonexit () returned 0x6e752f80 [0139.970] SetErrorMode (uMode=0x0) returned 0x8001 [0139.970] SetErrorMode (uMode=0x8001) returned 0x0 [0139.970] GetModuleFileNameW (in: hModule=0x6e730000, lpFilename=0xda7168, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\System32\\MFC42u.dll" (normalized: "c:\\windows\\system32\\mfc42u.dll")) returned 0x1e [0139.970] wcscpy_s (in: _Destination=0xda6f60, _SizeInWords=0x104, _Source="MFC42u" | out: _Destination="MFC42u") returned 0x0 [0139.970] FindResourceW (hModule=0x6e730000, lpName=0xe01, lpType=0x6) returned 0x1000bb0 [0139.979] LoadStringW (in: hInstance=0x6e730000, uID=0xe000, lpBuffer=0xda6d60, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0139.979] wcscpy_s (in: _Destination=0xda719c, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0 [0139.979] wcscat_s (in: _Destination="MFC42u", _SizeInWords=0x104, _Source=".INI" | out: _Destination="MFC42u.INI") returned 0x0 [0140.002] malloc (_Size=0x40) returned 0x1393920 [0140.003] LocalAlloc (uFlags=0x40, uBytes=0x2090) returned 0x1028920 [0140.003] GetSystemDirectoryA (in: lpBuffer=0xda73b4, uSize=0x112 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0140.003] strcat_s (in: _Destination="C:\\WINDOWS\\system32", _SizeInBytes=0x112, _Source="\\MFC42" | out: _Destination="C:\\WINDOWS\\system32\\MFC42") returned 0x0 [0140.003] strcat_s (in: _Destination="C:\\WINDOWS\\system32\\MFC42", _SizeInBytes=0x112, _Source="LOC" | out: _Destination="C:\\WINDOWS\\system32\\MFC42LOC") returned 0x0 [0140.003] strcat_s (in: _Destination="C:\\WINDOWS\\system32\\MFC42LOC", _SizeInBytes=0x112, _Source=".DLL" | out: _Destination="C:\\WINDOWS\\system32\\MFC42LOC.DLL") returned 0x0 [0140.003] LoadLibraryExA (lpLibFileName="C:\\WINDOWS\\system32\\MFC42LOC.DLL", hFile=0x0, dwFlags=0x2) returned 0x0 [0140.011] GetProcAddress (hModule=0x6e9a0000, lpProcName="InitHelperDll") returned 0x6e9c4150 [0140.011] InitHelperDll () returned 0x0 [0140.012] RegisterHelper () returned 0x0 [0140.012] GetProcessHeap () returned 0x1010000 [0140.012] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x120) returned 0x10259c0 [0140.012] GetProcessHeap () returned 0x1010000 [0140.012] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10246e8) returned 1 [0140.012] RegisterHelper () returned 0x0 [0140.012] GetProcessHeap () returned 0x1010000 [0140.012] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x168) returned 0x10276a8 [0140.012] GetProcessHeap () returned 0x1010000 [0140.012] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10259c0) returned 1 [0140.014] RegisterHelper () returned 0x0 [0140.014] GetProcessHeap () returned 0x1010000 [0140.014] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1b0) returned 0x1026298 [0140.014] GetProcessHeap () returned 0x1010000 [0140.014] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10276a8) returned 1 [0140.014] RegisterHelper () returned 0x0 [0140.014] GetProcessHeap () returned 0x1010000 [0140.014] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1f8) returned 0x102a9b8 [0140.014] GetProcessHeap () returned 0x1010000 [0140.014] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1026298) returned 1 [0140.014] RegisterHelper () returned 0x0 [0140.014] GetProcessHeap () returned 0x1010000 [0140.014] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x240) returned 0x1026298 [0140.014] GetProcessHeap () returned 0x1010000 [0140.014] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x102a9b8) returned 1 [0140.014] RegEnumValueW (in: hKey=0x108, dwIndex=0x2, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="authfwcfg", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0140.014] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxmontr.dll") returned -8 [0140.014] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxpromn.dll") returned -8 [0140.014] GetProcessHeap () returned 0x1010000 [0140.014] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x50) returned 0x10264e0 [0140.014] GetProcessHeap () returned 0x1010000 [0140.014] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x14) returned 0x101de50 [0140.014] GetProcessHeap () returned 0x1010000 [0140.014] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1c) returned 0x1014798 [0140.014] _wcsupr (in: _String="authfwcfg.dll" | out: _String="AUTHFWCFG.DLL") returned="AUTHFWCFG.DLL" [0140.014] GetProcessHeap () returned 0x1010000 [0140.015] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1013ea8) returned 1 [0140.015] LoadLibraryExW (lpLibFileName="AUTHFWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e6d0000 [0141.943] GetProcAddress (hModule=0x6e6d0000, lpProcName="InitHelperDll") returned 0x6e6d3d00 [0141.943] InitHelperDll () returned 0x0 [0141.949] RegisterHelper () returned 0x0 [0141.949] GetProcessHeap () returned 0x1010000 [0141.949] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x288) returned 0x102d9d8 [0141.949] GetProcessHeap () returned 0x1010000 [0141.949] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1026298) returned 1 [0141.949] RegisterHelper () returned 0x0 [0141.949] GetProcessHeap () returned 0x1010000 [0141.949] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x2d0) returned 0x102dc68 [0141.949] GetProcessHeap () returned 0x1010000 [0141.949] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x102d9d8) returned 1 [0141.949] RegisterHelper () returned 0x0 [0141.949] GetProcessHeap () returned 0x1010000 [0141.949] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x318) returned 0x102df40 [0141.949] GetProcessHeap () returned 0x1010000 [0141.949] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x102dc68) returned 1 [0141.949] RegisterHelper () returned 0x0 [0141.949] GetProcessHeap () returned 0x1010000 [0141.949] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x360) returned 0x102d9d8 [0141.949] GetProcessHeap () returned 0x1010000 [0141.949] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x102df40) returned 1 [0141.950] RegisterHelper () returned 0x0 [0141.950] GetProcessHeap () returned 0x1010000 [0141.950] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x3a8) returned 0x102dd40 [0141.950] GetProcessHeap () returned 0x1010000 [0141.950] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x102d9d8) returned 1 [0141.950] RegEnumValueW (in: hKey=0x108, dwIndex=0x3, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="dhcpclient", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0141.950] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxmontr.dll") returned -5 [0141.950] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxpromn.dll") returned -5 [0141.950] GetProcessHeap () returned 0x1010000 [0141.950] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x64) returned 0x10258f0 [0141.950] GetProcessHeap () returned 0x1010000 [0141.950] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x16) returned 0x101de90 [0141.950] GetProcessHeap () returned 0x1010000 [0141.950] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x22) returned 0x101fee8 [0141.950] _wcsupr (in: _String="dhcpcmonitor.dll" | out: _String="DHCPCMONITOR.DLL") returned="DHCPCMONITOR.DLL" [0141.950] GetProcessHeap () returned 0x1010000 [0141.950] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10264e0) returned 1 [0141.950] LoadLibraryExW (lpLibFileName="DHCPCMONITOR.DLL", hFile=0x0, dwFlags=0x0) returned 0x6f1f0000 [0142.316] GetProcAddress (hModule=0x6f1f0000, lpProcName="InitHelperDll") returned 0x6f1f1a70 [0142.316] InitHelperDll () returned 0x0 [0142.316] RegisterHelper () returned 0x0 [0142.316] GetProcessHeap () returned 0x1010000 [0142.316] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x3f0) returned 0x1030900 [0142.316] GetProcessHeap () returned 0x1010000 [0142.316] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x102dd40) returned 1 [0142.316] RegEnumValueW (in: hKey=0x108, dwIndex=0x4, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="dot3cfg", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0142.316] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxmontr.dll") returned -5 [0142.316] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxpromn.dll") returned -5 [0142.316] GetProcessHeap () returned 0x1010000 [0142.316] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x78) returned 0x1025bf8 [0142.317] GetProcessHeap () returned 0x1010000 [0142.317] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x10) returned 0x102d7f8 [0142.317] GetProcessHeap () returned 0x1010000 [0142.317] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x18) returned 0x101def0 [0142.317] _wcsupr (in: _String="dot3cfg.dll" | out: _String="DOT3CFG.DLL") returned="DOT3CFG.DLL" [0142.317] GetProcessHeap () returned 0x1010000 [0142.317] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10258f0) returned 1 [0142.317] LoadLibraryExW (lpLibFileName="DOT3CFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e5b0000 [0143.256] GetProcAddress (hModule=0x6e5b0000, lpProcName="InitHelperDll") returned 0x6e5b3ae0 [0143.256] InitHelperDll () returned 0x0 [0143.256] RegisterHelper () returned 0x0 [0143.256] GetProcessHeap () returned 0x1010000 [0143.256] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x438) returned 0x102d9d8 [0143.256] GetProcessHeap () returned 0x1010000 [0143.256] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1030900) returned 1 [0143.257] RegEnumValueW (in: hKey=0x108, dwIndex=0x5, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="fwcfg", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0143.257] _wcsicmp (_String1="fwcfg.dll", _String2="ipxmontr.dll") returned -3 [0143.257] _wcsicmp (_String1="fwcfg.dll", _String2="ipxpromn.dll") returned -3 [0143.257] GetProcessHeap () returned 0x1010000 [0143.257] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8c) returned 0x1026d98 [0143.257] GetProcessHeap () returned 0x1010000 [0143.257] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x102d8e8 [0143.257] GetProcessHeap () returned 0x1010000 [0143.257] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x14) returned 0x101ded0 [0143.257] _wcsupr (in: _String="fwcfg.dll" | out: _String="FWCFG.DLL") returned="FWCFG.DLL" [0143.257] GetProcessHeap () returned 0x1010000 [0143.257] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1025bf8) returned 1 [0143.257] LoadLibraryExW (lpLibFileName="FWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6efa0000 [0143.539] GetProcAddress (hModule=0x6efa0000, lpProcName="InitHelperDll") returned 0x6efa22e0 [0143.539] InitHelperDll () returned 0x0 [0143.539] RegisterHelper () returned 0x0 [0143.539] GetProcessHeap () returned 0x1010000 [0143.539] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x480) returned 0x1030900 [0143.539] GetProcessHeap () returned 0x1010000 [0143.539] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x102d9d8) returned 1 [0143.539] RegEnumValueW (in: hKey=0x108, dwIndex=0x6, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="hnetmon", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0143.539] _wcsicmp (_String1="hnetmon.dll", _String2="ipxmontr.dll") returned -1 [0143.539] _wcsicmp (_String1="hnetmon.dll", _String2="ipxpromn.dll") returned -1 [0143.539] GetProcessHeap () returned 0x1010000 [0143.539] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xa0) returned 0x10261a0 [0143.539] GetProcessHeap () returned 0x1010000 [0143.539] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x10) returned 0x102d960 [0143.539] GetProcessHeap () returned 0x1010000 [0143.539] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x18) returned 0x101dd10 [0143.539] _wcsupr (in: _String="hnetmon.dll" | out: _String="HNETMON.DLL") returned="HNETMON.DLL" [0143.539] GetProcessHeap () returned 0x1010000 [0143.539] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1026d98) returned 1 [0143.539] LoadLibraryExW (lpLibFileName="HNETMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e470000 [0144.592] GetProcAddress (hModule=0x6e470000, lpProcName="InitHelperDll") returned 0x6e4724a0 [0144.592] InitHelperDll () returned 0x0 [0144.592] RegisterHelper () returned 0x0 [0144.592] GetProcessHeap () returned 0x1010000 [0144.593] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x4c8) returned 0x1035608 [0144.593] GetProcessHeap () returned 0x1010000 [0144.593] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1030900) returned 1 [0144.593] RegEnumValueW (in: hKey=0x108, dwIndex=0x7, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="netiohlp", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0144.593] _wcsicmp (_String1="netiohlp.dll", _String2="ipxmontr.dll") returned 5 [0144.593] _wcsicmp (_String1="netiohlp.dll", _String2="ipxpromn.dll") returned 5 [0144.593] GetProcessHeap () returned 0x1010000 [0144.593] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xb4) returned 0x10276a8 [0144.593] GetProcessHeap () returned 0x1010000 [0144.593] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x12) returned 0x101dd90 [0144.593] GetProcessHeap () returned 0x1010000 [0144.593] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1a) returned 0x102d510 [0144.593] _wcsupr (in: _String="netiohlp.dll" | out: _String="NETIOHLP.DLL") returned="NETIOHLP.DLL" [0144.593] GetProcessHeap () returned 0x1010000 [0144.593] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10261a0) returned 1 [0144.593] LoadLibraryExW (lpLibFileName="NETIOHLP.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e190000 [0145.951] GetProcAddress (hModule=0x6e190000, lpProcName="InitHelperDll") returned 0x6e1a6c00 [0145.951] InitHelperDll () returned 0x0 [0145.951] RegisterHelper () returned 0x0 [0145.952] GetProcessHeap () returned 0x1010000 [0145.952] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x510) returned 0x1035ad8 [0145.952] GetProcessHeap () returned 0x1010000 [0145.952] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1035608) returned 1 [0145.952] RegisterHelper () returned 0x0 [0145.952] GetProcessHeap () returned 0x1010000 [0145.952] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x558) returned 0x1035ff0 [0145.952] GetProcessHeap () returned 0x1010000 [0145.952] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1035ad8) returned 1 [0145.952] RegisterHelper () returned 0x0 [0145.952] GetProcessHeap () returned 0x1010000 [0145.952] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x5a0) returned 0x1035608 [0145.952] GetProcessHeap () returned 0x1010000 [0145.952] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1035ff0) returned 1 [0145.952] RegisterHelper () returned 0x0 [0145.952] GetProcessHeap () returned 0x1010000 [0145.953] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x5e8) returned 0x1035bb0 [0145.953] GetProcessHeap () returned 0x1010000 [0145.953] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1035608) returned 1 [0145.953] RegisterHelper () returned 0x0 [0145.953] GetProcessHeap () returned 0x1010000 [0145.953] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x630) returned 0x10361a0 [0145.953] GetProcessHeap () returned 0x1010000 [0145.953] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1035bb0) returned 1 [0145.953] RegisterHelper () returned 0x0 [0145.953] GetProcessHeap () returned 0x1010000 [0145.953] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x678) returned 0x10367d8 [0145.953] GetProcessHeap () returned 0x1010000 [0145.953] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10361a0) returned 1 [0145.953] RegisterHelper () returned 0x0 [0145.953] GetProcessHeap () returned 0x1010000 [0145.953] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x6c0) returned 0x1035608 [0145.953] GetProcessHeap () returned 0x1010000 [0145.953] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10367d8) returned 1 [0145.953] RegisterHelper () returned 0x0 [0145.953] GetProcessHeap () returned 0x1010000 [0145.953] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x708) returned 0x1035cd0 [0145.953] GetProcessHeap () returned 0x1010000 [0145.953] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1035608) returned 1 [0145.953] RegisterHelper () returned 0x0 [0145.953] GetProcessHeap () returned 0x1010000 [0145.954] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x750) returned 0x10363e0 [0145.954] GetProcessHeap () returned 0x1010000 [0145.954] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1035cd0) returned 1 [0145.954] RegEnumValueW (in: hKey=0x108, dwIndex=0x8, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="nshhttp", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0145.954] _wcsicmp (_String1="nshhttp.dll", _String2="ipxmontr.dll") returned 5 [0145.954] _wcsicmp (_String1="nshhttp.dll", _String2="ipxpromn.dll") returned 5 [0145.954] GetProcessHeap () returned 0x1010000 [0145.954] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc8) returned 0x10246e8 [0145.954] GetProcessHeap () returned 0x1010000 [0145.954] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x10) returned 0x102dcc0 [0145.954] GetProcessHeap () returned 0x1010000 [0145.954] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x18) returned 0x101ddf0 [0145.954] _wcsupr (in: _String="nshhttp.dll" | out: _String="NSHHTTP.DLL") returned="NSHHTTP.DLL" [0145.954] GetProcessHeap () returned 0x1010000 [0145.954] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10276a8) returned 1 [0145.954] LoadLibraryExW (lpLibFileName="NSHHTTP.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e0f0000 [0146.260] GetProcAddress (hModule=0x6e0f0000, lpProcName="InitHelperDll") returned 0x6e0f1c50 [0146.260] InitHelperDll () returned 0x0 [0146.260] RegisterHelper () returned 0x0 [0146.260] GetProcessHeap () returned 0x1010000 [0146.260] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x798) returned 0x1035608 [0146.260] GetProcessHeap () returned 0x1010000 [0146.260] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10363e0) returned 1 [0146.261] RegEnumValueW (in: hKey=0x108, dwIndex=0x9, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="nshipsec", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0146.261] _wcsicmp (_String1="nshipsec.dll", _String2="ipxmontr.dll") returned 5 [0146.261] _wcsicmp (_String1="nshipsec.dll", _String2="ipxpromn.dll") returned 5 [0146.261] GetProcessHeap () returned 0x1010000 [0146.261] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xdc) returned 0x10276a8 [0146.261] GetProcessHeap () returned 0x1010000 [0146.261] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x12) returned 0x101dd70 [0146.261] GetProcessHeap () returned 0x1010000 [0146.261] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1a) returned 0x102d560 [0146.261] _wcsupr (in: _String="nshipsec.dll" | out: _String="NSHIPSEC.DLL") returned="NSHIPSEC.DLL" [0146.261] GetProcessHeap () returned 0x1010000 [0146.261] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10246e8) returned 1 [0146.261] LoadLibraryExW (lpLibFileName="NSHIPSEC.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e070000 [0148.326] GetProcAddress (hModule=0x6e070000, lpProcName="InitHelperDll") returned 0x6e073990 [0148.327] InitHelperDll () returned 0x0 [0148.327] RegisterHelper () returned 0x0 [0148.327] GetProcessHeap () returned 0x1010000 [0148.327] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x7e0) returned 0x1037b40 [0148.327] GetProcessHeap () returned 0x1010000 [0148.327] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1035608) returned 1 [0148.327] RegisterHelper () returned 0x0 [0148.327] GetProcessHeap () returned 0x1010000 [0148.327] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x828) returned 0x1038328 [0148.327] GetProcessHeap () returned 0x1010000 [0148.327] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1037b40) returned 1 [0148.327] RegisterHelper () returned 0x0 [0148.327] GetProcessHeap () returned 0x1010000 [0148.327] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x870) returned 0x1038b58 [0148.327] GetProcessHeap () returned 0x1010000 [0148.327] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1038328) returned 1 [0148.335] RegEnumValueW (in: hKey=0x108, dwIndex=0xa, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="nshwfp", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0148.335] _wcsicmp (_String1="nshwfp.dll", _String2="ipxmontr.dll") returned 5 [0148.335] _wcsicmp (_String1="nshwfp.dll", _String2="ipxpromn.dll") returned 5 [0148.335] GetProcessHeap () returned 0x1010000 [0148.335] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xf0) returned 0x1039c80 [0148.335] GetProcessHeap () returned 0x1010000 [0148.335] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xe) returned 0x1036760 [0148.335] GetProcessHeap () returned 0x1010000 [0148.335] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x16) returned 0x101dd30 [0148.335] _wcsupr (in: _String="nshwfp.dll" | out: _String="NSHWFP.DLL") returned="NSHWFP.DLL" [0148.335] GetProcessHeap () returned 0x1010000 [0148.335] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10276a8) returned 1 [0148.336] LoadLibraryExW (lpLibFileName="NSHWFP.DLL", hFile=0x0, dwFlags=0x0) returned 0x6deb0000 [0149.399] GetProcAddress (hModule=0x6deb0000, lpProcName="InitHelperDll") returned 0x6df06ab0 [0149.399] InitHelperDll () returned 0x0 [0149.400] RegisterHelper () returned 0x0 [0149.400] GetProcessHeap () returned 0x1010000 [0149.400] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8b8) returned 0x1037b40 [0149.400] GetProcessHeap () returned 0x1010000 [0149.400] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1038b58) returned 1 [0149.400] RegEnumValueW (in: hKey=0x108, dwIndex=0xb, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="p2pnetsh", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0149.400] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxmontr.dll") returned 7 [0149.400] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxpromn.dll") returned 7 [0149.400] GetProcessHeap () returned 0x1010000 [0149.400] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x104) returned 0x1039d78 [0149.400] GetProcessHeap () returned 0x1010000 [0149.400] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x12) returned 0x101df70 [0149.401] GetProcessHeap () returned 0x1010000 [0149.401] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1a) returned 0x102d3a8 [0149.401] _wcsupr (in: _String="p2pnetsh.dll" | out: _String="P2PNETSH.DLL") returned="P2PNETSH.DLL" [0149.401] GetProcessHeap () returned 0x1010000 [0149.401] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1039c80) returned 1 [0149.401] LoadLibraryExW (lpLibFileName="P2PNETSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x6de60000 [0150.379] GetProcAddress (hModule=0x6de60000, lpProcName="InitHelperDll") returned 0x6de65910 [0150.379] InitHelperDll () returned 0x0 [0150.379] RegisterHelper () returned 0x0 [0150.379] GetProcessHeap () returned 0x1010000 [0150.379] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x900) returned 0x1038400 [0150.379] GetProcessHeap () returned 0x1010000 [0150.379] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1037b40) returned 1 [0150.379] RegisterHelper () returned 0x0 [0150.379] GetProcessHeap () returned 0x1010000 [0150.379] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x948) returned 0x103cf78 [0150.379] GetProcessHeap () returned 0x1010000 [0150.379] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1038400) returned 1 [0150.379] RegisterHelper () returned 0x0 [0150.379] GetProcessHeap () returned 0x1010000 [0150.379] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x990) returned 0x103d8c8 [0150.380] GetProcessHeap () returned 0x1010000 [0150.380] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103cf78) returned 1 [0150.380] RegisterHelper () returned 0x0 [0150.380] GetProcessHeap () returned 0x1010000 [0150.380] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x9d8) returned 0x103e260 [0150.380] GetProcessHeap () returned 0x1010000 [0150.380] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103d8c8) returned 1 [0150.718] RegisterHelper () returned 0x0 [0150.718] GetProcessHeap () returned 0x1010000 [0150.718] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xa20) returned 0x103cf78 [0150.718] GetProcessHeap () returned 0x1010000 [0150.718] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103e260) returned 1 [0150.718] RegisterHelper () returned 0x0 [0150.718] GetProcessHeap () returned 0x1010000 [0150.718] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xa68) returned 0x103d9a0 [0150.718] GetProcessHeap () returned 0x1010000 [0150.718] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103cf78) returned 1 [0150.718] RegisterHelper () returned 0x0 [0150.718] GetProcessHeap () returned 0x1010000 [0150.718] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xab0) returned 0x103e410 [0150.718] GetProcessHeap () returned 0x1010000 [0150.718] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103d9a0) returned 1 [0150.838] RegisterHelper () returned 0x0 [0150.838] GetProcessHeap () returned 0x1010000 [0150.838] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xaf8) returned 0x103cf78 [0150.838] GetProcessHeap () returned 0x1010000 [0150.838] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103e410) returned 1 [0150.839] RegEnumValueW (in: hKey=0x108, dwIndex=0xc, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="rpc", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0150.839] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxmontr.dll") returned 9 [0150.839] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxpromn.dll") returned 9 [0150.839] GetProcessHeap () returned 0x1010000 [0150.839] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x118) returned 0x1035a08 [0150.839] GetProcessHeap () returned 0x1010000 [0150.839] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x8) returned 0x101da30 [0150.839] GetProcessHeap () returned 0x1010000 [0150.839] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x16) returned 0x101de30 [0150.839] _wcsupr (in: _String="rpcnsh.dll" | out: _String="RPCNSH.DLL") returned="RPCNSH.DLL" [0150.839] GetProcessHeap () returned 0x1010000 [0150.839] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1039d78) returned 1 [0150.839] LoadLibraryExW (lpLibFileName="RPCNSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x6de20000 [0150.858] GetProcAddress (hModule=0x6de20000, lpProcName="InitHelperDll") returned 0x6de22ae0 [0150.858] InitHelperDll () returned 0x0 [0150.858] RegisterHelper () returned 0x0 [0150.858] GetProcessHeap () returned 0x1010000 [0150.858] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xb40) returned 0x103da78 [0150.858] GetProcessHeap () returned 0x1010000 [0150.858] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103cf78) returned 1 [0150.858] RegisterHelper () returned 0x0 [0150.858] GetProcessHeap () returned 0x1010000 [0150.858] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xb88) returned 0x1037b40 [0150.858] GetProcessHeap () returned 0x1010000 [0150.858] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103da78) returned 1 [0150.858] RegEnumValueW (in: hKey=0x108, dwIndex=0xd, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="whhelper", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0150.858] _wcsicmp (_String1="whhelper.dll", _String2="ipxmontr.dll") returned 14 [0150.858] _wcsicmp (_String1="whhelper.dll", _String2="ipxpromn.dll") returned 14 [0150.858] GetProcessHeap () returned 0x1010000 [0150.859] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x12c) returned 0x1039c80 [0150.859] GetProcessHeap () returned 0x1010000 [0150.859] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x12) returned 0x101de70 [0150.859] GetProcessHeap () returned 0x1010000 [0150.859] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1a) returned 0x10396a8 [0150.859] _wcsupr (in: _String="whhelper.dll" | out: _String="WHHELPER.DLL") returned="WHHELPER.DLL" [0150.859] GetProcessHeap () returned 0x1010000 [0150.859] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1035a08) returned 1 [0150.859] LoadLibraryExW (lpLibFileName="WHHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x6de10000 [0151.659] GetProcAddress (hModule=0x6de10000, lpProcName="InitHelperDll") returned 0x6de118d0 [0151.659] InitHelperDll () returned 0x0 [0151.659] RegisterHelper () returned 0x0 [0151.659] GetProcessHeap () returned 0x1010000 [0151.659] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xbd0) returned 0x10386d0 [0151.660] GetProcessHeap () returned 0x1010000 [0151.660] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1037b40) returned 1 [0151.660] RegEnumValueW (in: hKey=0x108, dwIndex=0xe, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="wlancfg", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0151.660] _wcsicmp (_String1="wlancfg.dll", _String2="ipxmontr.dll") returned 14 [0151.660] _wcsicmp (_String1="wlancfg.dll", _String2="ipxpromn.dll") returned 14 [0151.660] GetProcessHeap () returned 0x1010000 [0151.660] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x140) returned 0x1039db8 [0151.660] GetProcessHeap () returned 0x1010000 [0151.660] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x10) returned 0x1036988 [0151.660] GetProcessHeap () returned 0x1010000 [0151.660] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x18) returned 0x101ddb0 [0151.660] _wcsupr (in: _String="wlancfg.dll" | out: _String="WLANCFG.DLL") returned="WLANCFG.DLL" [0151.660] GetProcessHeap () returned 0x1010000 [0151.660] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1039c80) returned 1 [0151.660] LoadLibraryExW (lpLibFileName="WLANCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6dd20000 [0153.234] GetProcAddress (hModule=0x6dd20000, lpProcName="InitHelperDll") returned 0x6dd2abb0 [0153.234] InitHelperDll () returned 0x0 [0153.234] RegisterHelper () returned 0x0 [0153.234] GetProcessHeap () returned 0x1010000 [0153.234] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc18) returned 0x103ff88 [0153.235] GetProcessHeap () returned 0x1010000 [0153.235] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10386d0) returned 1 [0153.235] RegEnumValueW (in: hKey=0x108, dwIndex=0xf, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="wshelper", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0153.235] _wcsicmp (_String1="wshelper.dll", _String2="ipxmontr.dll") returned 14 [0153.235] _wcsicmp (_String1="wshelper.dll", _String2="ipxpromn.dll") returned 14 [0153.235] GetProcessHeap () returned 0x1010000 [0153.235] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x154) returned 0x1035a08 [0153.235] GetProcessHeap () returned 0x1010000 [0153.235] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x12) returned 0x101deb0 [0153.235] GetProcessHeap () returned 0x1010000 [0153.235] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1a) returned 0x10397e8 [0153.235] _wcsupr (in: _String="wshelper.dll" | out: _String="WSHELPER.DLL") returned="WSHELPER.DLL" [0153.235] GetProcessHeap () returned 0x1010000 [0153.235] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1039db8) returned 1 [0153.235] LoadLibraryExW (lpLibFileName="WSHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x6db30000 [0154.418] GetProcAddress (hModule=0x6db30000, lpProcName="InitHelperDll") returned 0x6db31720 [0154.418] InitHelperDll () returned 0x0 [0154.418] RegisterHelper () returned 0x0 [0154.418] GetProcessHeap () returned 0x1010000 [0154.418] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc60) returned 0x10423c0 [0154.418] GetProcessHeap () returned 0x1010000 [0154.418] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103ff88) returned 1 [0154.418] RegEnumValueW (in: hKey=0x108, dwIndex=0x10, lpValueName=0x1013938, lpcchValueName=0xda795c, lpReserved=0x0, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960 | out: lpValueName="peerdistsh", lpcchValueName=0xda795c, lpType=0x0, lpData=0x1013958, lpcbData=0xda7960) returned 0x0 [0154.419] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxmontr.dll") returned 7 [0154.419] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxpromn.dll") returned 7 [0154.419] GetProcessHeap () returned 0x1010000 [0154.419] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x168) returned 0x1039d50 [0154.419] GetProcessHeap () returned 0x1010000 [0154.419] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x16) returned 0x1038b78 [0154.419] GetProcessHeap () returned 0x1010000 [0154.419] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1e) returned 0x1039810 [0154.419] _wcsupr (in: _String="peerdistsh.dll" | out: _String="PEERDISTSH.DLL") returned="PEERDISTSH.DLL" [0154.419] GetProcessHeap () returned 0x1010000 [0154.419] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1035a08) returned 1 [0154.419] LoadLibraryExW (lpLibFileName="PEERDISTSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x6da80000 [0154.939] GetProcAddress (hModule=0x6da80000, lpProcName="InitHelperDll") returned 0x6da9d390 [0154.939] InitHelperDll () returned 0x0 [0154.940] RegisterHelper () returned 0x0 [0154.940] GetProcessHeap () returned 0x1010000 [0154.940] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xca8) returned 0x1043028 [0154.940] GetProcessHeap () returned 0x1010000 [0154.940] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10423c0) returned 1 [0154.940] RegisterHelper () returned 0x0 [0154.940] GetProcessHeap () returned 0x1010000 [0154.940] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xcf0) returned 0x1043cd8 [0154.941] GetProcessHeap () returned 0x1010000 [0154.941] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1043028) returned 1 [0154.941] RegCloseKey (hKey=0x108) returned 0x0 [0154.941] GetProcessHeap () returned 0x1010000 [0154.941] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1013938) returned 1 [0154.941] GetProcessHeap () returned 0x1010000 [0154.941] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1013958) returned 1 [0154.942] GetProcessHeap () returned 0x1010000 [0154.942] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x48) returned 0x1026798 [0154.942] GetProcessHeap () returned 0x1010000 [0154.942] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0154.942] RegisterContext () returned 0x0 [0154.943] GetProcessHeap () returned 0x1010000 [0154.943] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x48) returned 0x1026838 [0154.943] GetProcessHeap () returned 0x1010000 [0154.943] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0154.943] RegisterContext () returned 0x0 [0154.945] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0154.945] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0154.945] GetProcessHeap () returned 0x1010000 [0154.945] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x90) returned 0x103fb88 [0154.945] GetProcessHeap () returned 0x1010000 [0154.945] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1026838) returned 1 [0155.184] RegisterContext () returned 0x0 [0155.184] GetProcessHeap () returned 0x1010000 [0155.185] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x48) returned 0x1026838 [0155.185] GetProcessHeap () returned 0x1010000 [0155.185] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0155.185] RegisterContext () returned 0x0 [0155.185] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0155.185] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0155.185] GetProcessHeap () returned 0x1010000 [0155.185] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x90) returned 0x103f890 [0155.185] GetProcessHeap () returned 0x1010000 [0155.185] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1026838) returned 1 [0155.185] RegisterContext () returned 0x0 [0155.186] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0155.186] _wcsicmp (_String1="aaaa", _String2="ipv6") returned -8 [0155.186] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0155.186] GetProcessHeap () returned 0x1010000 [0155.186] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xd8) returned 0x10487b0 [0155.186] GetProcessHeap () returned 0x1010000 [0155.186] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103f890) returned 1 [0155.187] RegisterContext () returned 0x0 [0155.187] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0155.187] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0155.187] _wcsicmp (_String1="diagnostics", _String2="ipv6") returned -5 [0155.187] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0155.187] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0155.187] GetProcessHeap () returned 0x1010000 [0155.187] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x120) returned 0x1048890 [0155.187] GetProcessHeap () returned 0x1010000 [0155.187] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10487b0) returned 1 [0155.188] RegisterContext () returned 0x0 [0155.188] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0155.188] _wcsicmp (_String1="advfirewall", _String2="ras") returned -17 [0155.188] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0155.188] GetProcessHeap () returned 0x1010000 [0155.188] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xd8) returned 0x10487b0 [0155.188] GetProcessHeap () returned 0x1010000 [0155.188] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103fb88) returned 1 [0155.188] RegisterContext () returned 0x0 [0155.188] GetProcessHeap () returned 0x1010000 [0155.188] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x48) returned 0x1026838 [0155.188] GetProcessHeap () returned 0x1010000 [0155.188] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0155.188] RegisterContext () returned 0x0 [0155.188] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0155.188] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0155.188] GetProcessHeap () returned 0x1010000 [0155.188] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x90) returned 0x103f890 [0155.188] GetProcessHeap () returned 0x1010000 [0155.188] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1026838) returned 1 [0155.189] RegisterContext () returned 0x0 [0155.189] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0155.189] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0155.189] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0155.189] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0155.189] GetProcessHeap () returned 0x1010000 [0155.189] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xd8) returned 0x10489b8 [0155.189] GetProcessHeap () returned 0x1010000 [0155.189] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103f890) returned 1 [0155.189] RegisterContext () returned 0x0 [0155.189] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0155.189] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0155.189] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0155.189] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0155.189] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0155.189] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0155.189] GetProcessHeap () returned 0x1010000 [0155.189] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x120) returned 0x1048a98 [0155.189] GetProcessHeap () returned 0x1010000 [0155.189] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10489b8) returned 1 [0155.189] RegisterContext () returned 0x0 [0155.189] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0155.189] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0155.189] _wcsicmp (_String1="dhcpclient", _String2="ras") returned -14 [0155.189] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0155.189] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0155.190] GetProcessHeap () returned 0x1010000 [0155.190] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x120) returned 0x1048bc0 [0155.190] GetProcessHeap () returned 0x1010000 [0155.190] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10487b0) returned 1 [0155.190] RegisterContext () returned 0x0 [0155.190] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0155.190] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0155.190] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0155.190] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0155.190] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0155.190] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0155.190] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0155.190] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0155.190] GetProcessHeap () returned 0x1010000 [0155.190] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x168) returned 0x1048ce8 [0155.190] GetProcessHeap () returned 0x1010000 [0155.190] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1048bc0) returned 1 [0155.194] RegisterContext () returned 0x0 [0155.194] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0155.194] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0155.194] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0155.194] _wcsicmp (_String1="firewall", _String2="lan") returned -6 [0155.194] _wcsicmp (_String1="firewall", _String2="ras") returned -12 [0155.194] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0155.194] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0155.194] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0155.194] GetProcessHeap () returned 0x1010000 [0155.194] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1b0) returned 0x103ff88 [0155.194] GetProcessHeap () returned 0x1010000 [0155.194] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1048ce8) returned 1 [0155.195] RegisterContext () returned 0x0 [0155.195] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0155.195] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0155.195] _wcsicmp (_String1="bridge", _String2="firewall") returned -4 [0155.195] _wcsicmp (_String1="bridge", _String2="interface") returned -7 [0155.195] _wcsicmp (_String1="bridge", _String2="lan") returned -10 [0155.195] _wcsicmp (_String1="bridge", _String2="ras") returned -16 [0155.195] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0155.195] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0155.195] GetProcessHeap () returned 0x1010000 [0155.195] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1f8) returned 0x1048bc0 [0155.195] GetProcessHeap () returned 0x1010000 [0155.195] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103ff88) returned 1 [0155.195] RegisterContext () returned 0x0 [0155.195] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0155.195] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0155.195] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0155.195] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0155.195] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0155.195] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0155.195] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0155.195] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0155.195] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0155.195] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0155.195] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0155.196] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0155.196] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0155.196] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0155.196] GetProcessHeap () returned 0x1010000 [0155.196] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x240) returned 0x103ff88 [0155.196] GetProcessHeap () returned 0x1010000 [0155.196] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1048bc0) returned 1 [0155.196] RegisterContext () returned 0x0 [0155.196] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0155.196] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0155.196] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0155.196] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0155.196] _wcsicmp (_String1="dnsclient", _String2="interface") returned -5 [0155.196] _wcsicmp (_String1="dnsclient", _String2="lan") returned -8 [0155.196] _wcsicmp (_String1="dnsclient", _String2="netio") returned -10 [0155.196] _wcsicmp (_String1="dnsclient", _String2="ras") returned -14 [0155.196] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0155.196] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0155.196] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0155.196] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0155.196] GetProcessHeap () returned 0x1010000 [0155.196] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x288) returned 0x1048bc0 [0155.197] GetProcessHeap () returned 0x1010000 [0155.197] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103ff88) returned 1 [0155.197] RegisterContext () returned 0x0 [0155.197] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0155.197] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0155.197] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0155.197] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0155.197] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0155.197] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0155.197] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0155.197] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0155.197] _wcsicmp (_String1="namespace", _String2="ras") returned -4 [0155.197] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0155.197] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0155.197] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0155.197] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0155.197] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0155.197] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0155.197] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0155.197] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0155.197] GetProcessHeap () returned 0x1010000 [0155.197] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x2d0) returned 0x103ff88 [0155.197] GetProcessHeap () returned 0x1010000 [0155.197] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1048bc0) returned 1 [0155.197] RegisterContext () returned 0x0 [0155.197] GetProcessHeap () returned 0x1010000 [0155.198] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x48) returned 0x1026838 [0155.198] GetProcessHeap () returned 0x1010000 [0155.198] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0155.198] RegisterContext () returned 0x0 [0155.198] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0155.198] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0155.198] GetProcessHeap () returned 0x1010000 [0155.198] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x90) returned 0x103fd50 [0155.198] GetProcessHeap () returned 0x1010000 [0155.198] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1026838) returned 1 [0155.198] RegisterContext () returned 0x0 [0155.198] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0155.198] _wcsicmp (_String1="6to4", _String2="ipv6") returned -51 [0155.198] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0155.198] GetProcessHeap () returned 0x1010000 [0155.198] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xd8) returned 0x10487b0 [0155.198] GetProcessHeap () returned 0x1010000 [0155.198] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103fd50) returned 1 [0155.198] RegisterContext () returned 0x0 [0155.198] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0155.198] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0155.198] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0155.198] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0155.198] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0155.198] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0155.199] GetProcessHeap () returned 0x1010000 [0155.199] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x120) returned 0x1048bc0 [0155.199] GetProcessHeap () returned 0x1010000 [0155.199] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10487b0) returned 1 [0155.199] RegisterContext () returned 0x0 [0155.199] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0155.199] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0155.199] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0155.199] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0155.199] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0155.199] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0155.199] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0155.199] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0155.199] GetProcessHeap () returned 0x1010000 [0155.199] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x168) returned 0x1048ce8 [0155.199] GetProcessHeap () returned 0x1010000 [0155.199] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1048bc0) returned 1 [0155.199] RegisterContext () returned 0x0 [0155.199] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0155.200] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0155.200] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0155.200] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0155.200] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0155.200] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0155.200] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0155.200] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0155.200] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0155.200] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0155.200] GetProcessHeap () returned 0x1010000 [0155.200] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1b0) returned 0x1040260 [0155.200] GetProcessHeap () returned 0x1010000 [0155.200] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1048ce8) returned 1 [0155.200] RegisterContext () returned 0x0 [0155.200] GetProcessHeap () returned 0x1010000 [0155.200] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x48) returned 0x1026838 [0155.200] GetProcessHeap () returned 0x1010000 [0155.200] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0155.200] RegisterContext () returned 0x0 [0155.200] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0155.200] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0155.200] GetProcessHeap () returned 0x1010000 [0155.200] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x90) returned 0x103f7f8 [0155.200] GetProcessHeap () returned 0x1010000 [0155.200] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1026838) returned 1 [0155.200] RegisterContext () returned 0x0 [0155.200] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0155.200] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0155.200] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0155.201] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0155.201] _wcsicmp (_String1="portproxy", _String2="portproxy") returned 0 [0155.201] RegisterContext () returned 0x0 [0155.201] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0155.201] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0155.201] _wcsicmp (_String1="httpstunnel", _String2="ipv6") returned -1 [0155.201] _wcsicmp (_String1="httpstunnel", _String2="isatap") returned -1 [0155.201] _wcsicmp (_String1="httpstunnel", _String2="portproxy") returned -8 [0155.201] _wcsicmp (_String1="httpstunnel", _String2="teredo") returned -12 [0155.201] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0155.201] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0155.201] GetProcessHeap () returned 0x1010000 [0155.201] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x1f8) returned 0x1048bc0 [0155.201] GetProcessHeap () returned 0x1010000 [0155.201] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1040260) returned 1 [0155.201] RegisterContext () returned 0x0 [0155.201] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0155.201] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0155.201] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0155.201] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0155.201] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0155.201] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0155.201] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0155.201] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0155.201] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0155.201] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0155.201] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0155.201] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0155.201] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0155.202] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0155.202] GetProcessHeap () returned 0x1010000 [0155.202] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x240) returned 0x1040260 [0155.202] GetProcessHeap () returned 0x1010000 [0155.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1048bc0) returned 1 [0155.202] RegisterContext () returned 0x0 [0155.202] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0155.202] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0155.202] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0155.202] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0155.202] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0155.202] _wcsicmp (_String1="http", _String2="interface") returned -1 [0155.202] _wcsicmp (_String1="http", _String2="lan") returned -4 [0155.202] _wcsicmp (_String1="http", _String2="namespace") returned -6 [0155.202] _wcsicmp (_String1="http", _String2="netio") returned -6 [0155.202] _wcsicmp (_String1="http", _String2="ras") returned -10 [0155.202] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0155.202] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0155.202] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0155.202] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0155.202] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0155.202] _wcsicmp (_String1="http", _String2="interface") returned -1 [0155.202] GetProcessHeap () returned 0x1010000 [0155.202] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x318) returned 0x1048bc0 [0155.202] GetProcessHeap () returned 0x1010000 [0155.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103ff88) returned 1 [0155.203] RegisterContext () returned 0x0 [0155.203] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0155.203] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0155.203] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0155.203] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0155.203] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0155.203] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0155.203] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0155.203] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0155.203] _wcsicmp (_String1="ipsec", _String2="namespace") returned -5 [0155.203] _wcsicmp (_String1="ipsec", _String2="netio") returned -5 [0155.203] _wcsicmp (_String1="ipsec", _String2="ras") returned -9 [0155.203] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0155.203] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0155.203] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0155.203] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0155.203] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0155.204] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0155.204] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0155.204] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0155.204] GetProcessHeap () returned 0x1010000 [0155.204] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x360) returned 0x10404a8 [0155.204] GetProcessHeap () returned 0x1010000 [0155.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1048bc0) returned 1 [0155.204] RegisterContext () returned 0x0 [0155.204] GetProcessHeap () returned 0x1010000 [0155.204] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x48) returned 0x1026838 [0155.204] GetProcessHeap () returned 0x1010000 [0155.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0155.204] RegisterContext () returned 0x0 [0155.204] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0155.204] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0155.204] GetProcessHeap () returned 0x1010000 [0155.204] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x90) returned 0x103f208 [0155.204] GetProcessHeap () returned 0x1010000 [0155.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1026838) returned 1 [0155.204] RegisterContext () returned 0x0 [0155.204] _wcsicmp (_String1="static", _String2="dynamic") returned 15 [0155.204] _wcsicmp (_String1="static", _String2="static") returned 0 [0155.204] RegisterContext () returned 0x0 [0155.204] _wcsicmp (_String1="dynamic", _String2="dynamic") returned 0 [0155.205] RegisterContext () returned 0x0 [0155.206] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0155.206] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0155.206] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0155.206] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0155.206] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0155.207] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0155.207] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0155.207] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0155.207] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0155.207] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0155.207] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0155.207] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0155.207] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0155.207] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0155.207] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0155.207] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0155.207] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0155.207] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0155.207] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0155.207] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0155.207] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0155.207] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0155.207] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0155.207] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0155.207] GetProcessHeap () returned 0x1010000 [0155.207] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x3a8) returned 0x1048bc0 [0155.207] GetProcessHeap () returned 0x1010000 [0155.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10404a8) returned 1 [0155.210] RegisterContext () returned 0x0 [0155.210] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0155.210] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0155.210] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0155.210] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0155.210] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0155.210] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0155.210] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0155.210] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0155.210] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0155.210] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0155.210] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0155.210] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0155.210] _wcsicmp (_String1="p2p", _String2="wfp") returned -7 [0155.210] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0155.210] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0155.210] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0155.210] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0155.210] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0155.210] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0155.210] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0155.210] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0155.210] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0155.210] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0155.210] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0155.210] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0155.210] GetProcessHeap () returned 0x1010000 [0155.210] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x3f0) returned 0x10404a8 [0155.210] GetProcessHeap () returned 0x1010000 [0155.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1048bc0) returned 1 [0155.211] RegisterContext () returned 0x0 [0155.211] GetProcessHeap () returned 0x1010000 [0155.211] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x48) returned 0x1026838 [0155.211] GetProcessHeap () returned 0x1010000 [0155.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0155.217] RegisterContext () returned 0x0 [0155.217] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0155.217] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0155.217] GetProcessHeap () returned 0x1010000 [0155.217] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x90) returned 0x103f3d0 [0155.217] GetProcessHeap () returned 0x1010000 [0155.217] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1026838) returned 1 [0155.217] RegisterContext () returned 0x0 [0155.217] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0155.218] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0155.218] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0155.218] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0155.218] GetProcessHeap () returned 0x1010000 [0155.218] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xd8) returned 0x10487b0 [0155.218] GetProcessHeap () returned 0x1010000 [0155.218] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103f3d0) returned 1 [0155.218] RegisterContext () returned 0x0 [0155.218] GetProcessHeap () returned 0x1010000 [0155.218] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x48) returned 0x1026838 [0155.218] GetProcessHeap () returned 0x1010000 [0155.218] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0155.218] RegisterContext () returned 0x0 [0155.218] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0155.218] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0155.218] GetProcessHeap () returned 0x1010000 [0155.218] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x90) returned 0x103f3d0 [0155.218] GetProcessHeap () returned 0x1010000 [0155.218] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1026838) returned 1 [0155.218] RegisterContext () returned 0x0 [0155.218] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0155.218] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0155.218] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0155.218] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0155.218] GetProcessHeap () returned 0x1010000 [0155.218] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xd8) returned 0x10489b8 [0155.219] GetProcessHeap () returned 0x1010000 [0155.219] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x103f3d0) returned 1 [0155.219] RegisterContext () returned 0x0 [0155.219] GetProcessHeap () returned 0x1010000 [0155.219] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x48) returned 0x1026838 [0155.219] GetProcessHeap () returned 0x1010000 [0155.219] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0155.219] RegisterContext () returned 0x0 [0155.219] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0155.219] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0155.219] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0155.219] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0155.219] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0155.219] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0155.219] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0155.219] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0155.219] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0155.219] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0155.219] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0155.219] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0155.219] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0155.219] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0155.219] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0155.219] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0155.219] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0155.219] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0155.219] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0155.219] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0155.219] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0155.220] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0155.220] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0155.220] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0155.220] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0155.220] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0155.220] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0155.220] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0155.220] GetProcessHeap () returned 0x1010000 [0155.220] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x438) returned 0x104af78 [0155.220] GetProcessHeap () returned 0x1010000 [0155.220] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10404a8) returned 1 [0155.220] RegisterContext () returned 0x0 [0155.220] GetProcessHeap () returned 0x1010000 [0155.220] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x48) returned 0x1042e40 [0155.220] GetProcessHeap () returned 0x1010000 [0155.220] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0155.220] RegisterContext () returned 0x0 [0155.220] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0155.220] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0155.220] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0155.220] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0155.220] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0155.220] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0155.220] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0155.220] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0155.220] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0155.220] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0155.220] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0155.220] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0155.221] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0155.221] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0155.221] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0155.221] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0155.221] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0155.221] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0155.221] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0155.221] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0155.221] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0155.221] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0155.221] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0155.221] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0155.221] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0155.221] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0155.221] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0155.221] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0155.221] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0155.221] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0155.221] GetProcessHeap () returned 0x1010000 [0155.221] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x480) returned 0x10404a8 [0155.221] GetProcessHeap () returned 0x1010000 [0155.221] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x104af78) returned 1 [0155.370] RegisterContext () returned 0x0 [0155.371] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0155.371] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0155.371] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0155.371] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0155.371] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0155.371] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0155.371] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0155.371] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0155.371] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0155.371] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0155.371] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0155.371] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0155.371] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0155.371] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0155.371] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0155.371] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0155.371] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0155.371] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0155.371] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0155.371] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0155.371] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0155.371] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0155.371] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0155.371] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0155.371] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0155.371] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0155.371] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0155.371] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0155.371] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0155.371] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0155.371] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0155.371] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0155.371] GetProcessHeap () returned 0x1010000 [0155.371] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x4c8) returned 0x10437d0 [0155.372] GetProcessHeap () returned 0x1010000 [0155.372] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10404a8) returned 1 [0155.372] RegisterContext () returned 0x0 [0155.372] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0155.372] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0155.372] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0155.372] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0155.372] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0155.372] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0155.372] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0155.372] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0155.372] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0155.372] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0155.372] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0155.372] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0155.372] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0155.372] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0155.372] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0155.372] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0155.372] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0155.372] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0155.372] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0155.372] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0155.372] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0155.372] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0155.372] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0155.372] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0155.372] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0155.372] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0155.372] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0155.372] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0155.372] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0155.373] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0155.373] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0155.373] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0155.373] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0155.373] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0155.373] GetProcessHeap () returned 0x1010000 [0155.373] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x510) returned 0x10404a8 [0155.373] GetProcessHeap () returned 0x1010000 [0155.373] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10437d0) returned 1 [0157.314] RegisterContext () returned 0x0 [0157.314] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0157.314] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0157.314] _wcsicmp (_String1="branchcache", _String2="dhcpclient") returned -2 [0157.315] _wcsicmp (_String1="branchcache", _String2="dnsclient") returned -2 [0157.315] _wcsicmp (_String1="branchcache", _String2="firewall") returned -4 [0157.315] _wcsicmp (_String1="branchcache", _String2="http") returned -6 [0157.315] _wcsicmp (_String1="branchcache", _String2="interface") returned -7 [0157.315] _wcsicmp (_String1="branchcache", _String2="ipsec") returned -7 [0157.315] _wcsicmp (_String1="branchcache", _String2="lan") returned -10 [0157.315] _wcsicmp (_String1="branchcache", _String2="namespace") returned -12 [0157.315] _wcsicmp (_String1="branchcache", _String2="netio") returned -12 [0157.315] _wcsicmp (_String1="branchcache", _String2="p2p") returned -14 [0157.315] _wcsicmp (_String1="branchcache", _String2="ras") returned -16 [0157.315] _wcsicmp (_String1="branchcache", _String2="rpc") returned -16 [0157.315] _wcsicmp (_String1="branchcache", _String2="wfp") returned -21 [0157.315] _wcsicmp (_String1="branchcache", _String2="winhttp") returned -21 [0157.315] _wcsicmp (_String1="branchcache", _String2="winsock") returned -21 [0157.315] _wcsicmp (_String1="branchcache", _String2="wlan") returned -21 [0157.315] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0157.315] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0157.315] GetProcessHeap () returned 0x1010000 [0157.315] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x558) returned 0x104df88 [0157.315] GetProcessHeap () returned 0x1010000 [0157.315] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10404a8) returned 1 [0157.315] RegisterContext () returned 0x0 [0157.315] GetProcessHeap () returned 0x1010000 [0157.315] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x48) returned 0x1043160 [0157.315] GetProcessHeap () returned 0x1010000 [0157.315] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x0) returned 1 [0157.316] LoadLibraryExW (lpLibFileName="mprmsg.dll", hFile=0x0, dwFlags=0x800) returned 0x6d730000 [0157.339] GetProcAddress (hModule=0x6d730000, lpProcName="MprmsgGetErrorString") returned 0x6d731370 [0157.339] SetConsoleCtrlHandler (HandlerRoutine=0x17d8200, Add=1) returned 1 [0157.339] SetThreadUILanguage (LangId=0x0) returned 0xfd0409 [0157.617] _wcsicmp (_String1="wlan", _String2="-?") returned 74 [0157.617] _wcsicmp (_String1="wlan", _String2="-h") returned 74 [0157.617] _wcsicmp (_String1="wlan", _String2="?") returned 56 [0157.617] _wcsicmp (_String1="wlan", _String2="/?") returned 72 [0157.617] _wcsicmp (_String1="wlan", _String2="-v") returned 74 [0157.617] _wcsicmp (_String1="wlan", _String2="-a") returned 74 [0157.617] _wcsicmp (_String1="wlan", _String2="-c") returned 74 [0157.617] _wcsicmp (_String1="wlan", _String2="-f") returned 74 [0157.617] _wcsicmp (_String1="wlan", _String2="-r") returned 74 [0157.617] _wcsicmp (_String1="wlan", _String2="-u") returned 74 [0157.617] _wcsicmp (_String1="wlan", _String2="-p") returned 74 [0157.617] GetVersionExW (in: lpVersionInformation=0xda784c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xda784c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0157.617] _vsnwprintf (in: _Buffer=0x17e3780, _BufferCount=0x103, _Format="%d.%d.%d", _ArgList=0xda7838 | out: _Buffer="10.0.15063") returned 10 [0157.617] _vsnwprintf (in: _Buffer=0x17e3990, _BufferCount=0x103, _Format="%d", _ArgList=0xda7828 | out: _Buffer="15063") returned 5 [0157.617] _vsnwprintf (in: _Buffer=0x17e3ba0, _BufferCount=0x103, _Format="%d", _ArgList=0xda7818 | out: _Buffer="0") returned 1 [0157.617] _vsnwprintf (in: _Buffer=0x17e3db0, _BufferCount=0x103, _Format="%d", _ArgList=0xda7808 | out: _Buffer="0") returned 1 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x10433f8 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x10434a0 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1043590 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040508 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040658 [0157.618] wcscpy_s (in: _Destination=0x1040658, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1043590) returned 1 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10434a0) returned 1 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x10406a0 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x10406e8 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x24) returned 0x1041440 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x10406b8 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xa) returned 0x1040778 [0157.618] wcscpy_s (in: _Destination=0x1040778, _SizeInWords=0x5, _Source="wlan" | out: _Destination="wlan") returned 0x0 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x10405f8 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xa) returned 0x10407c0 [0157.618] wcscpy_s (in: _Destination=0x10407c0, _SizeInWords=0x5, _Source="show" | out: _Destination="show") returned 0x0 [0157.618] GetProcessHeap () returned 0x1010000 [0157.618] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040580 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x10) returned 0x10407a8 [0157.619] wcscpy_s (in: _Destination=0x10407a8, _SizeInWords=0x8, _Source="profile" | out: _Destination="profile") returned 0x0 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1041440) returned 1 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10406e8) returned 1 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x10404d8 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xa) returned 0x10404f0 [0157.619] wcscpy_s (in: _Destination=0x10404f0, _SizeInWords=0x5, _Source="wlan" | out: _Destination="wlan") returned 0x0 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1040778) returned 1 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10406b8) returned 1 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040718 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xa) returned 0x10406b8 [0157.619] wcscpy_s (in: _Destination=0x10406b8, _SizeInWords=0x5, _Source="wlan" | out: _Destination="wlan") returned 0x0 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10404f0) returned 1 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10404d8) returned 1 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040538 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xa) returned 0x1040730 [0157.619] wcscpy_s (in: _Destination=0x1040730, _SizeInWords=0x5, _Source="show" | out: _Destination="show") returned 0x0 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10407c0) returned 1 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10405f8) returned 1 [0157.619] GetProcessHeap () returned 0x1010000 [0157.619] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040670 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x10) returned 0x1040748 [0157.620] wcscpy_s (in: _Destination=0x1040748, _SizeInWords=0x8, _Source="profile" | out: _Destination="profile") returned 0x0 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10407a8) returned 1 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1040580) returned 1 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x10) returned 0x10406d0 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x10406e8 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xa) returned 0x1040568 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xa) returned 0x1040700 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x10) returned 0x10407c0 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040760 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlReAllocateHeap (Heap=0x1010000, Flags=0x0, Ptr=0x1040760, Size=0xe) returned 0x1040580 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlReAllocateHeap (Heap=0x1010000, Flags=0x0, Ptr=0x1040580, Size=0x16) returned 0x1038ab8 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlReAllocateHeap (Heap=0x1010000, Flags=0x0, Ptr=0x1038ab8, Size=0x18) returned 0x1038bd8 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlReAllocateHeap (Heap=0x1010000, Flags=0x0, Ptr=0x1038bd8, Size=0x20) returned 0x1039770 [0157.620] GetProcessHeap () returned 0x1010000 [0157.620] RtlReAllocateHeap (Heap=0x1010000, Flags=0x0, Ptr=0x1039770, Size=0x22) returned 0x10418c0 [0157.620] GetProcessHeap () returned 0x1010000 [0157.621] RtlReAllocateHeap (Heap=0x1010000, Flags=0x0, Ptr=0x10418c0, Size=0x30) returned 0x1041de0 [0157.621] GetProcessHeap () returned 0x1010000 [0157.621] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1041de0) returned 1 [0157.621] lstrcmpiW (lpString1="netsh", lpString2="namespace") returned 1 [0157.622] lstrcmpiW (lpString1="netsh", lpString2="branchcache") returned 1 [0157.622] lstrcmpiW (lpString1="netsh", lpString2="advfirewall") returned 1 [0157.622] lstrcmpiW (lpString1="netsh", lpString2="firewall") returned 1 [0157.622] lstrcmpiW (lpString1="netsh", lpString2="interface") returned 1 [0157.622] lstrcmpiW (lpString1="netsh", lpString2="dhcp") returned 1 [0157.622] lstrcmpiW (lpString1="netsh", lpString2="dnsclient") returned 1 [0157.622] lstrcmpiW (lpString1="netsh", lpString2="routing") returned -1 [0157.622] lstrcmpiW (lpString1="netsh", lpString2="ip") returned 1 [0157.622] lstrcmpiW (lpString1="netsh", lpString2="ipv6") returned 1 [0157.622] lstrcmpiW (lpString1="netsh", lpString2="aaaa") returned 1 [0157.622] lstrcmpiW (lpString1="netsh", lpString2="ras") returned -1 [0157.622] _wcsnicmp (_String1="wlan", _String2="dump", _MaxCount=0x4) returned 19 [0157.622] _wcsnicmp (_String1="wlan", _String2="help", _MaxCount=0x4) returned 15 [0157.622] _wcsnicmp (_String1="wlan", _String2="?", _MaxCount=0x4) returned 56 [0157.622] _wcsnicmp (_String1="wlan", _String2="exec", _MaxCount=0x4) returned 18 [0157.622] _wcsnicmp (_String1="wlan", _String2="advf", _MaxCount=0x4) returned 22 [0157.622] _wcsnicmp (_String1="wlan", _String2="bran", _MaxCount=0x4) returned 21 [0157.622] _wcsnicmp (_String1="wlan", _String2="brid", _MaxCount=0x4) returned 21 [0157.622] _wcsnicmp (_String1="wlan", _String2="dhcp", _MaxCount=0x4) returned 19 [0157.622] _wcsnicmp (_String1="wlan", _String2="dnsc", _MaxCount=0x4) returned 19 [0157.622] _wcsnicmp (_String1="wlan", _String2="fire", _MaxCount=0x4) returned 17 [0157.622] _wcsnicmp (_String1="wlan", _String2="http", _MaxCount=0x4) returned 15 [0157.622] _wcsnicmp (_String1="wlan", _String2="inte", _MaxCount=0x4) returned 14 [0157.622] _wcsnicmp (_String1="wlan", _String2="ipse", _MaxCount=0x4) returned 14 [0157.623] _wcsnicmp (_String1="wlan", _String2="lan", _MaxCount=0x4) returned 11 [0157.623] _wcsnicmp (_String1="wlan", _String2="name", _MaxCount=0x4) returned 9 [0157.623] _wcsnicmp (_String1="wlan", _String2="neti", _MaxCount=0x4) returned 9 [0157.623] _wcsnicmp (_String1="wlan", _String2="p2p", _MaxCount=0x4) returned 7 [0157.623] _wcsnicmp (_String1="wlan", _String2="ras", _MaxCount=0x4) returned 5 [0157.623] _wcsnicmp (_String1="wlan", _String2="rpc", _MaxCount=0x4) returned 5 [0157.623] _wcsnicmp (_String1="wlan", _String2="wfp", _MaxCount=0x4) returned 6 [0157.623] _wcsnicmp (_String1="wlan", _String2="winh", _MaxCount=0x4) returned 3 [0157.623] _wcsnicmp (_String1="wlan", _String2="wins", _MaxCount=0x4) returned 3 [0157.623] _wcsnicmp (_String1="wlan", _String2="wlan", _MaxCount=0x4) returned 0 [0157.623] lstrcmpiW (lpString1="wlan", lpString2="namespace") returned 1 [0157.623] lstrcmpiW (lpString1="wlan", lpString2="branchcache") returned 1 [0157.623] lstrcmpiW (lpString1="wlan", lpString2="advfirewall") returned 1 [0157.623] lstrcmpiW (lpString1="wlan", lpString2="firewall") returned 1 [0157.623] lstrcmpiW (lpString1="wlan", lpString2="interface") returned 1 [0157.623] lstrcmpiW (lpString1="wlan", lpString2="dhcp") returned 1 [0157.623] lstrcmpiW (lpString1="wlan", lpString2="dnsclient") returned 1 [0157.623] GetProcessHeap () returned 0x1010000 [0157.623] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040760 [0157.623] GetProcessHeap () returned 0x1010000 [0157.623] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040520 [0157.623] GetProcessHeap () returned 0x1010000 [0157.623] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x30) returned 0x1041de0 [0157.623] GetProcessHeap () returned 0x1010000 [0157.623] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040688 [0157.623] GetProcessHeap () returned 0x1010000 [0157.623] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040778 [0157.623] wcscpy_s (in: _Destination=0x1040778, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0157.623] GetProcessHeap () returned 0x1010000 [0157.624] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040790 [0157.624] GetProcessHeap () returned 0x1010000 [0157.624] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xa) returned 0x10407a8 [0157.624] wcscpy_s (in: _Destination=0x10407a8, _SizeInWords=0x5, _Source="wlan" | out: _Destination="wlan") returned 0x0 [0157.624] GetProcessHeap () returned 0x1010000 [0157.624] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040580 [0157.624] GetProcessHeap () returned 0x1010000 [0157.624] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xa) returned 0x10404d8 [0157.624] wcscpy_s (in: _Destination=0x10404d8, _SizeInWords=0x5, _Source="show" | out: _Destination="show") returned 0x0 [0157.624] GetProcessHeap () returned 0x1010000 [0157.624] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xc) returned 0x1040628 [0157.624] GetProcessHeap () returned 0x1010000 [0157.624] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x10) returned 0x10405e0 [0157.624] wcscpy_s (in: _Destination=0x10405e0, _SizeInWords=0x8, _Source="profile" | out: _Destination="profile") returned 0x0 [0157.624] GetProcessHeap () returned 0x1010000 [0157.624] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1041de0) returned 1 [0157.624] GetProcessHeap () returned 0x1010000 [0157.624] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1040520) returned 1 [0157.624] GetProcessHeap () returned 0x1010000 [0157.624] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10407a8) returned 1 [0157.624] GetProcessHeap () returned 0x1010000 [0157.624] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0xa) returned 0x1040550 [0157.624] lstrcmpiW (lpString1="wlan", lpString2="namespace") returned 1 [0157.624] lstrcmpiW (lpString1="wlan", lpString2="branchcache") returned 1 [0157.624] lstrcmpiW (lpString1="wlan", lpString2="advfirewall") returned 1 [0157.624] lstrcmpiW (lpString1="wlan", lpString2="firewall") returned 1 [0157.624] lstrcmpiW (lpString1="wlan", lpString2="interface") returned 1 [0157.624] lstrcmpiW (lpString1="wlan", lpString2="dhcp") returned 1 [0157.624] lstrcmpiW (lpString1="wlan", lpString2="dnsclient") returned 1 [0157.624] lstrcmpiW (lpString1="wlan", lpString2="routing") returned 1 [0157.624] lstrcmpiW (lpString1="wlan", lpString2="ip") returned 1 [0157.624] lstrcmpiW (lpString1="wlan", lpString2="ipv6") returned 1 [0157.624] lstrcmpiW (lpString1="wlan", lpString2="aaaa") returned 1 [0157.625] lstrcmpiW (lpString1="wlan", lpString2="ras") returned 1 [0157.625] _wcsnicmp (_String1="show", _String2="dump", _MaxCount=0x4) returned 15 [0157.625] _wcsnicmp (_String1="show", _String2="help", _MaxCount=0x4) returned 11 [0157.625] _wcsnicmp (_String1="show", _String2="?", _MaxCount=0x4) returned 52 [0157.625] _wcsnicmp (_String1="show", _String2="conn", _MaxCount=0x4) returned 16 [0157.625] _wcsnicmp (_String1="show", _String2="disc", _MaxCount=0x4) returned 15 [0157.625] _wcsnicmp (_String1="show", _String2="repo", _MaxCount=0x4) returned 1 [0157.625] _wcsnicmp (_String1="show", _String2="add", _MaxCount=0x4) returned 18 [0157.625] _wcsnicmp (_String1="show", _String2="dele", _MaxCount=0x4) returned 15 [0157.625] _wcsnicmp (_String1="show", _String2="set", _MaxCount=0x4) returned 3 [0157.625] _wcsnicmp (_String1="show", _String2="show", _MaxCount=0x4) returned 0 [0157.625] _wcsnicmp (_String1="profile", _String2="help", _MaxCount=0x7) returned 8 [0157.625] _wcsnicmp (_String1="profile", _String2="?", _MaxCount=0x7) returned 49 [0157.625] wcstok (in: _String="settings", _Delimiter=" ", _Context=0x104e498 | out: _String="settings", _Context=0x104e498) returned="settings" [0157.625] _wcsnicmp (_String1="profile", _String2="setting", _MaxCount=0x7) returned -3 [0157.625] wcstok (in: _String="interfaces", _Delimiter=" ", _Context=0x104e498 | out: _String="interfaces", _Context=0x104e498) returned="interfaces" [0157.625] _wcsnicmp (_String1="profile", _String2="interfa", _MaxCount=0x7) returned 7 [0157.625] wcstok (in: _String="networks", _Delimiter=" ", _Context=0x104e498 | out: _String="networks", _Context=0x104e498) returned="networks" [0157.625] _wcsnicmp (_String1="profile", _String2="network", _MaxCount=0x7) returned 2 [0157.625] wcstok (in: _String="profiles", _Delimiter=" ", _Context=0x104e498 | out: _String="profiles", _Context=0x104e498) returned="profiles" [0157.625] _wcsnicmp (_String1="profile", _String2="profile", _MaxCount=0x7) returned 0 [0157.625] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x104e498 | out: _String=0x0, _Context=0x104e498) returned 0x0 [0157.625] lstrcmpiW (lpString1="wlan", lpString2="netsh") returned 1 [0157.628] PrintMessageFromModule () returned 0x39 [0157.628] LoadStringW (in: hInstance=0x6dd20000, uID=0xe870, lpBuffer=0xd9f278, cchBufferMax=16384 | out: lpBuffer="The Wireless AutoConfig Service (wlansvc) is not running.") returned 0x39 [0157.632] FormatMessageW (in: dwFlags=0x500, lpSource=0xd9f278, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0xd9f25c, nSize=0x0, Arguments=0xd9f274 | out: lpBuffer="Ą犀Ú胃Ž۔Ą") returned 0x39 [0157.632] GetStdHandle (nStdHandle=0xfffffff5) returned 0x504 [0157.632] GetConsoleOutputCP () returned 0xfde9 [0157.976] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="The Wireless AutoConfig Service (wlansvc) is not running.", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 58 [0157.976] GetProcessHeap () returned 0x1010000 [0157.976] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x3a) returned 0x10352f0 [0157.976] GetConsoleOutputCP () returned 0xfde9 [0158.257] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="The Wireless AutoConfig Service (wlansvc) is not running.", cchWideChar=-1, lpMultiByteStr=0x10352f0, cbMultiByte=58, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="The Wireless AutoConfig Service (wlansvc) is not running.", lpUsedDefaultChar=0x0) returned 58 [0158.257] WriteFile (in: hFile=0x504, lpBuffer=0x10352f0*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0xd9f248, lpOverlapped=0x0 | out: lpBuffer=0x10352f0*, lpNumberOfBytesWritten=0xd9f248*=0x39, lpOverlapped=0x0) returned 1 [0158.258] GetProcessHeap () returned 0x1010000 [0158.258] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10352f0) returned 1 [0158.258] LocalFree (hMem=0x104f6b0) returned 0x0 [0158.259] FormatMessageW (in: dwFlags=0x500, lpSource=0x17d1310, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0xda7810, nSize=0x0, Arguments=0xda781c | out: lpBuffer="׈Ą砠Ú耰Ž砬Ú硄Ú孳ŽጐŽĄ\x03") returned 0x2 [0158.259] GetStdHandle (nStdHandle=0xfffffff5) returned 0x504 [0158.259] GetConsoleOutputCP () returned 0xfde9 [0158.496] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0158.497] GetProcessHeap () returned 0x1010000 [0158.497] RtlAllocateHeap (HeapHandle=0x1010000, Flags=0x0, Size=0x3) returned 0x104fce8 [0158.502] GetConsoleOutputCP () returned 0xfde9 [0158.790] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x104fce8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0158.790] WriteFile (in: hFile=0x504, lpBuffer=0x104fce8*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xda77fc, lpOverlapped=0x0 | out: lpBuffer=0x104fce8*, lpNumberOfBytesWritten=0xda77fc*=0x2, lpOverlapped=0x0) returned 1 [0158.791] GetProcessHeap () returned 0x1010000 [0158.791] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x104fce8) returned 1 [0158.791] LocalFree (hMem=0x10405c8) returned 0x0 [0158.793] GetProcessHeap () returned 0x1010000 [0158.793] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10406e8) returned 1 [0158.793] GetProcessHeap () returned 0x1010000 [0158.793] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1040568) returned 1 [0158.793] GetProcessHeap () returned 0x1010000 [0158.793] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1040700) returned 1 [0158.793] GetProcessHeap () returned 0x1010000 [0158.804] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10407c0) returned 1 [0158.804] GetProcessHeap () returned 0x1010000 [0158.804] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10406d0) returned 1 [0158.804] GetProcessHeap () returned 0x1010000 [0158.804] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10406b8) returned 1 [0158.804] GetProcessHeap () returned 0x1010000 [0158.804] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1040718) returned 1 [0158.804] GetProcessHeap () returned 0x1010000 [0158.817] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1040730) returned 1 [0158.817] GetProcessHeap () returned 0x1010000 [0158.817] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1040538) returned 1 [0158.817] GetProcessHeap () returned 0x1010000 [0158.817] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1040748) returned 1 [0158.817] GetProcessHeap () returned 0x1010000 [0158.817] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1040670) returned 1 [0158.817] GetProcessHeap () returned 0x1010000 [0158.817] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10406a0) returned 1 [0158.817] GetProcessHeap () returned 0x1010000 [0158.817] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1040658) returned 1 [0158.817] GetProcessHeap () returned 0x1010000 [0158.817] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1040508) returned 1 [0158.817] GetProcessHeap () returned 0x1010000 [0158.817] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x10433f8) returned 1 [0159.161] GetProcessHeap () returned 0x1010000 [0159.161] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1043cd8) returned 1 [0159.161] FreeLibrary (hLibModule=0x17d0000) returned 1 [0159.161] FreeLibrary (hLibModule=0x6f200000) returned 1 [0159.164] FreeLibrary (hLibModule=0x6e9a0000) returned 1 [0159.174] free (_Block=0x1393920) [0159.174] LocalFree (hMem=0x1028710) returned 0x0 [0159.174] LocalFree (hMem=0x1028890) returned 0x0 [0159.174] LocalFree (hMem=0x1028158) returned 0x0 [0159.174] LocalFree (hMem=0x1025eb8) returned 0x0 [0159.174] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x104e4e8 [0159.175] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x1040640 [0159.175] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x10406a0 [0159.175] free (_Block=0x1391188) [0159.175] free (_Block=0x0) [0159.175] free (_Block=0x1391170) [0159.175] free (_Block=0x13911a0) [0159.175] free (_Block=0x1393900) [0159.175] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x1027858 [0159.177] LocalFree (hMem=0x1027858) returned 0x0 [0159.177] LocalFree (hMem=0x1028920) returned 0x0 [0159.177] LocalFree (hMem=0x104e4e8) returned 0x0 [0159.177] free (_Block=0x1391068) [0159.178] GetModuleHandleA (lpModuleName="MSVCRT.DLL") returned 0x77640000 [0159.178] FreeLibrary (hLibModule=0x77640000) returned 1 [0159.178] LocalFree (hMem=0x10406a0) returned 0x0 [0159.178] LocalFree (hMem=0x1040640) returned 0x0 [0159.178] GlobalHandle (pMem=0x1028600) returned 0x1740004 [0159.178] GlobalUnlock (hMem=0x1740004) returned 0 [0159.185] FreeLibrary (hLibModule=0x6e6d0000) returned 1 [0159.189] FreeLibrary (hLibModule=0x6f1f0000) returned 1 [0159.191] FreeLibrary (hLibModule=0x6e5b0000) returned 1 [0159.309] FreeLibrary (hLibModule=0x6efa0000) returned 1 [0159.310] FreeLibrary (hLibModule=0x6e470000) returned 1 [0159.330] FreeLibrary (hLibModule=0x6e190000) returned 1 [0159.334] FreeLibrary (hLibModule=0x6e0f0000) returned 1 [0159.335] FreeLibrary (hLibModule=0x6e070000) returned 1 [0159.469] FreeLibrary (hLibModule=0x6deb0000) returned 1 [0159.471] FreeLibrary (hLibModule=0x6de60000) returned 1 [0159.474] FreeLibrary (hLibModule=0x6de20000) returned 1 [0159.477] FreeLibrary (hLibModule=0x6de10000) returned 1 [0159.478] FreeLibrary (hLibModule=0x6dd20000) returned 1 [0159.656] FreeLibrary (hLibModule=0x6db30000) returned 1 [0159.661] FreeLibrary (hLibModule=0x6da80000) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x1039d50) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101b478) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101b498) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101b418) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101b4d8) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101b4a8) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101b4f8) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101b428) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cff8) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cf68) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d048) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d018) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cef8) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cfb8) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cfd8) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cee8) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.202] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cfc8) returned 1 [0160.202] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cf08) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cfe8) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d008) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cf78) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d038) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d028) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d068) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d058) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cf98) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d078) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d098) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cf88) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d088) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cfa8) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cf18) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cf28) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cf58) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cf38) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.203] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ced8) returned 1 [0160.203] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cf48) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cdf8) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cd18) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cd98) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cda8) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ce98) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ce48) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ce28) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ceb8) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ccd8) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ce58) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ce38) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cd68) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cd78) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cd28) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cd08) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cde8) returned 1 [0160.204] GetProcessHeap () returned 0x1010000 [0160.204] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cdd8) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cea8) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cd58) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cdb8) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cec8) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ce88) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ce08) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ce68) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cd48) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cdc8) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cce8) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ce18) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ce78) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cd88) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101ccf8) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101cd38) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d460) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d340) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.205] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d470) returned 1 [0160.205] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d480) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d3e0) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d430) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d410) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d2f0) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d380) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d300) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d390) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d3f0) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d320) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d440) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d2e0) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d370) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d330) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d450) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d490) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d400) returned 1 [0160.206] GetProcessHeap () returned 0x1010000 [0160.206] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d350) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d310) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d3a0) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d360) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d3b0) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d3c0) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d3d0) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d420) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d4a0) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d2a0) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d240) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d0e0) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d200) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d1f0) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d2b0) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d270) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.207] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d2d0) returned 1 [0160.207] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d1c0) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d130) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d140) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d220) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d1d0) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d210) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d2c0) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d150) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d250) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d260) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d0f0) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d230) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d1a0) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d280) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d1b0) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d100) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d160) returned 1 [0160.208] GetProcessHeap () returned 0x1010000 [0160.208] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d110) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d290) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d120) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d170) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d180) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d190) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d1e0) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d5e8) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d548) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d678) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d5f8) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d508) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d608) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d6a8) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d6b8) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d578) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d648) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d568) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.209] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d6c8) returned 1 [0160.209] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d558) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d688) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d5d8) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d588) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d598) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d518) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d6d8) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d668) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d5a8) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d538) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d5b8) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d5c8) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d618) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d4e8) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d628) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d638) returned 1 [0160.210] GetProcessHeap () returned 0x1010000 [0160.210] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d4f8) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d528) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d658) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d698) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d7c8) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d818) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d6e8) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d858) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d828) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d7e8) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d798) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d7a8) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d748) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d778) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d788) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d758) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d838) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d898) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.211] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d808) returned 1 [0160.211] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d848) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d7d8) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d768) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d868) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d878) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d7f8) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d888) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d8a8) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d7b8) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d6f8) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d708) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d738) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d718) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101d728) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dca0) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dbe0) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101db50) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dc90) returned 1 [0160.212] GetProcessHeap () returned 0x1010000 [0160.212] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dc00) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101db60) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101db40) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dbb0) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dc40) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dcb0) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dc80) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101daf0) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dc10) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dbd0) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101db70) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101db80) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dc30) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dc20) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101db30) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dbf0) returned 1 [0160.213] GetProcessHeap () returned 0x1010000 [0160.213] RtlFreeHeap (HeapHandle=0x1010000, Flags=0x0, BaseAddress=0x101dc50) returned 1 [0160.213] FreeLibrary (hLibModule=0x6d730000) returned 1 [0160.214] exit (_Code=1) Thread: id = 166 os_tid = 0xf58 Thread: id = 189 os_tid = 0x1374 Thread: id = 193 os_tid = 0x1380 [0159.022] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x10449d0 [0159.022] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x1040718 [0159.022] LocalAlloc (uFlags=0x0, uBytes=0xc) returned 0x10405c8 [0159.022] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x104fbe0 [0159.022] LocalReAlloc (hMem=0x10405c8, uBytes=0x10, uFlags=0x2) returned 0x1043cc0 [0159.042] LocalFree (hMem=0x10449d0) returned 0x0 [0159.042] LocalFree (hMem=0x104fbe0) returned 0x0 [0159.042] LocalFree (hMem=0x1043cc0) returned 0x0 [0159.042] LocalFree (hMem=0x1040718) returned 0x0 Thread: id = 194 os_tid = 0x135c Thread: id = 195 os_tid = 0x1350 Process: id = "12" image_name = "findstr.exe" filename = "c:\\windows\\syswow64\\findstr.exe" page_root = "0x13ee6000" os_pid = "0xdb4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x67c" cmd_line = "findstr All" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 165 os_tid = 0x5f0 Thread: id = 167 os_tid = 0xf6c Process: id = "13" image_name = "ctfmom.exe" filename = "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ctfmom.exe" page_root = "0x6177f000" os_pid = "0xf78" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1070" cmd_line = "\"C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 173 os_tid = 0x1214 [0141.366] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0141.366] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0141.368] GetProcAddress (hModule=0x74bc0000, lpProcName=0xcdb5ec) returned 0x74cb7060 [0141.368] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0141.369] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsAlloc") returned 0x74cbbea0 [0141.369] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsSetValue") returned 0x74cb2550 [0141.371] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0141.371] GetProcAddress (hModule=0x74bc0000, lpProcName="InitializeCriticalSectionEx") returned 0x74cb7060 [0141.372] GetProcessHeap () returned 0x1150000 [0141.372] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0141.372] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsAlloc") returned 0x74cbbea0 [0141.372] GetLastError () returned 0xcb [0141.372] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsGetValue") returned 0x74ca70c0 [0141.372] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsSetValue") returned 0x74cb2550 [0141.372] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x364) returned 0x1167238 [0141.373] SetLastError (dwErrCode=0xcb) [0141.373] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0xe00) returned 0x1168688 [0141.391] GetStartupInfoW (in: lpStartupInfo=0x10ff79c | out: lpStartupInfo=0x10ff79c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0141.391] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0141.391] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0141.391] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0141.391] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe\" " [0141.391] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe\" " [0141.391] GetACP () returned 0x4e4 [0141.391] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x220) returned 0x1165fb0 [0141.391] IsValidCodePage (CodePage=0x4e4) returned 1 [0141.391] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x10ff7bc | out: lpCPInfo=0x10ff7bc) returned 1 [0141.391] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x10ff084 | out: lpCPInfo=0x10ff084) returned 1 [0141.391] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x10ff698, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0141.391] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x10ff698, cbMultiByte=256, lpWideCharStr=0x10fee28, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ?ÌĀ") returned 256 [0141.391] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ?ÌĀ", cchSrc=256, lpCharType=0x10ff098 | out: lpCharType=0x10ff098) returned 1 [0141.391] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x10ff698, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0141.391] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x10ff698, cbMultiByte=256, lpWideCharStr=0x10fedd8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0141.391] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0141.391] GetProcAddress (hModule=0x74bc0000, lpProcName="LCMapStringEx") returned 0x74c9ed00 [0141.392] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0141.392] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x10febc8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0141.392] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x10ff598, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿJ®)\x1eÔ÷\x0f\x01ç\x15Í", lpUsedDefaultChar=0x0) returned 256 [0141.392] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x10ff698, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0141.392] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x10ff698, cbMultiByte=256, lpWideCharStr=0x10fedf8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ?ÌĀ") returned 256 [0141.392] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ?ÌĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0141.392] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ?ÌĀ", cchSrc=256, lpDestStr=0x10febe8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0141.392] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x10ff498, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿJ®)\x1eÔ÷\x0f\x01ç\x15Í", lpUsedDefaultChar=0x0) returned 256 [0141.392] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x80) returned 0x1156660 [0141.392] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x10ff5e0, nSize=0x105 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ctfmom.exe")) returned 0x34 [0141.392] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x772d0000 [0141.392] GetProcAddress (hModule=0x772d0000, lpProcName="AreFileApisANSI") returned 0x772e4280 [0141.392] AreFileApisANSI () returned 1 [0141.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 53 [0141.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe", cchWideChar=-1, lpMultiByteStr=0xceb9b8, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe", lpUsedDefaultChar=0x0) returned 53 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x3d) returned 0x1165260 [0141.393] RtlInitializeSListHead (in: ListHead=0xceb780 | out: ListHead=0xceb780) [0141.393] GetLastError () returned 0x0 [0141.393] SetLastError (dwErrCode=0x0) [0141.393] GetEnvironmentStringsW () returned 0x1169490* [0141.393] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x565) returned 0x1169f68 [0141.393] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x1169f68, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0141.393] FreeEnvironmentStringsW (penv=0x1169490) returned 1 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x94) returned 0x115e7c8 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x1f) returned 0x115ace0 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x28) returned 0x1163038 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x37) returned 0x1163c90 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x3c) returned 0x11653c8 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x31) returned 0x115e748 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x14) returned 0x1164908 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x24) returned 0x1163068 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0xd) returned 0x11671f0 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x17) returned 0x1164a08 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x2b) returned 0x115f2c8 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x15) returned 0x1164b28 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x17) returned 0x1164b68 [0141.393] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x22) returned 0x1163008 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0xe) returned 0x1167208 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0xc1) returned 0x11675a8 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x3e) returned 0x1165410 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x1b) returned 0x115ad80 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x1d) returned 0x115ada8 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x48) returned 0x115e9a8 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x12) returned 0x1164a28 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x18) returned 0x1164928 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x1b) returned 0x115add0 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x24) returned 0x1163098 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x29) returned 0x115f3a8 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x1e) returned 0x115ae70 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x6b) returned 0x115e110 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x17) returned 0x11648c8 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0xf) returned 0x1167220 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x16) returned 0x1164b88 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x28) returned 0x1163188 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x27) returned 0x1162e58 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x12) returned 0x1164b48 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x21) returned 0x1163128 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x10) returned 0x1169640 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x1c) returned 0x115ae98 [0141.394] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x12) returned 0x1164a88 [0141.394] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1169f68 | out: hHeap=0x1150000) returned 1 [0141.394] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000 [0141.394] GetProcAddress (hModule=0x772d0000, lpProcName="FlsAlloc") returned 0x772e4ae0 [0141.395] GetProcAddress (hModule=0x772d0000, lpProcName="FlsFree") returned 0x772e4b00 [0141.395] GetProcAddress (hModule=0x772d0000, lpProcName="FlsGetValue") returned 0x772e4b20 [0141.395] GetProcAddress (hModule=0x772d0000, lpProcName="FlsSetValue") returned 0x772e4b40 [0141.395] GetProcAddress (hModule=0x772d0000, lpProcName="InitializeCriticalSectionEx") returned 0x7733ebc0 [0141.395] GetProcAddress (hModule=0x772d0000, lpProcName="InitOnceExecuteOnce") returned 0x74cb5550 [0141.395] GetProcAddress (hModule=0x772d0000, lpProcName="CreateEventExW") returned 0x7733eb20 [0141.395] GetProcAddress (hModule=0x772d0000, lpProcName="CreateSemaphoreW") returned 0x7733eb90 [0141.395] GetProcAddress (hModule=0x772d0000, lpProcName="CreateSemaphoreExW") returned 0x7733eb80 [0141.395] GetProcAddress (hModule=0x772d0000, lpProcName="CreateThreadpoolTimer") returned 0x772e6d30 [0141.395] GetProcAddress (hModule=0x772d0000, lpProcName="SetThreadpoolTimer") returned 0x779bd7c0 [0141.396] GetProcAddress (hModule=0x772d0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x779bb840 [0141.396] GetProcAddress (hModule=0x772d0000, lpProcName="CloseThreadpoolTimer") returned 0x779bb740 [0141.396] GetProcAddress (hModule=0x772d0000, lpProcName="CreateThreadpoolWait") returned 0x772e6d70 [0141.396] GetProcAddress (hModule=0x772d0000, lpProcName="SetThreadpoolWait") returned 0x779bc0b0 [0141.396] GetProcAddress (hModule=0x772d0000, lpProcName="CloseThreadpoolWait") returned 0x779bbe10 [0141.396] GetProcAddress (hModule=0x772d0000, lpProcName="FlushProcessWriteBuffers") returned 0x779e2b20 [0141.396] GetProcAddress (hModule=0x772d0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x779d8e50 [0141.396] GetProcAddress (hModule=0x772d0000, lpProcName="GetCurrentProcessorNumber") returned 0x779d52f0 [0141.396] GetProcAddress (hModule=0x772d0000, lpProcName="CreateSymbolicLinkW") returned 0x772e4510 [0141.396] GetProcAddress (hModule=0x772d0000, lpProcName="GetCurrentPackageId") returned 0x74cbe260 [0141.396] GetProcAddress (hModule=0x772d0000, lpProcName="GetTickCount64") returned 0x772e0db0 [0141.780] GetProcAddress (hModule=0x772d0000, lpProcName="GetFileInformationByHandleEx") returned 0x772e43d0 [0141.786] GetProcAddress (hModule=0x772d0000, lpProcName="SetFileInformationByHandle") returned 0x7733f110 [0141.786] GetProcAddress (hModule=0x772d0000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x7733f1e0 [0141.794] GetProcAddress (hModule=0x772d0000, lpProcName="InitializeConditionVariable") returned 0x779d3a00 [0141.809] GetProcAddress (hModule=0x772d0000, lpProcName="WakeConditionVariable") returned 0x77a48c50 [0141.809] GetProcAddress (hModule=0x772d0000, lpProcName="WakeAllConditionVariable") returned 0x779d8a90 [0141.809] GetProcAddress (hModule=0x772d0000, lpProcName="SleepConditionVariableCS") returned 0x74d2fca0 [0141.809] GetProcAddress (hModule=0x772d0000, lpProcName="InitializeSRWLock") returned 0x779d3a00 [0141.809] GetProcAddress (hModule=0x772d0000, lpProcName="AcquireSRWLockExclusive") returned 0x779b58e0 [0141.809] GetProcAddress (hModule=0x772d0000, lpProcName="TryAcquireSRWLockExclusive") returned 0x77a32ce0 [0141.809] GetProcAddress (hModule=0x772d0000, lpProcName="ReleaseSRWLockExclusive") returned 0x779b83a0 [0141.809] GetProcAddress (hModule=0x772d0000, lpProcName="SleepConditionVariableSRW") returned 0x74d2fcf0 [0141.810] GetProcAddress (hModule=0x772d0000, lpProcName="CreateThreadpoolWork") returned 0x772e6db0 [0141.810] GetProcAddress (hModule=0x772d0000, lpProcName="SubmitThreadpoolWork") returned 0x779beb00 [0141.810] GetProcAddress (hModule=0x772d0000, lpProcName="CloseThreadpoolWork") returned 0x779bed50 [0141.810] GetProcAddress (hModule=0x772d0000, lpProcName="CompareStringEx") returned 0x772e7050 [0141.810] GetProcAddress (hModule=0x772d0000, lpProcName="GetLocaleInfoEx") returned 0x772e7190 [0141.810] GetProcAddress (hModule=0x772d0000, lpProcName="LCMapStringEx") returned 0x772e7480 [0141.810] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x800) returned 0x1169898 [0141.810] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0141.810] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xcbe1c1) returned 0x0 [0141.811] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x8) returned 0x1164dc8 [0141.811] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0141.811] GetProcAddress (hModule=0x74bc0000, lpProcName="CompareStringEx") returned 0x74c82c20 [0141.811] GetProcAddress (hModule=0x74bc0000, lpProcName="EnumSystemLocalesEx") returned 0x74c83a60 [0141.811] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0141.811] GetProcAddress (hModule=0x74bc0000, lpProcName="GetDateFormatEx") returned 0x74cf9b40 [0141.812] GetProcAddress (hModule=0x74bc0000, lpProcName="GetLocaleInfoEx") returned 0x74caf170 [0141.812] GetProcAddress (hModule=0x74bc0000, lpProcName="GetTimeFormatEx") returned 0x74cf9e10 [0141.812] GetProcAddress (hModule=0x74bc0000, lpProcName="GetUserDefaultLocaleName") returned 0x74cb4220 [0141.812] GetProcAddress (hModule=0x74bc0000, lpProcName="IsValidLocaleName") returned 0x74caed60 [0141.812] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0141.812] GetProcAddress (hModule=0x74bc0000, lpProcName="LCIDToLocaleName") returned 0x74cada50 [0141.812] GetProcAddress (hModule=0x74bc0000, lpProcName="LocaleNameToLCID") returned 0x74c8bac0 [0141.812] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x20) returned 0x115af10 [0141.812] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x2) returned 0x1164cf8 [0141.812] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164cf8 | out: hHeap=0x1150000) returned 1 [0141.812] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x2) returned 0x1164cf8 [0141.813] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x8) returned 0x1164de8 [0141.813] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x18) returned 0x1164ac8 [0141.813] GetLastError () returned 0x0 [0141.813] SetLastError (dwErrCode=0x0) [0141.813] GetLastError () returned 0x0 [0141.813] SetLastError (dwErrCode=0x0) [0141.813] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0xb8) returned 0x115fa10 [0141.813] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x6a6) returned 0x116a4e8 [0141.813] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116a4e8 | out: hHeap=0x1150000) returned 1 [0141.813] GetLastError () returned 0x0 [0141.813] SetLastError (dwErrCode=0x0) [0141.813] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x6) returned 0x1164c58 [0141.813] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x2) returned 0x1164ca8 [0141.814] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x4) returned 0x1164cd8 [0141.814] GetLastError () returned 0x0 [0141.814] SetLastError (dwErrCode=0x0) [0141.814] GetLastError () returned 0x0 [0141.814] SetLastError (dwErrCode=0x0) [0141.814] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0xb8) returned 0x115f648 [0141.814] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x6a6) returned 0x116a4e8 [0141.814] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116a4e8 | out: hHeap=0x1150000) returned 1 [0141.814] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164c58 | out: hHeap=0x1150000) returned 1 [0141.814] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x115fa10 | out: hHeap=0x1150000) returned 1 [0141.814] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164cd8 | out: hHeap=0x1150000) returned 1 [0141.814] GetLastError () returned 0x0 [0141.814] SetLastError (dwErrCode=0x0) [0141.814] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x6) returned 0x1164cb8 [0141.814] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x2) returned 0x1164cd8 [0141.814] GetLastError () returned 0x0 [0141.814] SetLastError (dwErrCode=0x0) [0141.814] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x200) returned 0x116a4e8 [0141.814] GetLastError () returned 0x0 [0141.814] SetLastError (dwErrCode=0x0) [0141.814] GetLastError () returned 0x0 [0141.815] SetLastError (dwErrCode=0x0) [0141.815] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x4) returned 0x1164c38 [0141.815] GetLastError () returned 0x0 [0141.815] SetLastError (dwErrCode=0x0) [0141.815] GetLastError () returned 0x0 [0141.815] SetLastError (dwErrCode=0x0) [0141.815] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0xb8) returned 0x115fa10 [0141.815] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x6a6) returned 0x116a6f0 [0141.815] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116a6f0 | out: hHeap=0x1150000) returned 1 [0141.815] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164cb8 | out: hHeap=0x1150000) returned 1 [0141.815] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x115f648 | out: hHeap=0x1150000) returned 1 [0141.815] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164c38 | out: hHeap=0x1150000) returned 1 [0141.815] GetLastError () returned 0x0 [0141.815] SetLastError (dwErrCode=0x0) [0141.815] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x6) returned 0x1164df8 [0141.815] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164cd8 | out: hHeap=0x1150000) returned 1 [0141.815] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164ca8 | out: hHeap=0x1150000) returned 1 [0141.815] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x8) returned 0x1164c28 [0141.816] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x8) returned 0x1164c38 [0141.816] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x8) returned 0x1164ca8 [0141.816] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x50) returned 0x115ec68 [0141.816] GetStartupInfoW (in: lpStartupInfo=0x10ff800 | out: lpStartupInfo=0x10ff800*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0141.817] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x20) returned 0x116ac20 [0141.817] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116ac20 | out: hHeap=0x1150000) returned 1 [0141.817] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x8) returned 0x1164c58 [0141.817] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x8) returned 0x1164cb8 [0141.817] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x38) returned 0x115e590 [0141.817] AreFileApisANSI () returned 1 [0141.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x1163040, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 53 [0141.817] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x6a) returned 0x115fbf0 [0141.817] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x1163040, cbMultiByte=-1, lpWideCharStr=0x115fbf0, cchWideChar=53 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe") returned 53 [0141.817] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ctfmom.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x10ff410, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0141.909] GetFileType (hFile=0x100) returned 0x1 [0141.909] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x115fbf0 | out: hHeap=0x1150000) returned 1 [0141.910] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x8) returned 0x1164cd8 [0141.910] GetLastError () returned 0x0 [0141.910] SetLastError (dwErrCode=0x0) [0141.910] GetLastError () returned 0x0 [0141.910] SetLastError (dwErrCode=0x0) [0141.910] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0xb8) returned 0x115f648 [0141.910] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x6a6) returned 0x116aef8 [0141.911] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116aef8 | out: hHeap=0x1150000) returned 1 [0141.911] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164df8 | out: hHeap=0x1150000) returned 1 [0141.911] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x115fa10 | out: hHeap=0x1150000) returned 1 [0141.911] GetLastError () returned 0x0 [0141.911] SetLastError (dwErrCode=0x0) [0141.911] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x6) returned 0x1164df8 [0141.911] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x2) returned 0x116afe8 [0141.911] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x4) returned 0x116b038 [0141.911] GetLastError () returned 0x0 [0141.911] SetLastError (dwErrCode=0x0) [0141.911] GetLastError () returned 0x0 [0141.911] SetLastError (dwErrCode=0x0) [0141.911] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0xb8) returned 0x115fa10 [0141.911] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x6a6) returned 0x116b300 [0141.911] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116b300 | out: hHeap=0x1150000) returned 1 [0141.911] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164df8 | out: hHeap=0x1150000) returned 1 [0141.911] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x115f648 | out: hHeap=0x1150000) returned 1 [0141.911] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116b038 | out: hHeap=0x1150000) returned 1 [0141.911] GetLastError () returned 0x0 [0141.912] SetLastError (dwErrCode=0x0) [0141.912] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x6) returned 0x116af88 [0141.912] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x2) returned 0x116af68 [0141.912] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0x4) returned 0x116aff8 [0141.912] GetLastError () returned 0x0 [0141.912] SetLastError (dwErrCode=0x0) [0141.912] GetLastError () returned 0x0 [0141.912] SetLastError (dwErrCode=0x0) [0141.912] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x8, Size=0xb8) returned 0x115f648 [0141.912] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x6a6) returned 0x116b300 [0141.912] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116b300 | out: hHeap=0x1150000) returned 1 [0141.912] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116af88 | out: hHeap=0x1150000) returned 1 [0141.913] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x115fa10 | out: hHeap=0x1150000) returned 1 [0141.913] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116aff8 | out: hHeap=0x1150000) returned 1 [0141.913] GetLastError () returned 0x0 [0141.913] SetLastError (dwErrCode=0x0) [0141.913] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x6) returned 0x116b098 [0141.913] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116af68 | out: hHeap=0x1150000) returned 1 [0141.913] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116afe8 | out: hHeap=0x1150000) returned 1 [0141.913] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x8) returned 0x116b118 [0141.913] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", phkResult=0x10ff3cc | out: phkResult=0x10ff3cc*=0x108) returned 0x0 [0141.913] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2, phkResult=0x10ff3cc | out: phkResult=0x10ff3cc*=0x10c) returned 0x0 [0141.913] RegCloseKey (hKey=0x10c) returned 0x0 [0141.914] CloseHandle (hObject=0x100) returned 1 [0141.914] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164cb8 | out: hHeap=0x1150000) returned 1 [0141.914] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164c58 | out: hHeap=0x1150000) returned 1 [0141.914] GetModuleHandleW (lpModuleName=0x0) returned 0xcb0000 [0141.914] GetModuleFileNameA (in: hModule=0xcb0000, lpFilename=0x10ff4e8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ctfmom.exe")) returned 0x34 [0141.914] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x20) returned 0x116ae00 [0141.914] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116ae00 | out: hHeap=0x1150000) returned 1 [0141.914] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x20) returned 0x116ab08 [0141.914] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116ab08 | out: hHeap=0x1150000) returned 1 [0141.914] CopyFileA (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ctfmom.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe\\Microsoft\\ctfmom.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ctfmom.exe\\microsoft\\ctfmom.exe"), bFailIfExists=1) returned 0 [0141.917] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x50) returned 0x115fbf0 [0141.917] AreFileApisANSI () returned 1 [0141.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x115fbf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0141.917] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x94) returned 0x115e300 [0141.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0x115fbf0, cbMultiByte=-1, lpWideCharStr=0x115e300, cchWideChar=74 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe\\Microsoft\\ctfmom.exe") returned 74 [0141.917] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe\\Microsoft\\ctfmom.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ctfmom.exe\\microsoft\\ctfmom.exe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0141.917] GetLastError () returned 0x3 [0141.917] SetLastError (dwErrCode=0x3) [0141.917] GetLastError () returned 0x3 [0141.917] SetLastError (dwErrCode=0x3) [0141.917] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe\\Microsoft\\ctfmom.exe", nBufferLength=0x104, lpBuffer=0x10ff1dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe\\Microsoft\\ctfmom.exe", lpFilePart=0x0) returned 0x49 [0141.917] GetLastError () returned 0x3 [0141.917] SetLastError (dwErrCode=0x3) [0141.917] GetLastError () returned 0x3 [0141.918] SetLastError (dwErrCode=0x3) [0141.918] GetLastError () returned 0x3 [0141.918] SetLastError (dwErrCode=0x3) [0141.918] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x115e300 | out: hHeap=0x1150000) returned 1 [0141.918] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x115fbf0 | out: hHeap=0x1150000) returned 1 [0141.918] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x20) returned 0x116a900 [0141.918] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116a900 | out: hHeap=0x1150000) returned 1 [0141.918] CopyFileA (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ctfmom.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe\\Microsoft\\ctfmom.exe\\ctfmom.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ctfmom.exe\\microsoft\\ctfmom.exe\\ctfmom.exe"), bFailIfExists=1) returned 0 [0141.919] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2, phkResult=0x10ff4b0 | out: phkResult=0x10ff4b0*=0x100) returned 0x0 [0141.919] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", phkResult=0x10ff4b4 | out: phkResult=0x10ff4b4*=0x10c) returned 0x0 [0141.919] RegSetValueExA (in: hKey=0x100, lpValueName="ctfmom", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe\\Microsoft\\ctfmom.exe\" /noshow\\ctfmom.exe\" /noshow", cbData=0x104 | out: lpData="\"C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe\\Microsoft\\ctfmom.exe\" /noshow\\ctfmom.exe\" /noshow") returned 0x0 [0141.919] RegSetValueExA (in: hKey=0x10c, lpValueName="ctfmom", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe\\Microsoft\\ctfmom.exe\" /noshow\\ctfmom.exe\" /noshow", cbData=0x104 | out: lpData="\"C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\ctfmom.exe\\Microsoft\\ctfmom.exe\" /noshow\\ctfmom.exe\" /noshow") returned 0x0 [0141.919] RegCloseKey (hKey=0x100) returned 0x0 [0141.920] RegCloseKey (hKey=0x10c) returned 0x0 [0141.920] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x8) returned 0x116b038 [0141.920] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x8) returned 0x116b058 [0141.920] AreFileApisANSI () returned 1 [0141.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0xce6088, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0141.920] RtlAllocateHeap (HeapHandle=0x1150000, Flags=0x0, Size=0x1e) returned 0x116a928 [0141.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x9, lpMultiByteStr=0xce6088, cbMultiByte=-1, lpWideCharStr=0x116a928, cchWideChar=15 | out: lpWideCharStr="_CL_02f3a8c9sy") returned 15 [0141.920] CreateFileW (lpFileName="_CL_02f3a8c9sy" (normalized: "c:\\users\\fd1hvy\\desktop\\_cl_02f3a8c9sy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x10ff540, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.920] GetLastError () returned 0x2 [0141.920] GetLastError () returned 0x2 [0141.920] SetLastError (dwErrCode=0x2) [0141.921] GetLastError () returned 0x2 [0141.921] SetLastError (dwErrCode=0x2) [0141.921] GetLastError () returned 0x2 [0141.921] SetLastError (dwErrCode=0x2) [0141.921] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116a928 | out: hHeap=0x1150000) returned 1 [0141.921] GetModuleHandleW (lpModuleName=0x0) returned 0xcb0000 [0141.921] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x115ec68 | out: hHeap=0x1150000) returned 1 [0141.921] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164cd8 | out: hHeap=0x1150000) returned 1 [0141.921] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116b118 | out: hHeap=0x1150000) returned 1 [0141.921] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116a4e8 | out: hHeap=0x1150000) returned 1 [0141.921] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164ac8 | out: hHeap=0x1150000) returned 1 [0141.921] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164c28 | out: hHeap=0x1150000) returned 1 [0141.921] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164ca8 | out: hHeap=0x1150000) returned 1 [0141.921] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164c38 | out: hHeap=0x1150000) returned 1 [0141.921] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164de8 | out: hHeap=0x1150000) returned 1 [0141.921] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1164dc8 | out: hHeap=0x1150000) returned 1 [0141.922] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1156660 | out: hHeap=0x1150000) returned 1 [0141.922] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x115e590 | out: hHeap=0x1150000) returned 1 [0141.922] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1169898 | out: hHeap=0x1150000) returned 1 [0141.922] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x773a0000 [0141.925] GetProcAddress (hModule=0x773a0000, lpProcName="AppPolicyGetProcessTerminationMethod") returned 0x773a31f0 [0141.925] AppPolicyGetProcessTerminationMethod () returned 0x0 [0141.925] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x10ff6d0 | out: phModule=0x10ff6d0) returned 0 [0141.925] ExitProcess (uExitCode=0x1) [0141.926] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x116b098 | out: hHeap=0x1150000) returned 1 [0141.926] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x115f648 | out: hHeap=0x1150000) returned 1 [0141.926] HeapFree (in: hHeap=0x1150000, dwFlags=0x0, lpMem=0x1167238 | out: hHeap=0x1150000) returned 1 Thread: id = 176 os_tid = 0x1294 Process: id = "14" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x11efe000" os_pid = "0xf98" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x760" cmd_line = "\"C:\\Windows\\System32\\cmd.exe\" /C tasklist /FO TABLE > \"C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\processes.txt\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 174 os_tid = 0xd78 [0144.204] GetModuleHandleA (lpModuleName=0x0) returned 0x800000 [0144.204] __set_app_type (_Type=0x1) [0144.204] __p__fmode () returned 0x776f3c14 [0144.204] __p__commode () returned 0x776f49ec [0144.204] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x816fd0) returned 0x0 [0144.204] __getmainargs (in: _Argc=0x82d1a4, _Argv=0x82d1a8, _Env=0x82d1ac, _DoWildCard=0, _StartInfo=0x82d1b8 | out: _Argc=0x82d1a4, _Argv=0x82d1a8, _Env=0x82d1ac) returned 0 [0144.205] _onexit (_Func=0x818030) returned 0x818030 [0144.205] _onexit (_Func=0x818040) returned 0x818040 [0144.205] _onexit (_Func=0x818050) returned 0x818050 [0144.205] _onexit (_Func=0x818060) returned 0x818060 [0144.205] _onexit (_Func=0x818070) returned 0x818070 [0144.206] _onexit (_Func=0x818080) returned 0x818080 [0144.206] GetCurrentThreadId () returned 0xd78 [0144.206] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xd78) returned 0xbc [0144.206] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0144.206] GetProcAddress (hModule=0x772d0000, lpProcName="SetThreadUILanguage") returned 0x772e4f70 [0144.206] SetThreadUILanguage (LangId=0x0) returned 0x2a00409 [0144.948] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0144.948] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2d8fee0 | out: phkResult=0x2d8fee0*=0x0) returned 0x2 [0144.948] VirtualQuery (in: lpAddress=0x2d8feeb, lpBuffer=0x2d8fe98, dwLength=0x1c | out: lpBuffer=0x2d8fe98*(BaseAddress=0x2d8f000, AllocationBase=0x2c90000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0144.948] VirtualQuery (in: lpAddress=0x2c90000, lpBuffer=0x2d8fe98, dwLength=0x1c | out: lpBuffer=0x2d8fe98*(BaseAddress=0x2c90000, AllocationBase=0x2c90000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0144.948] VirtualQuery (in: lpAddress=0x2c91000, lpBuffer=0x2d8fe98, dwLength=0x1c | out: lpBuffer=0x2d8fe98*(BaseAddress=0x2c91000, AllocationBase=0x2c90000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0144.948] VirtualQuery (in: lpAddress=0x2c93000, lpBuffer=0x2d8fe98, dwLength=0x1c | out: lpBuffer=0x2d8fe98*(BaseAddress=0x2c93000, AllocationBase=0x2c90000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0144.948] VirtualQuery (in: lpAddress=0x2d90000, lpBuffer=0x2d8fe98, dwLength=0x1c | out: lpBuffer=0x2d8fe98*(BaseAddress=0x2d90000, AllocationBase=0x2d90000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0144.948] GetConsoleOutputCP () returned 0x1b5 [0145.884] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x833850 | out: lpCPInfo=0x833850) returned 1 [0145.884] SetConsoleCtrlHandler (HandlerRoutine=0x827260, Add=1) returned 1 [0145.884] _get_osfhandle (_FileHandle=1) returned 0x90 [0145.884] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x83388c | out: lpMode=0x83388c) returned 1 [0146.136] _get_osfhandle (_FileHandle=0) returned 0x8c [0146.136] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x833888 | out: lpMode=0x833888) returned 1 [0146.320] _get_osfhandle (_FileHandle=1) returned 0x90 [0146.320] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0146.416] _get_osfhandle (_FileHandle=1) returned 0x90 [0146.416] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x833890 | out: lpMode=0x833890) returned 1 [0146.516] _get_osfhandle (_FileHandle=1) returned 0x90 [0146.516] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0147.155] _get_osfhandle (_FileHandle=0) returned 0x8c [0147.155] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0x833894 | out: lpMode=0x833894) returned 1 [0148.142] _get_osfhandle (_FileHandle=0) returned 0x8c [0148.142] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0148.426] GetEnvironmentStringsW () returned 0x2e34cf0* [0148.426] GetProcessHeap () returned 0x2e30000 [0148.426] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0xaca) returned 0x2e357c8 [0148.427] FreeEnvironmentStringsA (penv="A") returned 1 [0148.427] GetProcessHeap () returned 0x2e30000 [0148.427] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x4) returned 0x2e347d0 [0148.427] GetEnvironmentStringsW () returned 0x2e34cf0* [0148.427] GetProcessHeap () returned 0x2e30000 [0148.427] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0xaca) returned 0x2e362a0 [0148.427] FreeEnvironmentStringsA (penv="A") returned 1 [0148.427] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2d8ee3c | out: phkResult=0x2d8ee3c*=0xcc) returned 0x0 [0148.427] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x0, lpData=0x2d8ee48*=0xc5, lpcbData=0x2d8ee40*=0x1000) returned 0x2 [0148.427] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x4, lpData=0x2d8ee48*=0x1, lpcbData=0x2d8ee40*=0x4) returned 0x0 [0148.427] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x0, lpData=0x2d8ee48*=0x1, lpcbData=0x2d8ee40*=0x1000) returned 0x2 [0148.427] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x4, lpData=0x2d8ee48*=0x0, lpcbData=0x2d8ee40*=0x4) returned 0x0 [0148.427] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x4, lpData=0x2d8ee48*=0x40, lpcbData=0x2d8ee40*=0x4) returned 0x0 [0148.427] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x4, lpData=0x2d8ee48*=0x40, lpcbData=0x2d8ee40*=0x4) returned 0x0 [0148.427] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x0, lpData=0x2d8ee48*=0x40, lpcbData=0x2d8ee40*=0x1000) returned 0x2 [0148.427] RegCloseKey (hKey=0xcc) returned 0x0 [0148.428] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2d8ee3c | out: phkResult=0x2d8ee3c*=0xcc) returned 0x0 [0148.428] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x0, lpData=0x2d8ee48*=0x40, lpcbData=0x2d8ee40*=0x1000) returned 0x2 [0148.428] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x4, lpData=0x2d8ee48*=0x1, lpcbData=0x2d8ee40*=0x4) returned 0x0 [0148.428] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x0, lpData=0x2d8ee48*=0x1, lpcbData=0x2d8ee40*=0x1000) returned 0x2 [0148.428] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x4, lpData=0x2d8ee48*=0x0, lpcbData=0x2d8ee40*=0x4) returned 0x0 [0148.428] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x4, lpData=0x2d8ee48*=0x9, lpcbData=0x2d8ee40*=0x4) returned 0x0 [0148.428] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x4, lpData=0x2d8ee48*=0x9, lpcbData=0x2d8ee40*=0x4) returned 0x0 [0148.428] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2d8ee44, lpData=0x2d8ee48, lpcbData=0x2d8ee40*=0x1000 | out: lpType=0x2d8ee44*=0x0, lpData=0x2d8ee48*=0x9, lpcbData=0x2d8ee40*=0x1000) returned 0x2 [0148.428] RegCloseKey (hKey=0xcc) returned 0x0 [0148.428] time (in: timer=0x0 | out: timer=0x0) returned 0x5f705279 [0148.428] srand (_Seed=0x5f705279) [0148.428] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /C tasklist /FO TABLE > \"C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\processes.txt\"" [0148.428] malloc (_Size=0x4000) returned 0x31721f0 [0148.429] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /C tasklist /FO TABLE > \"C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\processes.txt\"" [0148.429] malloc (_Size=0xffce) returned 0x3180048 [0148.429] ??_V@YAXPAX@Z () returned 0x2d8fe20 [0148.430] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x3180048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0148.430] malloc (_Size=0xffce) returned 0x3190020 [0148.430] ??_V@YAXPAX@Z () returned 0x2d8fbf4 [0148.430] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3190020, nSize=0x7fe7 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0148.431] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0148.431] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0148.431] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0148.431] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0148.431] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0148.431] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0148.431] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0148.431] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0148.431] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0148.431] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0148.431] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0148.431] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0148.431] GetProcessHeap () returned 0x2e30000 [0148.432] RtlFreeHeap (HeapHandle=0x2e30000, Flags=0x0, BaseAddress=0x2e357c8) returned 1 [0148.432] GetEnvironmentStringsW () returned 0x2e34cf0* [0148.432] GetProcessHeap () returned 0x2e30000 [0148.432] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0xae2) returned 0x2e37868 [0148.432] FreeEnvironmentStringsA (penv="A") returned 1 [0148.432] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0148.432] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0148.432] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0148.432] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0148.432] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0148.432] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0148.432] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0148.432] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0148.432] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0148.432] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0148.432] malloc (_Size=0xffce) returned 0x319fff8 [0148.432] ??_V@YAXPAX@Z () returned 0x2d8f98c [0148.433] GetProcessHeap () returned 0x2e30000 [0148.433] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x38) returned 0x2e30ae0 [0148.433] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x319fff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0148.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x319fff8, lpFilePart=0x2d8f9d8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x2d8f9d8*="Desktop") returned 0x17 [0148.433] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0148.434] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x2d8f758 | out: lpFindFileData=0x2d8f758*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x2e30b20 [0148.434] FindClose (in: hFindFile=0x2e30b20 | out: hFindFile=0x2e30b20) returned 1 [0148.434] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x2d8f758 | out: lpFindFileData=0x2d8f758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x2e30b20 [0148.434] FindClose (in: hFindFile=0x2e30b20 | out: hFindFile=0x2e30b20) returned 1 [0148.434] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x2d8f758 | out: lpFindFileData=0x2d8f758*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1381d081, ftLastAccessTime.dwHighDateTime=0x1d694ab, ftLastWriteTime.dwLowDateTime=0x1381d081, ftLastWriteTime.dwHighDateTime=0x1d694ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x2e30b20 [0148.434] FindClose (in: hFindFile=0x2e30b20 | out: hFindFile=0x2e30b20) returned 1 [0148.435] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0148.435] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0148.435] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0148.435] GetProcessHeap () returned 0x2e30000 [0148.435] RtlFreeHeap (HeapHandle=0x2e30000, Flags=0x0, BaseAddress=0x2e37868) returned 1 [0148.435] GetEnvironmentStringsW () returned 0x2e34cf0* [0148.435] GetProcessHeap () returned 0x2e30000 [0148.435] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0xb1a) returned 0x2e36d78 [0148.435] FreeEnvironmentStringsA (penv="=") returned 1 [0148.435] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x3180048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0148.435] GetProcessHeap () returned 0x2e30000 [0148.435] RtlFreeHeap (HeapHandle=0x2e30000, Flags=0x0, BaseAddress=0x2e30ae0) returned 1 [0148.435] ??_V@YAXPAX@Z () returned 0x1 [0148.435] ??_V@YAXPAX@Z () returned 0x1 [0148.435] GetProcessHeap () returned 0x2e30000 [0148.435] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x400e) returned 0x2e38e80 [0148.436] GetProcessHeap () returned 0x2e30000 [0148.436] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x120) returned 0x2e378a0 [0148.436] GetProcessHeap () returned 0x2e30000 [0148.436] RtlFreeHeap (HeapHandle=0x2e30000, Flags=0x0, BaseAddress=0x2e38e80) returned 1 [0148.436] GetConsoleOutputCP () returned 0x1b5 [0149.387] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x833850 | out: lpCPInfo=0x833850) returned 1 [0149.387] GetUserDefaultLCID () returned 0x409 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x82f82c, cchData=8 | out: lpLCData=":") returned 2 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2d8fd48, cchData=128 | out: lpLCData="0") returned 2 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2d8fd48, cchData=128 | out: lpLCData="0") returned 2 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2d8fd48, cchData=128 | out: lpLCData="1") returned 2 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x82f81c, cchData=8 | out: lpLCData="/") returned 2 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x82f7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x82f778, cchData=32 | out: lpLCData="Tue") returned 4 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x82f738, cchData=32 | out: lpLCData="Wed") returned 4 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x82f6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x82f6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x82f678, cchData=32 | out: lpLCData="Sat") returned 4 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x82f638, cchData=32 | out: lpLCData="Sun") returned 4 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x82f80c, cchData=8 | out: lpLCData=".") returned 2 [0149.388] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x82f7f8, cchData=8 | out: lpLCData=",") returned 2 [0149.388] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0149.390] GetProcessHeap () returned 0x2e30000 [0149.390] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x0, Size=0x20c) returned 0x2e37a10 [0149.390] GetConsoleTitleW (in: lpConsoleTitle=0x2e37a10, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1c [0150.332] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0150.332] GetProcAddress (hModule=0x772d0000, lpProcName="CopyFileExW") returned 0x772e4330 [0150.332] GetProcAddress (hModule=0x772d0000, lpProcName="IsDebuggerPresent") returned 0x772e5930 [0150.332] GetProcAddress (hModule=0x772d0000, lpProcName="SetConsoleInputExeNameW") returned 0x74d009d0 [0150.332] ??_V@YAXPAX@Z () returned 0x1 [0150.333] GetProcessHeap () returned 0x2e30000 [0150.333] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x400a) returned 0x2e38e80 [0150.333] GetProcessHeap () returned 0x2e30000 [0150.333] RtlFreeHeap (HeapHandle=0x2e30000, Flags=0x0, BaseAddress=0x2e38e80) returned 1 [0150.334] _wcsicmp (_String1="tasklist", _String2=")") returned 75 [0150.334] _wcsicmp (_String1="FOR", _String2="tasklist") returned -14 [0150.334] _wcsicmp (_String1="FOR/?", _String2="tasklist") returned -14 [0150.334] _wcsicmp (_String1="IF", _String2="tasklist") returned -11 [0150.334] _wcsicmp (_String1="IF/?", _String2="tasklist") returned -11 [0150.334] _wcsicmp (_String1="REM", _String2="tasklist") returned -2 [0150.334] _wcsicmp (_String1="REM/?", _String2="tasklist") returned -2 [0150.334] GetProcessHeap () returned 0x2e30000 [0150.334] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x58) returned 0x2e37c28 [0150.334] GetProcessHeap () returned 0x2e30000 [0150.334] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x1a) returned 0x2e37c88 [0150.334] GetProcessHeap () returned 0x2e30000 [0150.335] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x20) returned 0x2e37cb0 [0150.335] GetProcessHeap () returned 0x2e30000 [0150.335] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x20) returned 0x2e37cd8 [0150.339] GetProcessHeap () returned 0x2e30000 [0150.339] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0xf2) returned 0x2e37d00 [0150.340] malloc (_Size=0xffce) returned 0x31926a0 [0150.340] ??_V@YAXPAX@Z () returned 0x2d8fc04 [0150.340] GetProcessHeap () returned 0x2e30000 [0150.340] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x18) returned 0x2e37e00 [0150.340] _get_osfhandle (_FileHandle=1) returned 0x90 [0150.340] _get_osfhandle (_FileHandle=1) returned 0x90 [0150.341] _get_osfhandle (_FileHandle=1) returned 0x90 [0150.341] GetFileType (hFile=0x90) returned 0x2 [0150.341] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0150.341] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x2d8fc2c | out: lpMode=0x2d8fc2c) returned 1 [0150.966] _dup (_FileHandle=1) returned 3 [0150.967] _close (_FileHandle=1) returned 0 [0150.967] _wcsicmp (_String1="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\processes.txt", _String2="con") returned -53 [0150.967] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\processes.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\3574ab5307973278a085288fd98393ab\\a374bfdbdd1bc28c24c1762625e80fd0\\processes.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x2d8fc08, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0150.971] _open_osfhandle (_OSFileHandle=0x90, _Flags=8) returned 1 [0150.971] ??_V@YAXPAX@Z () returned 0x1 [0150.971] GetConsoleTitleW (in: lpConsoleTitle=0x2d8fc40, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1c [0152.232] malloc (_Size=0xffce) returned 0x31926a0 [0152.232] ??_V@YAXPAX@Z () returned 0x2d8f9cc [0152.232] malloc (_Size=0xffce) returned 0x31a2678 [0152.232] ??_V@YAXPAX@Z () returned 0x2d8f784 [0152.233] _wcsicmp (_String1="tasklist", _String2="DIR") returned 16 [0152.233] _wcsicmp (_String1="tasklist", _String2="ERASE") returned 15 [0152.233] _wcsicmp (_String1="tasklist", _String2="DEL") returned 16 [0152.234] _wcsicmp (_String1="tasklist", _String2="TYPE") returned -24 [0152.234] _wcsicmp (_String1="tasklist", _String2="COPY") returned 17 [0152.234] _wcsicmp (_String1="tasklist", _String2="CD") returned 17 [0152.234] _wcsicmp (_String1="tasklist", _String2="CHDIR") returned 17 [0152.234] _wcsicmp (_String1="tasklist", _String2="RENAME") returned 2 [0152.234] _wcsicmp (_String1="tasklist", _String2="REN") returned 2 [0152.234] _wcsicmp (_String1="tasklist", _String2="ECHO") returned 15 [0152.234] _wcsicmp (_String1="tasklist", _String2="SET") returned 1 [0152.234] _wcsicmp (_String1="tasklist", _String2="PAUSE") returned 4 [0152.234] _wcsicmp (_String1="tasklist", _String2="DATE") returned 16 [0152.234] _wcsicmp (_String1="tasklist", _String2="TIME") returned -8 [0152.234] _wcsicmp (_String1="tasklist", _String2="PROMPT") returned 4 [0152.234] _wcsicmp (_String1="tasklist", _String2="MD") returned 7 [0152.234] _wcsicmp (_String1="tasklist", _String2="MKDIR") returned 7 [0152.234] _wcsicmp (_String1="tasklist", _String2="RD") returned 2 [0152.234] _wcsicmp (_String1="tasklist", _String2="RMDIR") returned 2 [0152.234] _wcsicmp (_String1="tasklist", _String2="PATH") returned 4 [0152.234] _wcsicmp (_String1="tasklist", _String2="GOTO") returned 13 [0152.234] _wcsicmp (_String1="tasklist", _String2="SHIFT") returned 1 [0152.234] _wcsicmp (_String1="tasklist", _String2="CLS") returned 17 [0152.234] _wcsicmp (_String1="tasklist", _String2="CALL") returned 17 [0152.234] _wcsicmp (_String1="tasklist", _String2="VERIFY") returned -2 [0152.234] _wcsicmp (_String1="tasklist", _String2="VER") returned -2 [0152.234] _wcsicmp (_String1="tasklist", _String2="VOL") returned -2 [0152.234] _wcsicmp (_String1="tasklist", _String2="EXIT") returned 15 [0152.234] _wcsicmp (_String1="tasklist", _String2="SETLOCAL") returned 1 [0152.235] _wcsicmp (_String1="tasklist", _String2="ENDLOCAL") returned 15 [0152.235] _wcsicmp (_String1="tasklist", _String2="TITLE") returned -8 [0152.235] _wcsicmp (_String1="tasklist", _String2="START") returned 1 [0152.235] _wcsicmp (_String1="tasklist", _String2="DPATH") returned 16 [0152.235] _wcsicmp (_String1="tasklist", _String2="KEYS") returned 9 [0152.235] _wcsicmp (_String1="tasklist", _String2="MOVE") returned 7 [0152.235] _wcsicmp (_String1="tasklist", _String2="PUSHD") returned 4 [0152.235] _wcsicmp (_String1="tasklist", _String2="POPD") returned 4 [0152.235] _wcsicmp (_String1="tasklist", _String2="ASSOC") returned 19 [0152.235] _wcsicmp (_String1="tasklist", _String2="FTYPE") returned 14 [0152.235] _wcsicmp (_String1="tasklist", _String2="BREAK") returned 18 [0152.235] _wcsicmp (_String1="tasklist", _String2="COLOR") returned 17 [0152.235] _wcsicmp (_String1="tasklist", _String2="MKLINK") returned 7 [0152.235] _wcsicmp (_String1="tasklist", _String2="DIR") returned 16 [0152.235] _wcsicmp (_String1="tasklist", _String2="ERASE") returned 15 [0152.235] _wcsicmp (_String1="tasklist", _String2="DEL") returned 16 [0152.235] _wcsicmp (_String1="tasklist", _String2="TYPE") returned -24 [0152.235] _wcsicmp (_String1="tasklist", _String2="COPY") returned 17 [0152.235] _wcsicmp (_String1="tasklist", _String2="CD") returned 17 [0152.235] _wcsicmp (_String1="tasklist", _String2="CHDIR") returned 17 [0152.235] _wcsicmp (_String1="tasklist", _String2="RENAME") returned 2 [0152.235] _wcsicmp (_String1="tasklist", _String2="REN") returned 2 [0152.235] _wcsicmp (_String1="tasklist", _String2="ECHO") returned 15 [0152.235] _wcsicmp (_String1="tasklist", _String2="SET") returned 1 [0152.235] _wcsicmp (_String1="tasklist", _String2="PAUSE") returned 4 [0152.235] _wcsicmp (_String1="tasklist", _String2="DATE") returned 16 [0152.235] _wcsicmp (_String1="tasklist", _String2="TIME") returned -8 [0152.235] _wcsicmp (_String1="tasklist", _String2="PROMPT") returned 4 [0152.236] _wcsicmp (_String1="tasklist", _String2="MD") returned 7 [0152.236] _wcsicmp (_String1="tasklist", _String2="MKDIR") returned 7 [0152.236] _wcsicmp (_String1="tasklist", _String2="RD") returned 2 [0152.236] _wcsicmp (_String1="tasklist", _String2="RMDIR") returned 2 [0152.236] _wcsicmp (_String1="tasklist", _String2="PATH") returned 4 [0152.236] _wcsicmp (_String1="tasklist", _String2="GOTO") returned 13 [0152.236] _wcsicmp (_String1="tasklist", _String2="SHIFT") returned 1 [0152.236] _wcsicmp (_String1="tasklist", _String2="CLS") returned 17 [0152.236] _wcsicmp (_String1="tasklist", _String2="CALL") returned 17 [0152.236] _wcsicmp (_String1="tasklist", _String2="VERIFY") returned -2 [0152.236] _wcsicmp (_String1="tasklist", _String2="VER") returned -2 [0152.236] _wcsicmp (_String1="tasklist", _String2="VOL") returned -2 [0152.236] _wcsicmp (_String1="tasklist", _String2="EXIT") returned 15 [0152.236] _wcsicmp (_String1="tasklist", _String2="SETLOCAL") returned 1 [0152.236] _wcsicmp (_String1="tasklist", _String2="ENDLOCAL") returned 15 [0152.236] _wcsicmp (_String1="tasklist", _String2="TITLE") returned -8 [0152.236] _wcsicmp (_String1="tasklist", _String2="START") returned 1 [0152.236] _wcsicmp (_String1="tasklist", _String2="DPATH") returned 16 [0152.236] _wcsicmp (_String1="tasklist", _String2="KEYS") returned 9 [0152.236] _wcsicmp (_String1="tasklist", _String2="MOVE") returned 7 [0152.236] _wcsicmp (_String1="tasklist", _String2="PUSHD") returned 4 [0152.236] _wcsicmp (_String1="tasklist", _String2="POPD") returned 4 [0152.236] _wcsicmp (_String1="tasklist", _String2="ASSOC") returned 19 [0152.236] _wcsicmp (_String1="tasklist", _String2="FTYPE") returned 14 [0152.236] _wcsicmp (_String1="tasklist", _String2="BREAK") returned 18 [0152.236] _wcsicmp (_String1="tasklist", _String2="COLOR") returned 17 [0152.236] _wcsicmp (_String1="tasklist", _String2="MKLINK") returned 7 [0152.236] _wcsicmp (_String1="tasklist", _String2="FOR") returned 14 [0152.236] _wcsicmp (_String1="tasklist", _String2="IF") returned 11 [0152.237] _wcsicmp (_String1="tasklist", _String2="REM") returned 2 [0152.237] ??_V@YAXPAX@Z () returned 0x1 [0152.237] GetProcessHeap () returned 0x2e30000 [0152.237] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0xffd6) returned 0x2e38e80 [0152.238] GetProcessHeap () returned 0x2e30000 [0152.238] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x32) returned 0x2e37e20 [0152.238] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17 [0152.238] malloc (_Size=0xffce) returned 0x31a2678 [0152.238] ??_V@YAXPAX@Z () returned 0x2d8f504 [0152.239] GetProcessHeap () returned 0x2e30000 [0152.239] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x1ffa4) returned 0x2e48e60 [0152.241] SetErrorMode (uMode=0x0) returned 0x0 [0152.242] SetErrorMode (uMode=0x1) returned 0x0 [0152.242] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x2e48e68, lpFilePart=0x2d8f524 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x2d8f524*="Desktop") returned 0x17 [0152.242] SetErrorMode (uMode=0x0) returned 0x1 [0152.242] GetProcessHeap () returned 0x2e30000 [0152.242] RtlReAllocateHeap (Heap=0x2e30000, Flags=0x0, Ptr=0x2e48e60, Size=0x4a) returned 0x2e48e60 [0152.242] GetProcessHeap () returned 0x2e30000 [0152.242] RtlSizeHeap (HeapHandle=0x2e30000, Flags=0x0, MemoryPointer=0x2e48e60) returned 0x4a [0152.242] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0152.242] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0152.243] GetProcessHeap () returned 0x2e30000 [0152.243] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x1b4) returned 0x2e37e60 [0152.243] GetProcessHeap () returned 0x2e30000 [0152.243] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x360) returned 0x2e30ae0 [0152.248] GetProcessHeap () returned 0x2e30000 [0152.249] RtlReAllocateHeap (Heap=0x2e30000, Flags=0x0, Ptr=0x2e30ae0, Size=0x1b6) returned 0x2e30ae0 [0152.249] GetProcessHeap () returned 0x2e30000 [0152.249] RtlSizeHeap (HeapHandle=0x2e30000, Flags=0x0, MemoryPointer=0x2e30ae0) returned 0x1b6 [0152.249] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x82f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0152.249] GetProcessHeap () returned 0x2e30000 [0152.249] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0xe0) returned 0x2e38020 [0152.249] GetProcessHeap () returned 0x2e30000 [0152.249] RtlReAllocateHeap (Heap=0x2e30000, Flags=0x0, Ptr=0x2e38020, Size=0x76) returned 0x2e38020 [0152.249] GetProcessHeap () returned 0x2e30000 [0152.249] RtlSizeHeap (HeapHandle=0x2e30000, Flags=0x0, MemoryPointer=0x2e38020) returned 0x76 [0152.254] GetProcessHeap () returned 0x2e30000 [0152.254] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x0, Size=0x14) returned 0x2e380e0 [0152.254] FindClose (in: hFindFile=0x2e380a0 | out: hFindFile=0x2e380a0) returned 1 [0152.254] GetProcessHeap () returned 0x2e30000 [0152.254] RtlReAllocateHeap (Heap=0x2e30000, Flags=0x0, Ptr=0x2e380e0, Size=0x4) returned 0x2e380e0 [0152.254] FindClose (in: hFindFile=0x2e380a0 | out: hFindFile=0x2e380a0) returned 1 [0152.255] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0152.255] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0152.255] ??_V@YAXPAX@Z () returned 0x1 [0152.255] GetConsoleTitleW (in: lpConsoleTitle=0x2d8f7b4, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1c [0153.089] InitializeProcThreadAttributeList (in: lpAttributeList=0x2d8f6e0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2d8f6cc | out: lpAttributeList=0x2d8f6e0, lpSize=0x2d8f6cc) returned 1 [0153.089] UpdateProcThreadAttribute (in: lpAttributeList=0x2d8f6e0, dwFlags=0x0, Attribute=0x60001, lpValue=0x2d8f6c8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2d8f6e0, lpPreviousValue=0x0) returned 1 [0153.089] GetStartupInfoW (in: lpStartupInfo=0x2d8f718 | out: lpStartupInfo=0x2d8f718*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0153.089] GetProcessHeap () returned 0x2e30000 [0153.089] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0x18) returned 0x2e380a0 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0153.090] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0153.091] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0153.091] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0153.091] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0153.091] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0153.091] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0153.091] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0153.091] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0153.091] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0153.091] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0153.091] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0153.091] GetProcessHeap () returned 0x2e30000 [0153.091] RtlFreeHeap (HeapHandle=0x2e30000, Flags=0x0, BaseAddress=0x2e380a0) returned 1 [0153.091] GetProcessHeap () returned 0x2e30000 [0153.091] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0xa) returned 0x2e380a0 [0153.091] lstrcmpW (lpString1="\\tasklist.exe", lpString2="\\XCOPY.EXE") returned -1 [0153.093] _get_osfhandle (_FileHandle=1) returned 0x90 [0153.093] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) returned 0 [0153.093] _get_osfhandle (_FileHandle=0) returned 0x8c [0153.093] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1f7) returned 1 [0153.386] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\tasklist.exe", lpCommandLine="tasklist /FO TABLE ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x2d8f668*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="tasklist /FO TABLE ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2d8f6b4 | out: lpCommandLine="tasklist /FO TABLE ", lpProcessInformation=0x2d8f6b4*(hProcess=0xe4, hThread=0xe0, dwProcessId=0x1360, dwThreadId=0x137c)) returned 1 [0154.193] CloseHandle (hObject=0xe0) returned 1 [0154.223] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0154.223] GetProcessHeap () returned 0x2e30000 [0154.223] RtlFreeHeap (HeapHandle=0x2e30000, Flags=0x0, BaseAddress=0x2e36d78) returned 1 [0154.223] GetEnvironmentStringsW () returned 0x2e36d78* [0154.223] GetProcessHeap () returned 0x2e30000 [0154.223] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0xb1a) returned 0x2e34cf0 [0154.223] FreeEnvironmentStringsA (penv="=") returned 1 [0154.223] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0 [0171.801] GetExitCodeProcess (in: hProcess=0xe4, lpExitCode=0x2d8f64c | out: lpExitCode=0x2d8f64c*=0x40010004) returned 1 [0171.802] CloseHandle (hObject=0xe4) returned 1 [0171.802] _vsnwprintf (in: _Buffer=0x2d8f734, _BufferCount=0x13, _Format="%08X", _ArgList=0x2d8f654 | out: _Buffer="40010004") returned 8 [0171.802] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="40010004") returned 1 [0171.803] GetProcessHeap () returned 0x2e30000 [0171.803] RtlFreeHeap (HeapHandle=0x2e30000, Flags=0x0, BaseAddress=0x2e34cf0) returned 1 [0171.804] GetEnvironmentStringsW () returned 0x2e34cf0* [0171.804] GetProcessHeap () returned 0x2e30000 [0171.804] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0xb40) returned 0x2e49a00 [0171.809] FreeEnvironmentStringsA (penv="=") returned 1 [0171.818] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0171.818] GetProcessHeap () returned 0x2e30000 [0171.818] RtlFreeHeap (HeapHandle=0x2e30000, Flags=0x0, BaseAddress=0x2e49a00) returned 1 [0171.818] GetEnvironmentStringsW () returned 0x2e34cf0* [0171.818] GetProcessHeap () returned 0x2e30000 [0171.818] RtlAllocateHeap (HeapHandle=0x2e30000, Flags=0x8, Size=0xb40) returned 0x2e49a00 [0171.818] FreeEnvironmentStringsA (penv="=") returned 1 [0171.818] GetProcessHeap () returned 0x2e30000 [0171.819] RtlFreeHeap (HeapHandle=0x2e30000, Flags=0x0, BaseAddress=0x2e380a0) returned 1 [0171.819] DeleteProcThreadAttributeList (in: lpAttributeList=0x2d8f6e0 | out: lpAttributeList=0x2d8f6e0) [0171.819] ??_V@YAXPAX@Z () returned 0x1 [0171.819] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0171.823] _close (_FileHandle=3) returned 0 [0171.823] _get_osfhandle (_FileHandle=1) returned 0x90 [0171.823] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x3) Thread: id = 186 os_tid = 0x1368 Thread: id = 232 os_tid = 0x131c [0172.074] ??_V@YAXPAX@Z () returned 0x1 Process: id = "15" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x2a123000" os_pid = "0xf90" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "14" os_parent_pid = "0xf98" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 175 os_tid = 0xf88 Thread: id = 178 os_tid = 0x1398 Thread: id = 179 os_tid = 0x13a0 Thread: id = 182 os_tid = 0x1060 Thread: id = 184 os_tid = 0x1364 Process: id = "16" image_name = "tasklist.exe" filename = "c:\\windows\\syswow64\\tasklist.exe" page_root = "0x104cf000" os_pid = "0x1360" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "14" os_parent_pid = "0xf98" cmd_line = "tasklist /FO TABLE " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 190 os_tid = 0x137c Thread: id = 191 os_tid = 0x1378 Thread: id = 192 os_tid = 0x1384 Thread: id = 196 os_tid = 0x13b4 Thread: id = 197 os_tid = 0x13b0 Thread: id = 198 os_tid = 0x13bc Process: id = "17" image_name = "sc.exe" filename = "c:\\windows\\system32\\sc.exe" page_root = "0x23da2000" os_pid = "0x1388" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x3ac" cmd_line = "C:\\WINDOWS\\system32\\sc.exe start wuauserv" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wisvc" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\WpnService" [0xe], "NT SERVICE\\wuauserv" [0xe], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009f6a" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 204 os_tid = 0x13e8 Process: id = "18" image_name = "wmiadap.exe" filename = "c:\\windows\\system32\\wbem\\wmiadap.exe" page_root = "0x21f93000" os_pid = "0xf24" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x3ac" cmd_line = "wmiadap.exe /F /T /R" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wisvc" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\WpnService" [0xe], "NT SERVICE\\wuauserv" [0xe], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009f6a" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 205 os_tid = 0x105c Thread: id = 207 os_tid = 0x13f0 Thread: id = 208 os_tid = 0x10d4 Thread: id = 234 os_tid = 0x1340 Thread: id = 235 os_tid = 0x12e4 Thread: id = 236 os_tid = 0x1280 Process: id = "19" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x738d0000" os_pid = "0x3d8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "8" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AJRouter" [0xa], "NT SERVICE\\AppIDSvc" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xa], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\icssvc" [0xa], "NT SERVICE\\lmhosts" [0xe], "NT SERVICE\\NgcCtnrSvc" [0xa], "NT SERVICE\\RmSvc" [0xa], "NT SERVICE\\TimeBrokerSvc" [0xa], "NT SERVICE\\TimeBroker" [0xa], "NT SERVICE\\vmictimesync" [0xa], "S-1-5-80-1495648203-2503502111-1597754693-3445174711-1316708627" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a38e" [0xc000000f], "LOCAL" [0x7] Thread: id = 210 os_tid = 0xf30 Thread: id = 211 os_tid = 0x134 Thread: id = 212 os_tid = 0xcd4 Thread: id = 213 os_tid = 0x510 Thread: id = 214 os_tid = 0xf64 Thread: id = 215 os_tid = 0x1354 Thread: id = 216 os_tid = 0xf38 Thread: id = 217 os_tid = 0xf34 Thread: id = 218 os_tid = 0x54c Thread: id = 219 os_tid = 0x444 Thread: id = 220 os_tid = 0x418 Thread: id = 221 os_tid = 0x410 Thread: id = 222 os_tid = 0x35c Thread: id = 223 os_tid = 0x3f4 Thread: id = 224 os_tid = 0x3f0 Thread: id = 225 os_tid = 0x33c Thread: id = 226 os_tid = 0x238 Thread: id = 227 os_tid = 0x154 Thread: id = 228 os_tid = 0x3dc Process: id = "20" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x5b528000" os_pid = "0x1fc" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "child_process" parent_id = "17" os_parent_pid = "0x1388" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wisvc" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\WpnService" [0xe], "NT SERVICE\\wuauserv" [0xe], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009f6a" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 233 os_tid = 0x1244 Process: id = "21" image_name = "mpcmdrun.exe" filename = "c:\\program files\\windows defender\\mpcmdrun.exe" page_root = "0x7a08f000" os_pid = "0x1110" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x3d8" cmd_line = "\"C:\\Program Files\\Windows Defender\\mpcmdrun.exe\" -wdenable" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AJRouter" [0xa], "NT SERVICE\\AppIDSvc" [0xa], "NT SERVICE\\Dhcp" [0xe], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\icssvc" [0xa], "NT SERVICE\\lmhosts" [0xe], "NT SERVICE\\NgcCtnrSvc" [0xa], "NT SERVICE\\RmSvc" [0xa], "NT SERVICE\\TimeBrokerSvc" [0xe], "NT SERVICE\\TimeBroker" [0xe], "NT SERVICE\\vmictimesync" [0xa], "S-1-5-80-1495648203-2503502111-1597754693-3445174711-1316708627" [0xa], "NT SERVICE\\wscsvc" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000a38e" [0xc000000f], "LOCAL" [0x7] Thread: id = 239 os_tid = 0x1168 Process: id = "22" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x383d1000" os_pid = "0x378" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "21" os_parent_pid = "0x1110" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AJRouter" [0xa], "NT SERVICE\\AppIDSvc" [0xa], "NT SERVICE\\Dhcp" [0xe], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\icssvc" [0xa], "NT SERVICE\\lmhosts" [0xe], "NT SERVICE\\NgcCtnrSvc" [0xa], "NT SERVICE\\RmSvc" [0xa], "NT SERVICE\\TimeBrokerSvc" [0xe], "NT SERVICE\\TimeBroker" [0xe], "NT SERVICE\\vmictimesync" [0xa], "S-1-5-80-1495648203-2503502111-1597754693-3445174711-1316708627" [0xa], "NT SERVICE\\wscsvc" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000a38e" [0xc000000f], "LOCAL" [0x7] Thread: id = 240 os_tid = 0x11bc Thread: id = 241 os_tid = 0x11f4 Thread: id = 242 os_tid = 0x12c8